GitHub - MirBSD/ssh: [WIP] Rebasing of the MirBSD Secure Shell on top of recent OpenSSH (with questionable content to be removed)

MirBSD / ssh Public

Sponsor MirBSD/ssh
Notifications
Fork 1
Star 0

[WIP] Rebasing of the MirBSD Secure Shell on top of recent OpenSSH (with questionable content to be removed)

www.mirbsd.org/

View license

0 stars 1 fork Branches Tags Activity

Star

Notifications

4 Branches 0 Tags

Name	Name	Last commit message	Last commit date
Latest commit mirabilos drop a good part of applied, obvious¹ or obsolete² diffs Nov 12, 2020 80fc0c8 · Nov 12, 2020 History 6,528 Commits
.github	.github	add OpenBSD’s for OpenSSH	Feb 16, 2020
ALT	ALT	drop a good part of applied, obvious¹ or obsolete² diffs	Nov 12, 2020
moduli-gen	moduli-gen	Merge branch 'vendor' into master	Nov 11, 2020
scp	scp	one of us can indent	Nov 8, 2020
sftp-server	sftp-server	one of us can indent	Nov 8, 2020
sftp	sftp	one of us can indent	Nov 8, 2020
ssh-add	ssh-add	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
ssh-agent	ssh-agent	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
ssh-keygen	ssh-keygen	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
ssh-keyscan	ssh-keyscan	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
ssh-keysign	ssh-keysign	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
ssh-pkcs11-helper	ssh-pkcs11-helper	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
ssh	ssh	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
sshd	sshd	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
.gitignore	.gitignore	skip obj/ subdirectories	Nov 6, 2020
LICENCE	LICENCE	drop rĳndæl (PD) reference, add XMSS CC0 reference	Nov 11, 2020
Makefile	Makefile	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
Makefile.inc	Makefile.inc	drop 25519 and related things	Nov 12, 2020
OVERVIEW	OVERVIEW	refer to OpenSSL not SSLeay;	Oct 23, 2018
PROTOCOL	PROTOCOL	drop 25519 and related things	Nov 12, 2020
PROTOCOL.agent	PROTOCOL.agent	Agent protocol draft is now at rev 4. ok djm@	Oct 6, 2020
PROTOCOL.certkeys	PROTOCOL.certkeys	drop 25519 and related things	Nov 12, 2020
PROTOCOL.key	PROTOCOL.key	new private key format, bcrypt as KDF by default; details in PROTOCOL…	Dec 6, 2013
PROTOCOL.krl	PROTOCOL.krl	allow key revocation by SHA256 hash and allow ssh-keygen to create KRLs	Sep 12, 2018
PROTOCOL.mux	PROTOCOL.mux	spelling errors in comments; no code change	Mar 13, 2020
PROTOCOL.sshsig	PROTOCOL.sshsig	drop 25519 and related things	Nov 12, 2020
README	README	begin documenting the delta	Nov 8, 2020
addrmatch.c	addrmatch.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
atomicio.c	atomicio.c	missing prerequisite header	Nov 7, 2020
atomicio.h	atomicio.h	move client/server SSH-* banners to buffers under ssh->kex and factor	Dec 27, 2018
auth-bsdauth.c	auth-bsdauth.c	Merge branch 'vendor'	Nov 12, 2020
auth-options.c	auth-options.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
auth-options.h	auth-options.h	support for requiring user verified FIDO keys in sshd	Aug 27, 2020
auth-passwd.c	auth-passwd.c	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
auth-rhosts.c	auth-rhosts.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
auth.c	auth.c	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
auth.h	auth.h	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
auth2-chall.c	auth2-chall.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
auth2-hostbased.c	auth2-hostbased.c	Merge branch 'vendor'	Nov 12, 2020
auth2-kbdint.c	auth2-kbdint.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
auth2-none.c	auth2-none.c	Merge branch 'vendor'	Nov 12, 2020
auth2-passwd.c	auth2-passwd.c	Merge branch 'vendor'	Nov 12, 2020
auth2-pubkey.c	auth2-pubkey.c	Merge branch 'vendor'	Nov 12, 2020
auth2.c	auth2.c	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
authfd.c	authfd.c	drop 25519 and related things	Nov 12, 2020
authfd.h	authfd.h	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
authfile.c	authfile.c	drop 25519 and related things	Nov 12, 2020
authfile.h	authfile.h	factor out reading/writing sshbufs to dedicated functions;	Jan 25, 2020
bitmap.c	bitmap.c	add RCSIDs to these; they make syncing portable a bit easier	Oct 20, 2017
bitmap.h	bitmap.h	add RCSIDs to these; they make syncing portable a bit easier	Oct 20, 2017
