summaryrefslogtreecommitdiffhomepage
path: root/svr-runopts.c
AgeCommit message (Collapse)Author
2021-08-19pass on sever process environment to child processes (option -e) (#118)Roland Vollgraf
2020-05-24send and handle SSH_MSG_EXT_INFO only at the correct pointMatt Johnston
- other fixes for rsa pubkey auth - only include ext-info handling when rsa pubkey auth is compiled
2020-05-21Make server send SSH_MSG_EXT_INFOMatt Johnston
Ensure that only valid hostkey algorithms are sent in the first kex guess
2020-03-12Add Ed25519 support (#91)Vladislav Grishenko
* Add support for Ed25519 as a public key type Ed25519 is a elliptic curve signature scheme that offers better security than ECDSA and DSA and good performance. It may be used for both user and host keys. OpenSSH key import and fuzzer are not supported yet. Initially inspired by Peter Szabo. * Add curve25519 and ed25519 fuzzers * Add import and export of Ed25519 keys
2019-05-15Rename EPKA -> PluginMatt Johnston
2019-05-15External Public-Key Authentication API (#72)fabriziobertocci
* Implemented dynamic loading of an external plug-in shared library to delegate public key authentication * Moved conditional compilation of the plugin infrastructure into the configure.ac script to be able to add -ldl to dropbear build only when the flag is enabled * Added tags file to the ignore list * Updated API to have the constructor to return function pointers in the pliugin instance. Added support for passing user name to the checkpubkey function. Added options to the session returned by the plugin and have dropbear to parse and process them * Added -rdynamic to the linker flags when EPKA is enabled * Changed the API to pass a previously created session to the checkPubKey function (created during preauth) * Added documentation to the API * Added parameter addrstring to plugin creation function * Modified the API to retrieve the auth options. Instead of having them as field of the EPKASession struct, they are stored internally (plugin-dependent) in the plugin/session and retrieved through a pointer to a function (in the session) * Changed option string to be a simple char * instead of unsigned char *
2018-03-08Only advertise a single server ecdsa key when -R (generate as required) isMatt Johnston
specified. Fixes -R now that default ecdsa key size has changed.
2018-02-28merge from mainMatt Johnston
--HG-- branch : fuzz
2018-02-27add guard HAVE_GETGROUPLISTMatt Johnston
2018-02-26merge from mainMatt Johnston
--HG-- branch : fuzz
2018-02-26more linting (#58)François Perrad
* const parameter * fix indentation
2018-02-26Fix restricted group code for BSDs, move to separate functionMatt Johnston
2018-02-22Merge branch 'master' of git://github.com/stellarpower/dropbear into ↵Matt Johnston
stellarpower-master
2018-02-22Only load dropbear default host keys if a key is not specifiedCamVan Nguyen
2018-02-20Added the -G option to allow logins only for users that are members of a ↵stellarpower
certain group. This allows finer control of an instance on who can and cannot login over a certain instance (e.g. password and not key). Needs double-checking and ensuring it meets platform requirements.
2018-02-17merge from mainMatt Johnston
--HG-- branch : fuzz
2018-02-16options: Complete the transition to numeric toggles (`#if')Michael Witten
For the sake of review, this commit alters only the code; the affiliated comments within the source files also need to be updated, but doing so now would obscure the operational changes that have been made here. * All on/off options have been switched to the numeric `#if' variant; that is the only way to make this `default_options.h.in' thing work in a reasonable manner. * There is now some very minor compile-time checking of the user's choice of options. * NO_FAST_EXPTMOD doesn't seem to be used, so it has been removed. * ENABLE_USER_ALGO_LIST was supposed to be renamed DROPBEAR_USER_ALGO_LIST, and this commit completes that work. * DROPBEAR_FUZZ seems to be a relatively new, as-yet undocumented option, which was added by the following commit: commit 6e0b539e9ca0b5628c6c5a3d118ad6a2e79e8039 Author: Matt Johnston <matt@ucc.asn.au> Date: Tue May 23 22:29:21 2017 +0800 split out checkpubkey_line() separately It has now been added to `sysoptions.h' and defined as `0' by default. * The configuration option `DROPBEAR_PASSWORD_ENV' is no longer listed in `default_options.h.in'; it is no longer meant to be set by the user, and is instead left to be defined in `sysoptions.h' (where it was already being defined) as merely the name of the environment variable in question: DROPBEAR_PASSWORD To enable or disable use of that environment variable, the user must now toggle `DROPBEAR_USE_DROPBEAR_PASSWORD'. * The sFTP support is now toggled by setting `DROPBEAR_SFTPSERVER', and the path of the sFTP server program is set independently through the usual SFTPSERVER_PATH.
