search for: rfc2553

Hi, I just tried to build the latest portable code from CVS on Cygwin. I stumbled over a problem with the definitions of gai_strerror and ssh_gai_strerror. On systems not having gai_strerror, the fake-rfc2553.c file defines its own version of gai_strerror, and fake-rfc2553.h additionally has this definition of gai_strerror: #define gai_strerror(a) (ssh_gai_strerror(a)) OTOH, misc.c defines the function ssh_gai_strerror unconditionally, and ssh_gai_strerror is used throughout the ssh sources....

...a production system, we can't make changes without convincing my syadmin and managers. I understand that the purpose of openbsd-compat directory is to provide missing libc calls for portable OpenSSH. In this regard I have the following question for the list members. I am trying to use fake-rfc2553.c as part of my compilation (by undefining HAVE_GETNAMEINFO). Is my approach correct? Thanks for the help, Santhi.

.../* - * Query for account, iff > 1 valid acid & askacid permbit + * Query for account, if > 1 valid acid & askacid permbit */ if (((ue.ue_permbits & PERMBITS_ACCTID) || (ue.ue_acids[0] >= 0) && (ue.ue_acids[1] >= 0)) && Index: openbsd-compat/fake-rfc2553.c =================================================================== RCS file: /usr/local/src/security/openssh/cvs/openssh_cvs/openbsd-compat/fake-rfc2553.c,v retrieving revision 1.2 diff -u -r1.2 fake-rfc2553.c --- openbsd-compat/fake-rfc2553.c 5 Jun 2003 09:37:30 -0000 1.2 +++ openbsd-compat/fak...

...1/packet.c(1371): undefined reference to `howmany' /openssh-3.8p1/packet.c(1375): undefined reference to `howmany' ./libssh.a(canohost.o): In function `check_ip_options': /openssh-3.8p1/canohost.c(150): undefined reference to `getprotobyname' openbsd-compat//libopenbsd-compat.a(fake-rfc2553.o): In function `ssh_getnameinfo': /openssh-3.8p1/openbsd-compat/fake-rfc2553.c(64): undefined reference to `gethostbyaddr' openbsd-compat//libopenbsd-compat.a(fake-rfc2553.o): In function `ssh_getaddrinfo': /openssh-3.8p1/openbsd-compat/fake-rfc2553.c(164): undefined reference to `gets...

...acomp: ERROR: "addrmatch.c", line 100: undefined struct/union member: sin6_scope_id configure checks for presence of struct sockaddr_in6 and uses the system declaration if found (via #define HAVE_STRUCT_SOCKADDR_IN6 in config.h) If not found, the struct is declared in openbsd-compat/fake-rfc2553.h. OSR6 has struct sockaddr_in6 but it does not include the sin6_scope_id member. The declaration in fake-rfc2553.h does include this member, which is referenced in addrmatch.c. So the problem seems to be, openssh erroneously assumes the presence of sin6_scope_id if struct sockaddr_in6 is present...

Hi All. While wandering in auth-pam.c I noticed that there's a few Portable-specific escapees from the xmalloc(foo * bar) cleanup. There's also a "probably can't happen" integer overflow in ssh-rand-helper.c with the memset: num_cmds = 64; - entcmd = xmalloc(num_cmds * sizeof(entropy_cmd_t)); + entcmd = xcalloc(num_cmds, sizeof(entropy_cmd_t));

...from the lookup, and passes this on so it can be used in the SSHFP record query. As a side-effect, the patch will completely suppress the SSHFP lookup if establishing an SSH1 connection, as RSA1 keys cannot be stored in SSHFP records anyway. The getaddrinfo() implementation in openbsd-compat/fake-rfc2553.c is also updated to support the AI_CANONNAME flag. I don't use OpenBSD, so the patch was prepared against the latest snapshot of the portable OpenSSH version. Sorry if this causes any inconvenience. Regards, Jan diff -ur openssh/dns.c openssh-sshfp/dns.c --- openssh/dns.c 2010-08-31 14:41:...

...than the converse, but it still was a problem. The problem ultimately appears to be with the getaddrinfo that is supplied with HP-UX 11i. In the ssh configure, it tries to see if there's a getaddrinfo available. If so, it doesn't use the one in the openbsd-compat directory (file is fake-rfc2553.[ch]). (this is what 11.00 automatically uses). Since 11i does have a getaddrinfo, it tries to use that, but it appears to be broken. So I just added the following lines to configure (around line 3782) cat >>confdefs.h <<\EOF #define BROKEN_GETADDRINFO 1 EOF There's a w...

http://bugzilla.mindrot.org/show_bug.cgi?id=699 Summary: server broke connection without message Product: Portable OpenSSH Version: 3.7.1p1 Platform: MIPS OS/Version: IRIX Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: openssh-bugs at mindrot.org ReportedBy:

Hi, I've seen a few messages re. problems with 3.7.1p1 on IRIX 6.5... I'm using 6.5.19 and having no trouble compiling, installing and starting, but sshd just closes the connection with no explanation. debug/verbose modes don't seem to give any clues. Darren Tucker suggested defining BROKEN_GETADDRINFO in config.h, but I find that compilation then fails (assuming I've implemented

Currently, if IPv6-enabled rsync is run as --daemon, it will perform a wildcard bind(2) on an AF_INET6 socket and expect that IPv4 traffic will be forwarded to the v6 socket (IPv4 mapped address, RFC2553). This has never worked on OpenBSD which disallows IPv4 mapped addresses for security reasons. On FreeBSD 5.0-CURRENT, where the behavior is subject to configuration, the default was switched to "disable" a few days ago. According to their man page, NetBSD share this. Server processes...