canohost.c	canohost.c	apply the MaskRemoteAddress patch	Nov 8, 2020
canohost.h	canohost.h	apply the MaskRemoteAddress patch	Nov 8, 2020
channels.c	channels.c	initialise for gcc, which cannot recognise it’s never uninitialised	Nov 8, 2020
channels.h	channels.h	cap channel input buffer size at 16MB; avoids high memory use when	Sep 20, 2020
cipher-ctr.c	cipher-ctr.c	restore the -ctr ciphers	Nov 8, 2020
cipher.c	cipher.c	restore the -ctr ciphers	Nov 8, 2020
cipher.h	cipher.h	restore the -ctr ciphers	Nov 8, 2020
cleanup.c	cleanup.c	almost entirely get rid of the culture of ".h files that include .h f…	Aug 3, 2006
clientloop.c	clientloop.c	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
clientloop.h	clientloop.h	make failures when establishing "Tunnel" forwarding terminate the	Apr 3, 2020
compat.c	compat.c	drop 25519 and related things	Nov 12, 2020
compat.h	compat.h	drop 25519 and related things	Nov 12, 2020
dh.c	dh.c	old-OpenSSL glue	Nov 7, 2020
dh.h	dh.h	unifdef OpenSSL	Nov 6, 2020
digest-openssl.c	digest-openssl.c	apply the other backport patch from upstream	Nov 6, 2020
digest.h	digest.h	remove hmac-ripemd160; ok dtucker	May 8, 2017
dispatch.c	dispatch.c	allow sshpkt_fatal() to take a varargs format; we'll use this to give	Jan 19, 2019
dispatch.h	dispatch.h	remove last traces of old packet API!	Jan 19, 2019
dns.c	dns.c	drop 25519 and related things	Nov 12, 2020
dns.h	dns.h	drop 25519 and related things	Nov 12, 2020
fatal.c	fatal.c	fix SEGV on fatal() errors spotted by dtucker@	Oct 19, 2020
groupaccess.c	groupaccess.c	Move checks for lists of users or groups into their own function.	Mar 6, 2019
groupaccess.h	groupaccess.h	support negation of groups in "Match group" block (bz#1315); ok dtucker@	Jul 4, 2008
hmac.c	hmac.c	change explicit_bzero();free() to freezero()	Feb 26, 2020
hmac.h	hmac.h	New key API: refactor key-related functions to be more library-like,	Jun 24, 2014
hostfile.c	hostfile.c	more ECC	Nov 7, 2020
hostfile.h	hostfile.h	more ECC	Nov 7, 2020
kex.c	kex.c	drop 25519 and related things	Nov 12, 2020
kex.h	kex.h	g/c some unused ecdh	Nov 12, 2020
kexdh.c	kexdh.c	compat	Nov 7, 2020
kexgen.c	kexgen.c	g/c remaining unused ecdh	Nov 12, 2020
kexgex.c	kexgex.c	pass most arguments to the KEX hash functions as sshbuf rather	Jan 23, 2019
kexgexc.c	kexgexc.c	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
kexgexs.c	kexgexs.c	Merge branch 'vendor'	Nov 12, 2020
krl.c	krl.c	remove ECDSA and SK more throughoutly	Nov 11, 2020
krl.h	krl.h	give ssh-keygen the ability to dump the contents of a binary key	Apr 3, 2020
libressl-api-compat.c	libressl-api-compat.c	g/c unused functions from here, drop the ifdeffery around the rest	Nov 12, 2020
libressl-api-compat.h	libressl-api-compat.h	g/c unused functions from here, drop the ifdeffery around the rest	Nov 12, 2020
log.c	log.c	variants of the log methods that append a ssherr.h string from	Oct 18, 2020
log.h	log.h	variants of the log methods that append a ssherr.h string from	Oct 18, 2020
mac.c	mac.c	lots of things were relying on libcrypto headers to transitively	Sep 6, 2019
mac.h	mac.h	Improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms.	Jul 8, 2016
match.c	match.c	add (and enable) proposal match debugging	Nov 8, 2020
match.h	match.h	add (and enable) proposal match debugging	Nov 8, 2020
misc.c	misc.c	drop more of that routing domain stuff	Nov 12, 2020
misc.h	misc.h	drop more of that routing domain stuff	Nov 12, 2020
moduli.c	moduli.c	time_t	Nov 8, 2020
monitor.c	monitor.c	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
monitor.h	monitor.h	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
monitor_fdpass.c	monitor_fdpass.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
monitor_fdpass.h	monitor_fdpass.h	make file descriptor passing code return an error rather than call fa…	Sep 4, 2007
monitor_wrap.c	monitor_wrap.c	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
monitor_wrap.h	monitor_wrap.h	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
msg.c	msg.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
msg.h	msg.h	sync ssh-keysign, ssh-keygen and some dependencies to the new	Jan 15, 2015
mux.c	mux.c	drop attempts to pledge (except sandbox) on MirBSD	Nov 8, 2020
myproposal.h	myproposal.h	g/c some unused ecdh	Nov 12, 2020
