Commit Graph

46281 Commits

Author SHA1 Message Date
green
c371f84297 Make "CheckHostIP" default to off. This was proposed on -security and
earlier IRC, but despite my inital feeling against it, this seems
the more proper thing to do.

Proposed by:	rwatson
2000-02-25 03:04:29 +00:00
green
0366d2c301 The includes must be <openssl/.*\.h>, not <ssl/.*\.h>. 2000-02-25 01:53:12 +00:00
markm
21fb36353a remove more ports crud. 2000-02-24 23:54:00 +00:00
markm
5c706b5439 remove ports junk 2000-02-24 23:46:38 +00:00
markm
0af4aeb308 We have some new libraries; give them names. 2000-02-24 23:18:08 +00:00
markm
bff7ec50d4 Use libcrypto instead of libdes. 2000-02-24 23:15:42 +00:00
markm
f9f272e5d9 Run sshd at boot time if the sysadmin wants it. Also install
ssh[d] config files in the right place.
2000-02-24 23:12:04 +00:00
markm
9eff7bd88d Add userland tweakables for OpenSSH and OpenSSL. 2000-02-24 23:08:19 +00:00
markm
e5289f3e72 We have a new world order in libraries.
Goodbye libdes; Welcome libcrypto.
2000-02-24 23:03:16 +00:00
markm
953cf4676d Remove port components not needed in 4.n+
Submitted by:	Half the freaking planet....
2000-02-24 22:39:24 +00:00
markm
e8d811ec4a Use libcrypto instead of libdes.
Also - OpenSSH blesses us with a module for PAM.
2000-02-24 22:24:37 +00:00
markm
85a606a0dc Use libcrypto inst=ead if libdes. 2000-02-24 21:21:15 +00:00
markm
dcf4cb2763 Use libcrypto instead of libdes. 2000-02-24 21:18:08 +00:00
markm
8beab254e9 Use libcrypto instead of libdes. Upgrade for Heimdal-0.2p 2000-02-24 21:15:14 +00:00
markm
e8ccee3398 Use libcrypto instead of libdes. 2000-02-24 21:10:28 +00:00
markm
2c4c950699 Use libcrypto in place of libdes. 2000-02-24 21:06:22 +00:00
markm
6ca44f7f78 Use libcrypto instead of libdes. 2000-02-24 21:01:54 +00:00
markm
cff9a71c9b Use libcrypto in place of libdes. 2000-02-24 20:57:04 +00:00
dillon
5d28583063 Fix a 'freeing free block' panic in UFS. The problem occurs when the
filesystem fills up.  If the first indirect block exists and FFS is able
    to allocate deeper indirect blocks, but is not able to allocate the
    data block, FFS improperly unwinds the indirect blocks and leaves a
    block pointer hanging to a freed block.  This will cause a panic later
    when the file is removed.  The solution is to properly account for the
    first block-pointer-to-an-indirect-block we had to create in a balloc
    operation and then unwind it if a failure occurs.

Detective work by: Ian Dowse <iedowse@maths.tcd.ie>
Reviewed by: mckusick, Ian Dowse <iedowse@maths.tcd.ie>
Approved by: jkh
2000-02-24 20:43:20 +00:00
wilko
1631f75d5d Add some info on DP264. People familiar with this beast: please review
for correctness
2000-02-24 20:35:46 +00:00
markm
94f010f5ed Use libcrypto instead of libdes. 2000-02-24 20:21:16 +00:00
markm
b2ea89bb34 RIP libdes. All hail libcrypto! 2000-02-24 19:35:08 +00:00
markm
96cd3aa523 Get crypto from libcrypto, not libdes. 2000-02-24 19:28:31 +00:00
shin
1b1a8f567d Add length check to sbcreatecontrol().
Now this check is necessary because IPv6 source routing might use
  control data bigger than MLEN. (e.g. 16bytes IPv6 addr x 23 hops)
  Actually mbuf cluster should be used in uipc_socket.c:sbcreatecontrol()
  and uipc_syscalls.c:sockargs() when data size is bigger then MLEN,
  and such patches were already in KAME environment and have been
  confirmed to work well. I just forgot to merge them into 4.0, sorry.

