en Copyright 2015 Java http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#856b6ee8138aeb0dd7b43225127970b1429d05d7 Split per-connection sshd-session binaryThis splits the user authentication code from the sshd-sessionbinary into a separate sshd-auth binary. This will be executed bysshd-session to complete the user authentication phase of theprotocol only.Splitting this code into a separate binary ensures that the crucialpre-authentication attack surface has an entirely disjoint addressspace from the code used for the rest of the connection. It alsoyields a small runtime memory saving as the authentication code willbe unloaded after thhe authentication phase completes.Joint work with markus@ feedback deraadt@Tested in snaps since last week List of files: /openbsd-src/usr.bin/ssh/Makefile Mon, 14 Oct 2024 01:57:50 +0000 djm <djm@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#71f11376417c30579eb9fbc67fa82334d840bd3f Start the process of splitting sshd into separate binaries. This stepsplits sshd into a listener and a session binary. More splits areplanned.After this changes, the listener binary will validate the configuration,load the hostkeys, listen on port 22 and manage MaxStartups only. Allsession handling will be performed by a new sshd-session binary that thelistener fork+execs.This reduces the listener process to the minimum necessary and sets usup for future work on the sshd-session binary.feedback/ok markus@ deraadt@NB. if you're updating via source, please restart sshd after installing,otherwise you run the risk of locking yourself out. List of files: /openbsd-src/usr.bin/ssh/Makefile Fri, 17 May 2024 00:30:23 +0000 djm <djm@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#19e6a92c9865f29100c220c1e46d9b4079b00ab2 ssh-agent support for U2F/FIDO keysfeedback & ok markus@ List of files: /openbsd-src/usr.bin/ssh/Makefile Thu, 31 Oct 2019 21:22:01 +0000 djm <djm@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#e34d28941f95b5b221076a95efc15767e72cf082 ssh/lib hasn't worked towards our code-sharing goals for a quit while,perhaps it is too verbose? Change each */Makefile to specifying exactlywhat sources that program requires, compiling it seperate. Maybe we'lliterate by sorting those into seperatable chunks, splitting up fileswhich contain common code + server/client specific code, or whatnot. Butthis isn't one step, or we'd have done it a long time ago..ok dtucker markus djm List of files: /openbsd-src/usr.bin/ssh/Makefile Sun, 10 Dec 2017 19:37:57 +0000 deraadt <deraadt@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#55b8f34cc59620747eade5abf92a41086e892a2c enable PKCS#11 code; ok djm List of files: /openbsd-src/usr.bin/ssh/Makefile Tue, 09 Feb 2010 08:55:31 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#e9a94b11b7b5e3e4acc7c03ca38575f2ea1c813c remove obsole scard code List of files: /openbsd-src/usr.bin/ssh/Makefile Mon, 08 Feb 2010 12:48:38 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#41503faf624b2f2cfce8a6beac1143f97e77ddbd replace our obsolete smartcard code with PKCS#11. ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdfssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11provider (shared library) while ssh-agent(1) delegates PKCS#11 toa forked a ssh-pkcs11-helper process.PKCS#11 is currently a compile time option.feedback and ok djm@; inspired by patches from Alon Bar-Lev List of files: /openbsd-src/usr.bin/ssh/Makefile Mon, 08 Feb 2010 10:50:20 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#fd5e0d822bb497ee7520c13f65a2af93b077160c Use ${INSTALL} instead of install; from art's amd64 tree.ok markus@ List of files: /openbsd-src/usr.bin/ssh/Makefile Mon, 01 Dec 2003 15:47:20 +0000 grange <grange@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#44c8244ece9217d496fc443fa69111407c31d7d7 add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authenticationin protocol v2 (needs to access the hostkeys). List of files: /openbsd-src/usr.bin/ssh/Makefile Thu, 23 May 2002 19:24:30 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#0662dc2cf69e4d5a441114988b247f3407262c96 move ssh config files to /etc/ssh List of files: /openbsd-src/usr.bin/ssh/Makefile Sat, 09 Feb 2002 17:37:34 +0000 deraadt <deraadt@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#a5860762115ac9a3cfe40bdee66dc088cdcd210f ssh java cardlet for smartcard support (source and uuencoded binary) List of files: /openbsd-src/usr.bin/ssh/Makefile Thu, 28 Jun 2001 21:55:27 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#740860f2ed2b1851231aee94d5e0931bffa05f9f Basic interactive sftp client; ok theo@ List of files: /openbsd-src/usr.bin/ssh/Makefile Sun, 04 Feb 2001 11:11:53 +0000 djm <djm@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#3846f8ffab394a5ba175a6d2fa3cc5abea2ce03f David Maziere's ssh-keyscan, ok niels@ List of files: /openbsd-src/usr.bin/ssh/Makefile Mon, 04 Dec 2000 19:24:01 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#b66fbe9e9ee825d745ca7fc389684e256119e10e implement a SFTP server. interops with sftp2, scp2 and the windowsclient from ssh.com List of files: /openbsd-src/usr.bin/ssh/Makefile Thu, 31 Aug 2000 21:52:23 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#492e465e145362048139efecde431b6c6aad1103 move common files to ./lib and link libssh.a, tested with and w/o obj List of files: /openbsd-src/usr.bin/ssh/Makefile Mon, 25 Oct 1999 20:27:26 +0000 markus <markus@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#b130d20687b09f3b66f243804f681cdc46e12f77 fix distribution target List of files: /openbsd-src/usr.bin/ssh/Makefile Mon, 27 Sep 1999 23:47:43 +0000 deraadt <deraadt@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#d29b4e99b91e0f732bab1b7cd13f4e8f2e13bbf9 distribution target List of files: /openbsd-src/usr.bin/ssh/Makefile Sun, 26 Sep 1999 22:29:50 +0000 deraadt <deraadt@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#ceff9734ccb2224aada73f6942a361fdf39c02d0 build ssh components using our build model List of files: /openbsd-src/usr.bin/ssh/Makefile Sun, 26 Sep 1999 21:47:52 +0000 deraadt <deraadt@openbsd.org> http://src.rcs.uwaterloo.ca:8080/history/openbsd-src/usr.bin/ssh/Makefile#84959968510b547c35dddcbd0b9dcce9f25fdf8f i bet a lot of people didn't know what ssh 1.2.16 had a nice license.well, except for the patent issues. someone in sweden (forget theirname at the moment) cleaned out most of the patented code, and nowthis code removes rsa code. when this is done, it will link againstlibssl, but the work isn't completely done yet. then we need to bringthis up to modern days, featurewise. List of files: /openbsd-src/usr.bin/ssh/Makefile Sun, 26 Sep 1999 20:53:32 +0000 deraadt <deraadt@openbsd.org>