nchan.c	nchan.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
nchan.ms	nchan.ms	unexpand and delete whitespace at EOL; ok markus@	Nov 21, 2003
nchan2.ms	nchan2.ms	document eow message in ssh protocol 2 channel state machine;	May 15, 2008
packet.c	packet.c	drop more of that routing domain stuff	Nov 12, 2020
packet.h	packet.h	drop more of that routing domain stuff	Nov 12, 2020
pathnames.h	pathnames.h	g/c mention of ssh1 host key	Nov 12, 2020
pkcs11.h	pkcs11.h	g/c some unused ecdh	Nov 12, 2020
progressmeter.c	progressmeter.c	Replace all calls to signal(2) with a wrapper around sigaction(2).	Jan 23, 2020
progressmeter.h	progressmeter.h	Have progressmeter force an update at the beginning and end of each	Jan 24, 2019
readconf.c	readconf.c	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
readconf.h	readconf.h	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
readpass.c	readpass.c	Free the previously allocated msg buffer after writing it out.	Nov 10, 2020
sandbox-rlimit.c	sandbox-rlimit.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
scp.1	scp.1	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
scp.c	scp.c	drop attempts to pledge (except sandbox) on MirBSD	Nov 8, 2020
servconf.c	servconf.c	drop more of that routing domain stuff	Nov 12, 2020
servconf.h	servconf.h	drop more of that routing domain stuff	Nov 12, 2020
serverloop.c	serverloop.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
serverloop.h	serverloop.h	refactor channels.c	Sep 12, 2017
session.c	session.c	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
session.h	session.h	Add server support for signalling sessions via the SSH channel/	Oct 2, 2018
sftp-client.c	sftp-client.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
sftp-client.h	sftp-client.h	Add "-h" flag to sftp chown/chgrp/chmod commands to request they do	Jan 16, 2019
sftp-common.c	sftp-common.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
sftp-common.h	sftp-common.h	update sftp client and server to new buffer API.	Jan 14, 2015
sftp-glob.c	sftp-glob.c	stdarg.h required more broadly; ok djm	Nov 13, 2019
sftp-realpath.c	sftp-realpath.c	-Wshadow	Nov 8, 2020
sftp-server-main.c	sftp-server-main.c	Replace calls to ssh_malloc_init() by a static init of malloc_options.	Jun 6, 2019
sftp-server.8	sftp-server.8	supply word missing in previous;	Jun 22, 2020
sftp-server.c	sftp-server.c	add (and enable) proposal match debugging	Nov 8, 2020
sftp.1	sftp.1	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
sftp.c	sftp.c	<stdint.h>	Nov 8, 2020
sftp.h	sftp.h	replace __dead with __attribute__((noreturn)), makes things a little …	Jun 13, 2008
ssh-add.1	ssh-add.1	drop 25519 and related things	Nov 12, 2020
ssh-add.c	ssh-add.c	drop 25519 and related things	Nov 12, 2020
ssh-agent.1	ssh-agent.1	remove ECDSA and SK more throughoutly	Nov 11, 2020
ssh-agent.c	ssh-agent.c	Merge branch 'vendor' into master	Nov 11, 2020
ssh-dss.c	ssh-dss.c	apply the other backport patch from upstream	Nov 6, 2020
ssh-keygen.1	ssh-keygen.1	drop 25519 and related things	Nov 12, 2020
ssh-keygen.c	ssh-keygen.c	drop 25519 and related things	Nov 12, 2020
ssh-keyscan.1	ssh-keyscan.1	drop 25519 and related things	Nov 12, 2020
ssh-keyscan.c	ssh-keyscan.c	g/c some unused ecdh	Nov 12, 2020
ssh-keysign.8	ssh-keysign.8	drop 25519 and related things	Nov 12, 2020
ssh-keysign.c	ssh-keysign.c	drop 25519 and related things	Nov 12, 2020
ssh-pkcs11-client.c	ssh-pkcs11-client.c	remove ECDSA and SK more throughoutly	Nov 11, 2020
ssh-pkcs11-helper.8	ssh-pkcs11-helper.8	tweak the Nd lines for a bit of consistency;	Nov 30, 2019
ssh-pkcs11-helper.c	ssh-pkcs11-helper.c	ECC	Nov 8, 2020
ssh-pkcs11.c	ssh-pkcs11.c	remove ECDSA and SK more throughoutly	Nov 11, 2020
ssh-pkcs11.h	ssh-pkcs11.h	unifdef OpenSSL	Nov 6, 2020
ssh-rsa.c	ssh-rsa.c	more compat	Nov 7, 2020
ssh-sandbox.h	ssh-sandbox.h	rename sandbox.h => ssh-sandbox.h to make things easier for portable	Jun 23, 2011
ssh-xmss.c	ssh-xmss.c	Adapt XMSS to new logging infrastructure. With markus@, ok djm@.	Oct 19, 2020
ssh.1	ssh.1	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
ssh.c	ssh.c	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
ssh.h	ssh.h	allow some additional control over the use of ssh-askpass	Jul 14, 2020
ssh2.h	ssh2.h	g/c remaining unused ecdh	Nov 12, 2020
ssh_api.c	ssh_api.c	g/c some unused ecdh	Nov 12, 2020
