Module Name: src Committed By: christos Date: Sun Aug 26 07:41:25 UTC 2018
Update of /cvsroot/src/crypto/external/bsd/openssh/dist In directory ivanova.netbsd.org:/tmp/cvs-serv20986 Log Message: Potentially-incompatible changes ================================ This release includes a number of changes that may affect existing configurations: * ssh-keygen(1): write OpenSSH format private keys by default instead of using OpenSSL's PEM format. The OpenSSH format, supported in OpenSSH releases since 2014 and described in the PROTOCOL.key file in the source distribution, offers substantially better protection against offline password guessing and supports key comments in private keys. If necessary, it is possible to write old PEM-style keys by adding "-m PEM" to ssh-keygen's arguments when generating or updating a key. * sshd(8): remove internal support for S/Key multiple factor authentication. S/Key may still be used via PAM or BSD auth. * ssh(1): remove vestigal support for running ssh(1) as setuid. This used to be required for hostbased authentication and the (long gone) rhosts-style authentication, but has not been necessary for a long time. Attempting to execute ssh as a setuid binary, or with uid != effective uid will now yield a fatal error at runtime. * sshd(8): the semantics of PubkeyAcceptedKeyTypes and the similar HostbasedAcceptedKeyTypes options have changed. These now specify signature algorithms that are accepted for their respective authentication mechanism, where previously they specified accepted key types. This distinction matters when using the RSA/SHA2 signature algorithms "rsa-sha2-256", "rsa-sha2-512" and their certificate counterparts. Configurations that override these options but omit these algorithm names may cause unexpected authentication failures (no action is required for configurations that accept the default for these options). * sshd(8): the precedence of session environment variables has changed. ~/.ssh/environment and environment="..." options in authorized_keys files can no longer override SSH_* variables set implicitly by sshd. * ssh(1)/sshd(8): the default IPQoS used by ssh/sshd has changed. They will now use DSCP AF21 for interactive traffic and CS1 for bulk. For a detailed rationale, please see the commit message: https://cvsweb.openbsd.org/src/usr.bin/ssh/readconf.c#rev1.284 Status: Vendor Tag: OPENSSH Release Tags: v78-20180824 C src/crypto/external/bsd/openssh/dist/match.c U src/crypto/external/bsd/openssh/dist/LICENCE U src/crypto/external/bsd/openssh/dist/PROTOCOL.agent C src/crypto/external/bsd/openssh/dist/OVERVIEW C src/crypto/external/bsd/openssh/dist/PROTOCOL U src/crypto/external/bsd/openssh/dist/PROTOCOL.chacha20poly1305 C src/crypto/external/bsd/openssh/dist/PROTOCOL.certkeys C src/crypto/external/bsd/openssh/dist/auth-bsdauth.c U src/crypto/external/bsd/openssh/dist/PROTOCOL.key U src/crypto/external/bsd/openssh/dist/PROTOCOL.krl U src/crypto/external/bsd/openssh/dist/PROTOCOL.mux U src/crypto/external/bsd/openssh/dist/README C src/crypto/external/bsd/openssh/dist/addrmatch.c U src/crypto/external/bsd/openssh/dist/atomicio.c U src/crypto/external/bsd/openssh/dist/atomicio.h C src/crypto/external/bsd/openssh/dist/auth-options.c C src/crypto/external/bsd/openssh/dist/auth-krb5.c C src/crypto/external/bsd/openssh/dist/auth2-hostbased.c C src/crypto/external/bsd/openssh/dist/auth-options.h C src/crypto/external/bsd/openssh/dist/auth-passwd.c U src/crypto/external/bsd/openssh/dist/krl.c C src/crypto/external/bsd/openssh/dist/auth-rhosts.c C src/crypto/external/bsd/openssh/dist/auth.c C src/crypto/external/bsd/openssh/dist/auth.h C src/crypto/external/bsd/openssh/dist/auth2-chall.c C src/crypto/external/bsd/openssh/dist/auth2-gss.c