...|RESOLVED Resolution| |INVALID ------- Additional Comments From dtucker at zip.com.au 2003-12-22 21:22 ------- The "const char *gai_strerror" thing is now handled: 20030923 [snip] - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.c openbsd-compat/fake-rfc2553.h] Bug #659: Test for and handle systems with where gai_strerror is defined as "const char *". Part of patch supplied by bugzilla-openssh at thewrittenword.com Since it appears that the root cause is a bug in an OS library, I'm closing this bug...

in configure.ac, we AC_DEFINE(BROKEN_GETADDRINFO) for *-darwin-* platforms. recent Darwin fixed getaddrinfo to work as specified in RFC2553, so the case clause is not needed for recent Darwin. still not sure when it was corrected. anyone has a clue? itojun

Dear OpenSSH developers, I'm trying to port OpenSSH to our NEC SX4, but am having trouble finding reference to the 'addrinfo' structure. (Refer ssh.c:488). If anyone can shed some light on this struct, or has ported OpenSSH to a similar platform, I'd be very interested to hear from you. Thanks, Niels -- HPC Systems Programmer Information Technology Services, The University

compiling ssh on HPUX get the following. any help or pointers please $ make (cd openbsd-compat && make) /usr/local/bin/ar rv libopenbsd-compat.a bsd-arc4random.o bsd-cray.o bsd -cygwin_util.o bsd-getpeereid.o bsd-misc.o bsd-nextstep.o bsd-snprintf.o bsd-wai tpid.o fake-rfc2553.o xmmap.o xcrypt.o base64.o basename.o bindresvport.o daemon .o dirname.o getcwd.o getgrouplist.o getopt.o getrrsetbyname.o glob.o inet_aton. o inet_ntoa.o inet_ntop.o mktemp.o readpassphrase.o realpath.o rresvport.o seten v.o setproctitle.o sigact.o strlcat.o strlcpy.o strmode.o strsep.o vis.o...

...OS/Version: OSF/1 Status: NEW Severity: trivial Priority: P2 Component: Build system AssignedTo: openssh-bugs at mindrot.org ReportedBy: jschulen at gmx.de cc generates lot of warnings with same message: cc: Warning: openbsd-compat/fake-rfc2553.h, line 136: The redefinition of the macro "getaddrinfo" conflicts with a current definition because the number of parameters is different. The redefinition is now in effect. (macroredef) #define getaddrinfo(a,b,c,d) (ssh_getaddrinfo(a,b,c,d)) --------------------^ ------- You are...

...before '__extension__' ../openbsd-compat/openbsd-compat.h:112: error: expected identifier or '(' before ')' token In file included from ../openbsd-compat/openbsd-compat.h:181, from ../includes.h:209, from strsep.c:34: ../openbsd-compat/fake-rfc2553.h:130: error: redefinition of 'struct addrinfo' strsep.c:53: error: expected identifier or '(' before '__extension__' strsep.c:53: error: expected identifier or '(' before ')' token make: *** [strsep.o] Error 1 Lines 111-113 of openbsd-compat/openbsd-compat....

Hi, OpenSSH 6.8 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This release contains some substantial new features and a number of bugfixes. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is

....in.old 2005-06-13 15:36:16.322790000 -0700 +++ openssh/openbsd-compat/Makefile.in 2005-08-24 16:51:30.417680000 -0700 @@ -20,7 +20,7 @@ COMPAT=bsd-arc4random.o bsd-closefrom.o bsd-cray.o bsd-cygwin_util.o bsd-getpeereid.o bsd-misc.o bsd-nextstep.o bsd-openpty.o bsd-snprintf.o bsd-waitpid.o fake-rfc2553.o openssl-compat.o xmmap.o xcrypt.o -PORTS=port-irix.o port-aix.o +PORTS=port-irix.o port-aix.o port-uw.o .c.o: $(CC) $(CFLAGS) $(CPPFLAGS) -c $< --- openssh/openbsd-compat/openbsd-compat.h.old 2005-06-17 08:29:17.605619000 -0700 +++ openssh/openbsd-compat/openbsd-compat.h 2005-08-25 20:5...

Hi, OpenSSH 7.2 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This release contains many bugfixes and several new features. The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is available via Git at https://anongit.mindrot.org/openssh.git/ or via a mirror on Github at