  For safety, I'll postpone such patches until after 4.0 release.
  The effect of postponement is followings.
    -Ping6 source routing hops are limitted to around 6 or so.
    -If some apps do setsockopt IPV6_RTHDR and try to receive
     incoming IPv6 source routing info, it can't receive more
     than 6 hops source routing info.
     (But currently, no apps seems to be doing it.)

Approved by: jkh
2000-02-24 19:21:26 +00:00
markm
ac77f272c7 libdes is OBE 2000-02-24 19:08:24 +00:00
shin
ff4f728b7d Security fixes. (Just same as sbin/ping and usr.sbin/traceroute)
-Open socket() at first and then setuid() to actual user.
  -Allow ping6 preload option only for root.

Approved by: jkh

Submitted by: Neil Blakey-Milner <nbm@mithrandr.moria.org>
2000-02-24 19:06:05 +00:00
shin
bb6df383d0 Correctly print out "Connected to" hostname.
Temporal buffer was used for the hostname and freed before actually used.

Specified by: ru
Approved by: jkh
2000-02-24 19:01:38 +00:00
markm
0e496e9fb9 Build everything properly. This means:
o Don't b uild libdes.

o Crypto is now housed in libcrypto (with a compatability symlink to
  libdes)

o RSA may depend on RSAREF at your locale.

o OpenSSH is now a part of the base system.
2000-02-24 18:59:34 +00:00
shin
3a27ca758b -Remove IPv6 initialization failed interfaces from the list of
interfaces passed to rtadvd
-Comment out example sentences more completely
-Redirect error message of ifconfig output into /dev/null, to correctly
 find out working IPv6 interfaces

Approved by: jkh
2000-02-24 18:52:58 +00:00
shin
53ba5dc3ba Print ifname when sendmsg failed.
Approved by: jkh
2000-02-24 18:46:51 +00:00
markm
7e9db2a102 Add the OpenSSH userland-building Makefiles. 2000-02-24 17:00:55 +00:00
luigi
47db1cbbf1 Record and pack together all ipfw changes.
Approved-by: jordan
2000-02-24 16:20:37 +00:00
markm
34f04f23e7 Add the patches fom ports (QV: ports/security/openssh/patches/patch-*) 2000-02-24 15:29:42 +00:00
markm
b0392a39dd This commit was generated by cvs2svn to compensate for changes in r57429,
which included commits to RCS files with non-trunk default branches.
2000-02-24 14:29:47 +00:00
markm
fc557ff7d9 Vendor import of OpenSSH. 2000-02-24 14:29:47 +00:00
markm
54384d50aa Merge conflicts. 2000-02-24 13:37:41 +00:00
markm
1ee7ac4f2e Oops; forgot to add this. 2000-02-24 13:20:48 +00:00
markm
b496c18f68 Get this to the same level of functionality as old libdes. 2000-02-24 13:20:15 +00:00
markm
99a3e2ff44 This commit was generated by cvs2svn to compensate for changes in r57422,
which included commits to RCS files with non-trunk default branches.
2000-02-24 11:28:20 +00:00
markm
5ed96cd5da Vendor import of Heimdal 0.2p 2000-02-24 11:28:20 +00:00
markm
6ec6c4e167 This commit was generated by cvs2svn to compensate for changes in r57419,
which included commits to RCS files with non-trunk default branches.
2000-02-24 11:19:29 +00:00
markm
69414e22b9 Vendor import of Heimdal 0.2o 2000-02-24 11:19:29 +00:00
markm
4876f62e0a This commit was generated by cvs2svn to compensate for changes in r57416,
which included commits to RCS files with non-trunk default branches.
2000-02-24 11:07:16 +00:00
markm
fa8b1a96d3 Vendor import of Heimdal 0.2n 2000-02-24 11:07:16 +00:00
markm
547c22eb53 freefall/internat diff reducer 2000-02-24 10:38:40 +00:00
markm
1d4cb5c450 Freefall/Internat diff reducer. 2000-02-24 10:37:29 +00:00
markm
eaf517d608 Freefall/Internat diff reducer. 2000-02-24 10:21:56 +00:00
markm
efcc30e059 Freefall/Internat diff reducer. 2000-02-24 10:06:57 +00:00
markm
199292f95c Diff reducer. Comes from Internat. 2000-02-24 09:52:37 +00:00
markm
697e0549b1 Remove useless whitespace.
Part of big commit OK'ed by: JKH
2000-02-24 09:48:58 +00:00