U src/crypto/external/bsd/openssh/dist/cipher-chachapoly.c C src/crypto/external/bsd/openssh/dist/auth2-kbdint.c C src/crypto/external/bsd/openssh/dist/auth2-none.c C src/crypto/external/bsd/openssh/dist/auth2-passwd.c C src/crypto/external/bsd/openssh/dist/auth2-pubkey.c C src/crypto/external/bsd/openssh/dist/auth2.c C src/crypto/external/bsd/openssh/dist/authfd.c C src/crypto/external/bsd/openssh/dist/authfd.h C src/crypto/external/bsd/openssh/dist/authfile.c U src/crypto/external/bsd/openssh/dist/authfile.h U src/crypto/external/bsd/openssh/dist/bitmap.c U src/crypto/external/bsd/openssh/dist/bitmap.h U src/crypto/external/bsd/openssh/dist/canohost.c U src/crypto/external/bsd/openssh/dist/canohost.h U src/crypto/external/bsd/openssh/dist/chacha.c U src/crypto/external/bsd/openssh/dist/chacha.h C src/crypto/external/bsd/openssh/dist/channels.c C src/crypto/external/bsd/openssh/dist/channels.h U src/crypto/external/bsd/openssh/dist/cipher-aesctr.c U src/crypto/external/bsd/openssh/dist/cipher-aesctr.h U src/crypto/external/bsd/openssh/dist/digest.h C src/crypto/external/bsd/openssh/dist/dh.c U src/crypto/external/bsd/openssh/dist/cipher-chachapoly.h U src/crypto/external/bsd/openssh/dist/cipher.c U src/crypto/external/bsd/openssh/dist/cipher.h U src/crypto/external/bsd/openssh/dist/cleanup.c C src/crypto/external/bsd/openssh/dist/clientloop.c C src/crypto/external/bsd/openssh/dist/clientloop.h C src/crypto/external/bsd/openssh/dist/compat.c C src/crypto/external/bsd/openssh/dist/compat.h U src/crypto/external/bsd/openssh/dist/crc32.c U src/crypto/external/bsd/openssh/dist/crc32.h U src/crypto/external/bsd/openssh/dist/crypto_api.h U src/crypto/external/bsd/openssh/dist/dh.h U src/crypto/external/bsd/openssh/dist/ge25519_base.data U src/crypto/external/bsd/openssh/dist/digest-libc.c U src/crypto/external/bsd/openssh/dist/digest-openssl.c U src/crypto/external/bsd/openssh/dist/dispatch.c U src/crypto/external/bsd/openssh/dist/dispatch.h U src/crypto/external/bsd/openssh/dist/dns.c U src/crypto/external/bsd/openssh/dist/dns.h U src/crypto/external/bsd/openssh/dist/ed25519.c U src/crypto/external/bsd/openssh/dist/fatal.c U src/crypto/external/bsd/openssh/dist/hash.c U src/crypto/external/bsd/openssh/dist/fe25519.c U src/crypto/external/bsd/openssh/dist/fe25519.h U src/crypto/external/bsd/openssh/dist/ge25519.c U src/crypto/external/bsd/openssh/dist/ge25519.h U src/crypto/external/bsd/openssh/dist/sshbuf-getput-basic.c U src/crypto/external/bsd/openssh/dist/groupaccess.c U src/crypto/external/bsd/openssh/dist/groupaccess.h C src/crypto/external/bsd/openssh/dist/gss-genr.c C src/crypto/external/bsd/openssh/dist/gss-serv-krb5.c C src/crypto/external/bsd/openssh/dist/gss-serv.c U src/crypto/external/bsd/openssh/dist/hmac.c U src/crypto/external/bsd/openssh/dist/hmac.h C src/crypto/external/bsd/openssh/dist/hostfile.c U src/crypto/external/bsd/openssh/dist/hostfile.h C src/crypto/external/bsd/openssh/dist/kex.c C src/crypto/external/bsd/openssh/dist/kex.h U src/crypto/external/bsd/openssh/dist/kexc25519.c U src/crypto/external/bsd/openssh/dist/kexc25519c.c U src/crypto/external/bsd/openssh/dist/kexc25519s.c U src/crypto/external/bsd/openssh/dist/kexdh.c U src/crypto/external/bsd/openssh/dist/kexdhc.c C src/crypto/external/bsd/openssh/dist/kexdhs.c U src/crypto/external/bsd/openssh/dist/kexecdh.c U src/crypto/external/bsd/openssh/dist/kexecdhc.c U src/crypto/external/bsd/openssh/dist/kexecdhs.c U src/crypto/external/bsd/openssh/dist/kexgex.c U src/crypto/external/bsd/openssh/dist/kexgexc.c C src/crypto/external/bsd/openssh/dist/kexgexs.c U src/crypto/external/bsd/openssh/dist/krl.h C src/crypto/external/bsd/openssh/dist/log.c C src/crypto/external/bsd/openssh/dist/log.h