Displaying 5 results from an estimated 5 matches for "send_client_banner".
2015 May 23
5
Name based SSH proxy
...intended purpose of this field
is to aid in debugging, thus it just needed to be huamn
redable.
Replacing the comments field with JSON formatted data will
allow it to serve both purposes. I picked JSON because it
is extensible and very simple.
The change amounts to modifying two lines of code in
send_client_banner and passing the hostname as function
argument where it is now necessary. No server side changes
are needed.
--
Kasper Dupont -- Rigtige m?nd skriver deres egne backupprogrammer
#define _(_)"d.%.4s%."_"2s" /* This is my email address */
char*_="@2kaspner"_()"%03&...
2018 Dec 10
2
[PATCH] cleanup of global variables server/client_version_string in sshconnect.c
...n_string = NULL;
-char *server_version_string = NULL;
-struct sshkey *previous_host_key = NULL;
+static struct sshkey *previous_host_key = NULL;
static int matching_host_key_dns = 0;
@@ -605,16 +603,16 @@ ssh_connect(struct ssh *ssh, const char *host, struct addrinfo *addrs,
}
static void
-send_client_banner(int connection_out, int minor1)
+send_client_banner(int connection_out, int minor1, char **client_version_stringp)
{
/* Send our own protocol version identification. */
- xasprintf(&client_version_string, "SSH-%d.%d-%.100s\r\n",
+ xasprintf(client_version_stringp, "SSH-%d.%d-%...
2015 May 26
2
Name based SSH proxy
...al openssh-6.6p1/sshconnect.c
--- openssh-6.6p1/sshconnect.c.original 2015-05-23 11:56:55.235217137 +0200
+++ openssh-6.6p1/sshconnect.c 2015-05-27 01:14:02.563652677 +0200
@@ -560,6 +560,9 @@ ssh_exchange_identification(int timeout_
if (options.protocol == SSH_PROTO_2) {
enable_compat20();
send_client_banner(connection_out, 0);
+ packet_send_ignore(0);
+ packet_send();
+ packet_write_wait();
client_banner_sent = 1;
}
The question then is, would the security implications of
adding these three lines be much worse than my original
patch?
--
Kasper Dupont -- Rigtige m?nd skriver deres egne back...
2015 May 26
6
Name based SSH proxy
On 26/05/15 15.50, Daniel Kahn Gillmor wrote:
> The argument that the DNS lookup leaks this metadata is a bad argument:
> if we followed this line of reasoning, then every problem that has
> multiple contributors could never be solved (A says "but my fixing
> things is useless if B does nothing", while B says "but my fixing things
> is useless if A does nothing"
2013 Oct 07
4
Feature request: FQDN Host match
Hello!
I'm hoping that Gmail won't HTML format this mail so that I'll get flamed :)
Anyway, my question relates to ssh_config. The problem I find is that
the Host pattern is only applied to the argument given on the command
line, as outlined in the man page:
"The host is the hostname argument given on the command line (i.e. the
name is not converted to a canonicalized host name