ssh_api.h	ssh_api.h	lots of typos in comments/docs. Patch from Karsten Weiss after checking	Apr 10, 2018
ssh_config	ssh_config	drop 25519 and related things	Nov 12, 2020
ssh_config.5	ssh_config.5	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
sshbuf-getput-basic.c	sshbuf-getput-basic.c	make sshbuf_putb(b, NULL) a no-op	Jun 5, 2020
sshbuf-getput-crypto.c	sshbuf-getput-crypto.c	more ECC	Nov 7, 2020
sshbuf-io.c	sshbuf-io.c	tidy headers; some junk snuck into sshbuf-misc.c and sshbuf-io.c	Jan 25, 2020
sshbuf-misc.c	sshbuf-misc.c	support for RFC4648 base64url encoding; ok markus	Jun 22, 2020
sshbuf.c	sshbuf.c	change explicit_bzero();free() to freezero()	Feb 26, 2020
sshbuf.h	sshbuf.h	part of “OpenSSL does not have ECC”	Nov 6, 2020
sshconnect.c	sshconnect.c	drop 25519 and related things	Nov 12, 2020
sshconnect.h	sshconnect.h	Zap unused family parameter from ssh_connect_direct()	Oct 12, 2020
sshconnect2.c	sshconnect2.c	unifdef out KerberosⅤ / GSS-API	Nov 12, 2020
sshd.8	sshd.8	drop more of that routing domain stuff	Nov 12, 2020
sshd.c	sshd.c	drop more of that routing domain stuff	Nov 12, 2020
sshd_config	sshd_config	drop 25519 and related things	Nov 12, 2020
sshd_config.5	sshd_config.5	drop more of that routing domain stuff	Nov 12, 2020
ssherr.c	ssherr.c	improve the error message for u2f enrollment errors by making	Jan 25, 2020
ssherr.h	ssherr.h	improve the error message for u2f enrollment errors by making	Jan 25, 2020
sshkey-xmss.c	sshkey-xmss.c	fix hooking xmss up to new logging	Nov 11, 2020
sshkey-xmss.h	sshkey-xmss.h	Adapt XMSS to new logging infrastructure. With markus@, ok djm@.	Oct 19, 2020
sshkey.c	sshkey.c	g/c crypto_api.h	Nov 12, 2020
sshkey.h	sshkey.h	drop 25519 and related things	Nov 12, 2020
sshlogin.c	sshlogin.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
sshlogin.h	sshlogin.h	almost entirely get rid of the culture of ".h files that include .h f…	Aug 3, 2006
sshpty.c	sshpty.c	fatal() if getgrnam() cannot find "tty"	Jul 4, 2019
sshpty.h	sshpty.h	Factor out code to disconnect from controlling terminal into its own	Nov 29, 2016
sshsig.c	sshsig.c	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
sshsig.h	sshsig.h	removing SK turned out to be a larger yak to shave than expected	Nov 8, 2020
sshtty.c	sshtty.c	quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we	Jan 9, 2010
ttymodes.c	ttymodes.c	use the new variant log macros instead of prepending __func__ and	Oct 18, 2020
ttymodes.h	ttymodes.h	purge the last traces of SSHv1 from the TTY modes handling code	Apr 30, 2017
uidswap.c	uidswap.c	When system calls indicate an error they return -1, not some arbitrary	Jun 28, 2019
uidswap.h	uidswap.h	Remove support for running ssh(1) setuid and fatal if attempted.	Jul 18, 2018
umac.c	umac.c	this is BSD, not GNU	Nov 6, 2020
umac.h	umac.h	Typo and spelling fixes in comments and error messages. Patch from	Jun 7, 2019
umac128.c	umac128.c	Rename struct umac_ctx to umac128_ctx too. In portable some linkers	Feb 8, 2018
utf8.c	utf8.c	inline utterly pointless vis call	Nov 7, 2020
utf8.h	utf8.h	expose vasnmprintf(); ok (as part of other commit) markus deraadt	May 1, 2020
version.h	version.h	begin documenting the delta	Nov 8, 2020
xmalloc.c	xmalloc.c	add xvasprintf()	Nov 12, 2019
xmalloc.h	xmalloc.h	add xvasprintf()	Nov 12, 2019
xmss_commons.c	xmss_commons.c	add CC0 licence notice to XMSS code (thanks Joost Rijneveld)	Nov 11, 2020
xmss_commons.h	xmss_commons.h	add CC0 licence notice to XMSS code (thanks Joost Rijneveld)	Nov 11, 2020
xmss_fast.c	xmss_fast.c	g/c crypto_api.h	Nov 12, 2020
xmss_fast.h	xmss_fast.h	add CC0 licence notice to XMSS code (thanks Joost Rijneveld)	Nov 11, 2020
xmss_hash.c	xmss_hash.c	add CC0 licence notice to XMSS code (thanks Joost Rijneveld)	Nov 11, 2020
xmss_hash.h	xmss_hash.h	add CC0 licence notice to XMSS code (thanks Joost Rijneveld)	Nov 11, 2020
xmss_hash_address.c	xmss_hash_address.c	add CC0 licence notice to XMSS code (thanks Joost Rijneveld)	Nov 11, 2020
xmss_hash_address.h	xmss_hash_address.h	add CC0 licence notice to XMSS code (thanks Joost Rijneveld)	Nov 11, 2020
xmss_wots.c	xmss_wots.c	add CC0 licence notice to XMSS code (thanks Joost Rijneveld)	Nov 11, 2020
xmss_wots.h	xmss_wots.h	add CC0 licence notice to XMSS code (thanks Joost Rijneveld)	Nov 11, 2020