U src/crypto/external/bsd/openssh/dist/mac.c U src/crypto/external/bsd/openssh/dist/mac.h C src/crypto/external/bsd/openssh/dist/match.h C src/crypto/external/bsd/openssh/dist/misc.c C src/crypto/external/bsd/openssh/dist/misc.h U src/crypto/external/bsd/openssh/dist/moduli.c C src/crypto/external/bsd/openssh/dist/monitor.c C src/crypto/external/bsd/openssh/dist/monitor.h U src/crypto/external/bsd/openssh/dist/monitor_fdpass.c U src/crypto/external/bsd/openssh/dist/monitor_fdpass.h C src/crypto/external/bsd/openssh/dist/monitor_wrap.c C src/crypto/external/bsd/openssh/dist/monitor_wrap.h C src/crypto/external/bsd/openssh/dist/msg.c U src/crypto/external/bsd/openssh/dist/msg.h C src/crypto/external/bsd/openssh/dist/mux.c C src/crypto/external/bsd/openssh/dist/myproposal.h U src/crypto/external/bsd/openssh/dist/nchan.c U src/crypto/external/bsd/openssh/dist/nchan.ms U src/crypto/external/bsd/openssh/dist/nchan2.ms U src/crypto/external/bsd/openssh/dist/progressmeter.c U src/crypto/external/bsd/openssh/dist/opacket.c C src/crypto/external/bsd/openssh/dist/opacket.h C src/crypto/external/bsd/openssh/dist/packet.c C src/crypto/external/bsd/openssh/dist/packet.h U src/crypto/external/bsd/openssh/dist/pathnames.h U src/crypto/external/bsd/openssh/dist/pkcs11.h U src/crypto/external/bsd/openssh/dist/poly1305.c U src/crypto/external/bsd/openssh/dist/poly1305.h U src/crypto/external/bsd/openssh/dist/sftp-server-main.c U src/crypto/external/bsd/openssh/dist/progressmeter.h C src/crypto/external/bsd/openssh/dist/readconf.c C src/crypto/external/bsd/openssh/dist/readconf.h C src/crypto/external/bsd/openssh/dist/readpass.c U src/crypto/external/bsd/openssh/dist/rijndael.c U src/crypto/external/bsd/openssh/dist/rijndael.h U src/crypto/external/bsd/openssh/dist/sandbox-pledge.c U src/crypto/external/bsd/openssh/dist/sandbox-rlimit.c U src/crypto/external/bsd/openssh/dist/sc25519.c U src/crypto/external/bsd/openssh/dist/sc25519.h C src/crypto/external/bsd/openssh/dist/scp.1 C src/crypto/external/bsd/openssh/dist/scp.c C src/crypto/external/bsd/openssh/dist/servconf.c C src/crypto/external/bsd/openssh/dist/servconf.h C src/crypto/external/bsd/openssh/dist/serverloop.c U src/crypto/external/bsd/openssh/dist/serverloop.h C src/crypto/external/bsd/openssh/dist/session.c U src/crypto/external/bsd/openssh/dist/session.h C src/crypto/external/bsd/openssh/dist/sftp-client.c U src/crypto/external/bsd/openssh/dist/sftp-client.h U src/crypto/external/bsd/openssh/dist/sftp-common.c U src/crypto/external/bsd/openssh/dist/sftp-common.h U src/crypto/external/bsd/openssh/dist/sftp-glob.c U src/crypto/external/bsd/openssh/dist/smult_curve25519_ref.c U src/crypto/external/bsd/openssh/dist/sftp-server.8 C src/crypto/external/bsd/openssh/dist/sftp-server.c C src/crypto/external/bsd/openssh/dist/sftp.1 C src/crypto/external/bsd/openssh/dist/sftp.c U src/crypto/external/bsd/openssh/dist/sftp.h U src/crypto/external/bsd/openssh/dist/ssh-ed25519.c U src/crypto/external/bsd/openssh/dist/ssh-add.1 U src/crypto/external/bsd/openssh/dist/ssh-add.c U src/crypto/external/bsd/openssh/dist/ssh-agent.1 C src/crypto/external/bsd/openssh/dist/ssh-agent.c U src/crypto/external/bsd/openssh/dist/ssh-dss.c U src/crypto/external/bsd/openssh/dist/ssh-ecdsa.c U src/crypto/external/bsd/openssh/dist/ssh-keyscan.1 C src/crypto/external/bsd/openssh/dist/ssh-gss.h C src/crypto/external/bsd/openssh/dist/ssh-keygen.1 C src/crypto/external/bsd/openssh/dist/ssh-keygen.c C src/crypto/external/bsd/openssh/dist/ssh-pkcs11-client.c C src/crypto/external/bsd/openssh/dist/ssh-keyscan.c U src/crypto/external/bsd/openssh/dist/ssh-keysign.8 C src/crypto/external/bsd/openssh/dist/ssh-keysign.c U src/crypto/external/bsd/openssh/dist/ssh-pkcs11-helper.8 