summaryrefslogtreecommitdiffhomepage
path: root/svr-runopts.c
AgeCommit message (Collapse)Author
2018-03-08Only advertise a single server ecdsa key when -R (generate as required) isMatt Johnston
specified. Fixes -R now that default ecdsa key size has changed.
2018-02-28merge from mainMatt Johnston
--HG-- branch : fuzz
2018-02-27add guard HAVE_GETGROUPLISTMatt Johnston
2018-02-26merge from mainMatt Johnston
--HG-- branch : fuzz
2018-02-26more linting (#58)François Perrad
* const parameter * fix indentation
2018-02-26Fix restricted group code for BSDs, move to separate functionMatt Johnston
2018-02-22Merge branch 'master' of git://github.com/stellarpower/dropbear into ↵Matt Johnston
stellarpower-master
2018-02-22Only load dropbear default host keys if a key is not specifiedCamVan Nguyen
2018-02-20Added the -G option to allow logins only for users that are members of a ↵stellarpower
certain group. This allows finer control of an instance on who can and cannot login over a certain instance (e.g. password and not key). Needs double-checking and ensuring it meets platform requirements.
2018-02-17merge from mainMatt Johnston
--HG-- branch : fuzz
2018-02-16options: Complete the transition to numeric toggles (`#if')Michael Witten
For the sake of review, this commit alters only the code; the affiliated comments within the source files also need to be updated, but doing so now would obscure the operational changes that have been made here. * All on/off options have been switched to the numeric `#if' variant; that is the only way to make this `default_options.h.in' thing work in a reasonable manner. * There is now some very minor compile-time checking of the user's choice of options. * NO_FAST_EXPTMOD doesn't seem to be used, so it has been removed. * ENABLE_USER_ALGO_LIST was supposed to be renamed DROPBEAR_USER_ALGO_LIST, and this commit completes that work. * DROPBEAR_FUZZ seems to be a relatively new, as-yet undocumented option, which was added by the following commit: commit 6e0b539e9ca0b5628c6c5a3d118ad6a2e79e8039 Author: Matt Johnston <matt@ucc.asn.au> Date: Tue May 23 22:29:21 2017 +0800 split out checkpubkey_line() separately It has now been added to `sysoptions.h' and defined as `0' by default. * The configuration option `DROPBEAR_PASSWORD_ENV' is no longer listed in `default_options.h.in'; it is no longer meant to be set by the user, and is instead left to be defined in `sysoptions.h' (where it was already being defined) as merely the name of the environment variable in question: DROPBEAR_PASSWORD To enable or disable use of that environment variable, the user must now toggle `DROPBEAR_USE_DROPBEAR_PASSWORD'. * The sFTP support is now toggled by setting `DROPBEAR_SFTPSERVER', and the path of the sFTP server program is set independently through the usual SFTPSERVER_PATH.
2018-01-23merge up to dateMatt Johnston
--HG-- branch : fuzz
2017-06-27Use MAX_AUTH_TRIES rather than DEFAULT_AUTH_TRIES, don't limit argument rangeMatt Johnston
2017-06-25dropbear server: support -T max auth triesKevin Darbyshire-Bryant
Add support for '-T n' for a run-time specification for maximum number of authentication attempts where 'n' is between 1 and compile time option MAX_AUTH_TRIES. A default number of tries can be specified at compile time using 'DEFAULT_AUTH_TRIES' which itself defaults to MAX_AUTH_TRIES for backwards compatibility. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-06-14merge from mainMatt Johnston
--HG-- branch : fuzz
2017-06-02when pointer, use NULL instead of 0Francois Perrad
2017-05-18merge main to fuzzMatt Johnston
--HG-- branch : fuzz
2017-05-13fuzz harnessMatt Johnston
--HG-- branch : fuzz
2017-05-12copy over some fuzzing code from AFL branchMatt Johnston
--HG-- branch : fuzz
2016-05-04Convert #ifdef to #if, other build changesMatt Johnston
2016-04-12Add manpage and log for forced_commandMatt Johnston
2016-04-12Add -c <command> option to force a specific commandJeremy Kerr
This change adds a -c option to dropbear, to force the session to use a specific command, in a similar fashion to OpenSSH's ForceCommand configuration option. This is useful to provide a simple fixed service over ssh, without requiring an authorized key file for the per-key forced_command option. This setting takes precedence over the channel session's provided command, and the per-key forced_command setting. Signed-off-by: Jeremy Kerr <jk@ozlabs.org>
2015-12-15Moved usingsyslog from svr_runopts to runopts.Konstantin Tokarev
2015-12-02ports and addresses must be malloced to avoid segfault on exitMatt Johnston
2015-11-25mention dropbearkey tooMatt Johnston
2015-11-25Mention "dropbear -R" if no hostkeysMatt Johnston
2015-11-06Enable bundlingGuilhem Moulin
2015-10-28Warn rather than fail if flags have trailing partsMatt Johnston
2015-10-21don't silently ignore extra flag argumentsMatt Johnston
2015-01-28Disable non-delayed zlib for serverMatt Johnston
2014-10-22Don't print "Failed loading hostkey" when -R delayed hostkey option is enabledSteven Honeyman
2014-07-27- Don't use multichar constants since recent gcc complainsMatt Johnston
- Add release script - Simplify print_version
2014-07-27Add '-V' for versionMatt Johnston
-h should exit with success Update manpages
2013-12-03Fix disabling DSS keyMatt Johnston
2013-12-03Exit if we don't have keys and -R wasn't specifiedMatt Johnston
2013-11-14use oldstyle commentsMatt Johnston
2013-11-12Various cleanups and fixes for warningsMatt Johnston
--HG-- branch : ecc
2013-11-07Add '-R' for delayed hostkey optionMatt Johnston
--HG-- branch : keyondemand
2013-11-07refactor key generation, make it generate as required.Matt Johnston
Needs UI in server command line options --HG-- branch : keyondemand
2013-05-25have separate ecdsa keys for each sizeMatt Johnston
fix crash from the mp_alloc_init_multi change in RSA --HG-- branch : ecc
2013-05-21Fix broken disablekey()Matt Johnston
--HG-- branch : ecc
2013-05-03ecdsa is workingMatt Johnston
--HG-- branch : ecc
2013-03-21Add URL to usage textMatt Johnston
2013-03-19Allow specifying server "-p" options with ipv6 bracket notation,Matt Johnston
patch from Ben Jencks
2013-02-12Allow configuring "allow blank password option" at runtimePaul Eggleton
Changes this from a compile-time switch to a command-line option. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2012-04-12Split listening port argument at the rightmost colon, allows binding toMatt Johnston
specific IPv6 addresses. From OpenWRT, https://dev.openwrt.org/browser/trunk/package/dropbear/patches/300-ipv6_addr_port_split.patch
2011-06-07Mention that the value is in secondsMatt Johnston
--HG-- extra : convert_revision : fcdafc69f831ab356b34815958114cc3d75d23bb
2011-02-23Improve capitalisation for all logged stringsMatt Johnston
--HG-- extra : convert_revision : 997e53cec7a9efb7413ac6e17b6be60a5597bd2e
2009-09-11- Disable compression for non-final multihopsMatt Johnston
--HG-- extra : convert_revision : c507a2aacb9e0db4c0266891b8915c614e32857e
2009-09-01Rearrange getaddrstring() etcMatt Johnston
--HG-- extra : convert_revision : 8a18c4a60aeaec085923d13d98fa0f93c506ceba
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-21 15:39:52 +0000