summaryrefslogtreecommitdiffstats
path: root/src/messages.c
Commit message (Collapse)AuthorAgeFilesLines
* server: Fix ssh_execute_server_callbacks() client executionNicolas Viennot2013-11-031-4/+2
| | | | | | | | | | When the public key auth handler is executed and returns SSH_OK, ssh_execute_server_callbacks() still runs some client callbacks, which may set rc to SSH_AGAIN, which triggers a default reply on auth, denying auth. Signed-off-by: Nicolas Viennot <nicolas@viennot.biz> Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* server: fix pubkey reply for key probesJon Simons2013-11-021-1/+9
| | | | | | | | | | | | | | | Per RFC 4252, it is required to send back only one of either SSH_MSG_USERAUTH_PK_OK or SSH_MSG_USERAUTH_FAILURE for public key probes. Update the handling of 'auth_pubkey_function' to send back PK_OK instead of SSH_MSG_USERAUTH_SUCCESS for the case that the state of the message at hand is SSH_PUBLICKEY_STATE_NONE. With this change, it is now possible to process an initial key probe and then subsequent signature validation using the server callbacks. Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* callbacks: add support for auth_none_functionTristan CACQUERAY2013-09-271-0/+11
|
* gassapi: Fix check if it is enabled.Andreas Schneider2013-07-221-2/+2
|
* messages: Split ssh_execute_server_callbacks() in small functions.Andreas Schneider2013-07-211-157/+198
|
* src: Remove enter_function() and leave_function().Andreas Schneider2013-07-141-58/+48
|
* src: Migrate to SSH_LOG.Andreas Schneider2013-07-141-22/+22
|
* server: Fix compilation without WITH_SERVERAris Adamantiadis2013-07-141-4/+11
|
* Server: disallow channel opening till authenticatedAris Adamantiadis2013-07-131-0/+5
|
* cmake: Make GSSAPI optional.Andreas Schneider2013-07-131-3/+7
|
* server: add pubkey auth callbackAris Adamantiadis2013-07-131-0/+13
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* server: callback for channel_request_subsystemAris Adamantiadis2013-07-131-0/+11
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* server: added 2 missing channel callbacksAris Adamantiadis2013-07-131-0/+22
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* client: call client callback even in non-server modeAris Adamantiadis2013-07-131-13/+16
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* client: handle x11 channel open requests with callbacksAris Adamantiadis2013-07-131-0/+13
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* server: Implement X11 requests and window-changeAris Adamantiadis2013-07-131-0/+18
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* callbacks: make the channel accept callback more logicalAris Adamantiadis2013-07-131-6/+2
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* auth: adapt libssh to gssapi-with-mic serverAris Adamantiadis2013-07-131-0/+53
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* Implement callbacks for servers in the message queueAris Adamantiadis2013-07-131-7/+115
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* server: added channel callbacksAris Adamantiadis2013-07-131-14/+27
| | | | Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
* messages: Fix a possible memory leak.Andreas Schneider2013-06-191-0/+1
|
* messages: Fix a possible segfault.Andreas Schneider2013-06-171-1/+3
|
* messages: Fix memory leaks in user request callback.Andreas Schneider2012-10-121-54/+41
|
* message: Set correct request type.Andreas Schneider2012-10-121-1/+1
| | | | Found by Coverity.
* messages: Fix error path of ssh_packet_userauth_info_response.Andreas Schneider2012-10-051-16/+12
| | | | This fixes a memory leak on error.
* messages: Fix a possible null pointer dereference.Andreas Schneider2012-10-051-0/+3
|
* messages: Fix a possible null pointer dereference.Andreas Schneider2012-09-241-1/+3
|
* build: Fix missing struct in_addr warning.Andreas Schneider2012-07-171-0/+1
|
* message: Fix compiler warning.Andreas Schneider2012-01-021-1/+1
|
* message: Handle all unknown global messages.rofl0r2012-01-011-1/+4
| | | | | Reply to unknown global messages as required by the RFC. Therefore keepalive@openssh.com style messages should get treated in a sane way.
* server: pubkey auth doesn't work with ecdhAris Adamantiadis2011-09-251-2/+2
|
* Update libssh to ssh_handle_packets_terminationAris Adamantiadis2011-09-021-8/+20
| | | | | | | | | | | cherry-picked from 0cb5248 Should resolve all timeout problems Conflicts: src/auth.c src/channels.c
* pki: Use consistent API for ssh_pki_export_pubkey_blob().Andreas Schneider2011-08-301-2/+2
|
* messages: Fix ssh_packet_userauth_request().Andreas Schneider2011-08-261-11/+3
| | | | Remove useless ssh_pki_import_signature_blob().
* Free sig_blob if an error occursmilo2011-08-261-0/+2
|
* Fix double free in ssh_packet_userauth_requestmilo2011-08-261-1/+0
|
* auth: Prefix kbdint functions.Andreas Schneider2011-08-251-5/+5
|
* pki: We need only one signature verify blob function.Andreas Schneider2011-08-231-5/+5
| | | | This fixes the build without server.
* server: Migrate more functions to new pki.Andreas Schneider2011-08-221-49/+53
|
* messages: Move ssh_userauth_build_digest() and make it static.Andreas Schneider2011-08-221-1/+119
|
* session: Fix timeout handling.rofl0r2011-08-061-1/+1
| | | | | -2 now means to use the timeout specified in options. It wasn't used earlier and poll only knows -1 and 0 anyway for special meanings.
* Fixes the ssh_log issue on ssh_bind handles.Aris Adamantiadis2011-07-191-4/+4
|
* Fix compilation without server and sftp modesAris Adamantiadis2011-05-261-0/+20
|
* messages: Try to fix the build.Andreas Schneider2011-05-031-1/+1
|
* [messages] don't queue messages if callback presentmilo2011-05-021-5/+34
| | | | (cherry picked from commit 99d0f6d7c77e064b7fd0f0f46c40988de1996f3b)
* Implemented X11 server sidemilo2011-04-141-0/+35
|
* doc: Added missing doc for common message function.Andreas Schneider2011-03-091-0/+19
|
* doc: Fixed typos in messaging introduction.Andreas Schneider2011-03-091-7/+9
|
* messages: Added missing config.h include.Andreas Schneider2011-02-251-0/+2
|
* Added the keyboard-interactive authentication methodmilo2011-02-101-0/+155
|