GitLab

Rev: ChangeLog:1.208

srp_format_m2().
(srp_make_reply_msg): Convert secret to string.
(srp_make_client_proof): Compute m2, and return it through an
extra argument..
(srp_process_client_proof): Use srp_format_proofs().
(srp_process_server_proof): Added argument m2. Deleted argument dh.

Rev: src/srp.h:1.4
Rev: src/srp_exchange.c:1.7

secret key.

Rev: src/keyexchange.c:1.69

and srp_exchange.c.
* src/server_keyexchange.c: Likewise.

Rev: src/client_keyexchange.c:1.48
Rev: src/server_keyexchange.c:1.42

string.
(dh_make_server_msg): Added server_key argument.
(dh_process_server_msg): Return server_key and signatur. Call
dh_digest().
(dh_verify_server_msg): #if:ed out function.

Rev: src/dh_exchange.c:1.7

Removed the server_key and signature attributes.

Rev: src/publickey_crypto.h:1.38

Rev: doc/TODO:1.78
Rev: doc/srp-spec.nroff:1.3
Rev: src/abstract_crypto.c:1.15

Rev: configure.in:1.74

comparison when checking for EXC_USERAUTH.

Rev: src/client_userauth.c:1.34

Rev: src/lsh.c:1.112

Rev: ChangeLog:1.207
Rev: doc/.cvsignore:1.4
Rev: doc/fixff.pl:1.2

passwd->pw_dir, if (i) the server is not running as root, and (ii)
the user logging in is the same user running the server.

Rev: src/unix_user.c:1.20

Rev: src/lsh.c:1.111

sexp_conv -o.

Rev: src/lsh-authorize:1.3

Rev: doc/Makefile.am.in:1.9
Rev: doc/srp-spec.nroff:1.2

Rev: doc/fixff.pl:1.1
Rev: doc/fixff.sh:1.1

Rev: ChangeLog:1.206

syntax when writing to stdout, and canonical syntax when writing
to a file.

Rev: src/srp-gen.c:1.3

connection->user is non-NULL.

Rev: src/server_session.c:1.44

CONNECTION_SRP flag.
* src/server_keyexchange.c (do_srp_server_proof_handler):
Likewise.

Rev: src/server_keyexchange.c:1.41

connection_require_userauth.
(main): Allow user's to request ssh-connection service without
first executing the ssh-userauth protocol. This makes sense if SRP
was used for key exchange. lshd_connection_service checks that the
user is properly authenticated before actually starting the
service.

Rev: src/lshd.c:1.94

(options2service): New command.
(make_lsh_userauth): New expression.
(make_lsh_connect): Use options2service.
(main_options): New flags --publickey, --userauth, --no-userauth.
(CASE_FLAG): New macro.
(main_argp_parser): Implemented --userauth and --no-userauth
options, with defaults depending on whether or not SRP is being
used.
Use the CASE_FLAG macro.
(request_userauth_service): New global command object.
(request_connection_service): New global command object.

* src/lsh.c (main_argp_parser): Use new srp-related atoms.

Rev: src/lsh.c:1.110

(make_connection_if_srp): New function.

Rev: src/connection_commands.c:1.29
Rev: src/connection_commands.h:1.10

Rev: src/connection.h:1.51

CONNECTION_SRP flag.

Rev: src/client_keyexchange.c:1.47

(do_request_service): Added prototype and made non-static.
(STATIC_REQUEST_SERVICE): New macro.

Rev: src/client.c:1.95
Rev: src/client.h:1.30

src/keyexchange.c, src/keyexchange.h, src/lsh_keygen.c,
src/lshd.c, src/publickey_crypto.h, src/server_session.c,
src/server_userauth.c, src/server_userauth.h, src/sexp.c,
src/sexp_parser.c, src/spki.c, src/spki_commands.c,
src/srp_exchange.c, src/tcpforward.c, src/werror.c: Removed old
dead code.

Rev: src/command.h:1.45
Rev: src/connection.c:1.55
Rev: src/exception.c:1.15
Rev: src/io.c:1.108
Rev: src/keyexchange.c:1.68
Rev: src/keyexchange.h:1.46
Rev: src/lsh_keygen.c:1.21
Rev: src/lshd.c:1.93
Rev: src/publickey_crypto.h:1.37
Rev: src/server_session.c:1.43
Rev: src/server_userauth.c:1.28
Rev: src/server_userauth.h:1.13
Rev: src/sexp.c:1.30
Rev: src/sexp_parser.c:1.16
Rev: src/spki.c:1.20
Rev: src/spki_commands.c:1.8
Rev: src/srp_exchange.c:1.6
Rev: src/tcpforward.c:1.49
Rev: src/werror.c:1.46

Rev: ChangeLog:1.205

GROUP_ADD.
Use new SRP-related atoms. More debug output.

Rev: src/srp_exchange.c:1.5

Use the sexp_format() function.

Rev: src/srp-gen.c:1.2

function, rather than invoking the SSH_FORMAT method directly.
* src/spki_commands.c (do_spki_encrypt): Likewise.

Rev: src/sexp.c:1.29
Rev: src/sexp_commands.c:1.11
Rev: src/spki_commands.c:1.7

service_e and auth_e. WE use different exception handlers when
invoking the AUTHENTICATE method and when invoking the service.
(do_userauth_continuation): Simplified this continuation. It is
passed a user, and returns the connection.
(do_handle_userauth): When a service is eventually invoked, it is
passed a single argument: the connection. Previously, the user
object was passed as argument to the service.
(do_userauth): Clear the user attribute of the connection, and
display a warning message if the connection was already
authenticated.
(do_userauth): Don't call make_userauth_continuation() here.

Rev: src/server_userauth.c:1.27
Rev: src/server_userauth.h:1.12

(make_server_session): Deleted user argument.
(open_session): Deleted user attribute.
(make_open_session): Deleted user argument.
(server_connection_service): #if:ed out
(spawn_process): Added user argument.
(do_alloc_pty): Use CAST macro. Get the user from the connection
object.
(pty_request_handler): Statically allocated object, replaces the
make_pty_handler function.

Rev: src/server_session.c:1.42
Rev: src/server_session.h:1.12

the authenticated user in the connection object.

Rev: src/server_keyexchange.c:1.40

5. Unlike 7, 5 is a primitive root.

Rev: src/publickey_crypto.c:1.42

framework. Deleted lshd_services and calls to
make_server_connection_service.

Rev: src/lshd.c:1.92

Rev: src/lsh.c:1.109

Rev: src/channel_commands.c:1.20
Rev: src/keyexchange.c:1.67

Rev: src/dh_exchange.c:1.6

value from srp_make_client_proof().

Rev: src/client_keyexchange.c:1.46