U src/crypto/external/bsd/openssh/dist/ssh-pkcs11-helper.c U src/crypto/external/bsd/openssh/dist/ssh-pkcs11.c U src/crypto/external/bsd/openssh/dist/ssh-pkcs11.h C src/crypto/external/bsd/openssh/dist/ssh-rsa.c U src/crypto/external/bsd/openssh/dist/ssh-sandbox.h U src/crypto/external/bsd/openssh/dist/ssh-xmss.c C src/crypto/external/bsd/openssh/dist/ssh.1 C src/crypto/external/bsd/openssh/dist/ssh.c C src/crypto/external/bsd/openssh/dist/ssh.h U src/crypto/external/bsd/openssh/dist/ssh2.h U src/crypto/external/bsd/openssh/dist/ssh_api.c C src/crypto/external/bsd/openssh/dist/ssh_api.h U src/crypto/external/bsd/openssh/dist/ssh_config C src/crypto/external/bsd/openssh/dist/ssh_config.5 C src/crypto/external/bsd/openssh/dist/sshd_config C src/crypto/external/bsd/openssh/dist/sshd.8 U src/crypto/external/bsd/openssh/dist/sshbuf-getput-crypto.c U src/crypto/external/bsd/openssh/dist/sshbuf-misc.c C src/crypto/external/bsd/openssh/dist/sshbuf.c C src/crypto/external/bsd/openssh/dist/sshbuf.h C src/crypto/external/bsd/openssh/dist/sshconnect.c C src/crypto/external/bsd/openssh/dist/sshconnect.h C src/crypto/external/bsd/openssh/dist/sshconnect2.c C src/crypto/external/bsd/openssh/dist/sshd.c U src/crypto/external/bsd/openssh/dist/xmss_hash_address.c C src/crypto/external/bsd/openssh/dist/sshd_config.5 C src/crypto/external/bsd/openssh/dist/ssherr.c C src/crypto/external/bsd/openssh/dist/ssherr.h C src/crypto/external/bsd/openssh/dist/sshkey-xmss.c U src/crypto/external/bsd/openssh/dist/sshkey-xmss.h C src/crypto/external/bsd/openssh/dist/sshkey.c C src/crypto/external/bsd/openssh/dist/sshkey.h C src/crypto/external/bsd/openssh/dist/sshlogin.c U src/crypto/external/bsd/openssh/dist/sshlogin.h U src/crypto/external/bsd/openssh/dist/sshpty.c U src/crypto/external/bsd/openssh/dist/sshpty.h U src/crypto/external/bsd/openssh/dist/sshtty.c C src/crypto/external/bsd/openssh/dist/ttymodes.c U src/crypto/external/bsd/openssh/dist/ttymodes.h C src/crypto/external/bsd/openssh/dist/uidswap.c C src/crypto/external/bsd/openssh/dist/uidswap.h C src/crypto/external/bsd/openssh/dist/umac.c U src/crypto/external/bsd/openssh/dist/umac.h U src/crypto/external/bsd/openssh/dist/umac128.c C src/crypto/external/bsd/openssh/dist/utf8.c U src/crypto/external/bsd/openssh/dist/utf8.h U src/crypto/external/bsd/openssh/dist/uuencode.c U src/crypto/external/bsd/openssh/dist/uuencode.h U src/crypto/external/bsd/openssh/dist/verify.c C src/crypto/external/bsd/openssh/dist/version.h U src/crypto/external/bsd/openssh/dist/xmalloc.c U src/crypto/external/bsd/openssh/dist/xmalloc.h U src/crypto/external/bsd/openssh/dist/xmss_commons.c U src/crypto/external/bsd/openssh/dist/xmss_commons.h U src/crypto/external/bsd/openssh/dist/xmss_fast.c U src/crypto/external/bsd/openssh/dist/xmss_fast.h U src/crypto/external/bsd/openssh/dist/xmss_hash.c U src/crypto/external/bsd/openssh/dist/xmss_hash.h C src/crypto/external/bsd/openssh/dist/xmss_wots.c U src/crypto/external/bsd/openssh/dist/xmss_hash_address.h U src/crypto/external/bsd/openssh/dist/xmss_wots.h U src/crypto/external/bsd/openssh/dist/moduli-gen/moduli-gen.sh U src/crypto/external/bsd/openssh/dist/moduli-gen/Makefile C src/crypto/external/bsd/openssh/dist/moduli-gen/moduli.2048 C src/crypto/external/bsd/openssh/dist/moduli-gen/moduli.3072 C src/crypto/external/bsd/openssh/dist/moduli-gen/moduli.4096 C src/crypto/external/bsd/openssh/dist/moduli-gen/moduli.6144 C src/crypto/external/bsd/openssh/dist/moduli-gen/moduli.7680 C src/crypto/external/bsd/openssh/dist/moduli-gen/moduli.8192 108 conflicts created by this import. Use the following command to help the merge: cvs checkout -jOPENSSH:yesterday -jOPENSSH src/crypto/external/bsd/openssh/dist