Repository files navigation

This release of OpenSSH is for MirBSD systems.

• Due to legal reasons (lack of licence or being covered by patents) or
  unavailability in the system crypto library (NSA-influenced), no ECC
  is contained in this release. This affects ECDSA as well as *25519.

• Any “sk” (U2F/FIDO security keys) use ECC and are thus not supported.

• Some code for OpenBSD features not yet available in MirBSD, such as
  the pledge sandbox, has been removed or disabled, so using this on
  OpenBSD probably isn’t a good idea.

$MirOS$

------------------------------------------------------------------------

This release of OpenSSH is for OpenBSD systems only.

Please read
	http://www.openssh.com/portable.html
if you want to install OpenSSH on other operating systems.

To extract and install this release on your OpenBSD system use:

      # cd /usr/src/usr.bin
      # tar xvfz .../openssh-x.y.tgz
      # cd ssh
      # make obj
      # make cleandir
      # make depend
      # make
      # make install
      # cp ssh_config sshd_config /etc/ssh

OpenSSH is a derivative of the original and free ssh 1.2.12 release
by Tatu Ylonen.  Aaron Campbell, Bob Beck, Markus Friedl, Niels
Provos, Theo de Raadt and Dug Song removed many bugs, re-added newer
features and created OpenSSH.  Markus Friedl contributed the support
for SSH protocol versions 1.5 and 2.0.

See http://www.openssh.com/ for more information.

$OpenBSD: README,v 1.7 2006/04/01 05:37:46 djm Exp $