2018-01-23merge up to dateMatt Johnston
--HG-- branch : fuzz
2017-06-27Use MAX_AUTH_TRIES rather than DEFAULT_AUTH_TRIES, don't limit argument rangeMatt Johnston
2017-06-25dropbear server: support -T max auth triesKevin Darbyshire-Bryant
Add support for '-T n' for a run-time specification for maximum number of authentication attempts where 'n' is between 1 and compile time option MAX_AUTH_TRIES. A default number of tries can be specified at compile time using 'DEFAULT_AUTH_TRIES' which itself defaults to MAX_AUTH_TRIES for backwards compatibility. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-06-14merge from mainMatt Johnston
--HG-- branch : fuzz
2017-06-02when pointer, use NULL instead of 0Francois Perrad
2017-05-18merge main to fuzzMatt Johnston
--HG-- branch : fuzz
2017-05-13fuzz harnessMatt Johnston
--HG-- branch : fuzz
2017-05-12copy over some fuzzing code from AFL branchMatt Johnston
--HG-- branch : fuzz
2016-05-04Convert #ifdef to #if, other build changesMatt Johnston
2016-04-12Add manpage and log for forced_commandMatt Johnston
2016-04-12Add -c <command> option to force a specific commandJeremy Kerr
This change adds a -c option to dropbear, to force the session to use a specific command, in a similar fashion to OpenSSH's ForceCommand configuration option. This is useful to provide a simple fixed service over ssh, without requiring an authorized key file for the per-key forced_command option. This setting takes precedence over the channel session's provided command, and the per-key forced_command setting. Signed-off-by: Jeremy Kerr <jk@ozlabs.org>
2015-12-15Moved usingsyslog from svr_runopts to runopts.Konstantin Tokarev
2015-12-02ports and addresses must be malloced to avoid segfault on exitMatt Johnston
2015-11-25mention dropbearkey tooMatt Johnston
2015-11-25Mention "dropbear -R" if no hostkeysMatt Johnston
2015-11-06Enable bundlingGuilhem Moulin
2015-10-28Warn rather than fail if flags have trailing partsMatt Johnston
2015-10-21don't silently ignore extra flag argumentsMatt Johnston
2015-01-28Disable non-delayed zlib for serverMatt Johnston
2014-10-22Don't print "Failed loading hostkey" when -R delayed hostkey option is enabledSteven Honeyman
2014-07-27- Don't use multichar constants since recent gcc complainsMatt Johnston
- Add release script - Simplify print_version
2014-07-27Add '-V' for versionMatt Johnston
-h should exit with success Update manpages
2013-12-03Fix disabling DSS keyMatt Johnston
2013-12-03Exit if we don't have keys and -R wasn't specifiedMatt Johnston
2013-11-14use oldstyle commentsMatt Johnston
2013-11-12Various cleanups and fixes for warningsMatt Johnston
--HG-- branch : ecc
2013-11-07Add '-R' for delayed hostkey optionMatt Johnston
--HG-- branch : keyondemand
2013-11-07refactor key generation, make it generate as required.Matt Johnston
Needs UI in server command line options --HG-- branch : keyondemand
2013-05-25have separate ecdsa keys for each sizeMatt Johnston
fix crash from the mp_alloc_init_multi change in RSA --HG-- branch : ecc
2013-05-21Fix broken disablekey()Matt Johnston
--HG-- branch : ecc
2013-05-03ecdsa is workingMatt Johnston
--HG-- branch : ecc
2013-03-21Add URL to usage textMatt Johnston
2013-03-19Allow specifying server "-p" options with ipv6 bracket notation,Matt Johnston
patch from Ben Jencks
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-27 00:11:24 +0000