commit fd0fa130ecf06d7d092932adcd5d77f1549bfc8d
Author: Damien Miller <djm@mindrot.org>
Date:   Thu Apr 18 08:52:57 2019 +1000

    makedepend

commit 5de397a876b587ba05a9169237deffdc71f273b0
Author: Damien Miller <djm@mindrot.org>
Date:   Fri Apr 5 11:29:51 2019 -0700

    second thoughts: leave README in place
    
    A number of contrib/* files refer to the existing README so let's leave
    it in place for release and add the new markdown version in parallel.
    
    I'll get rid of README after release.

commit 5d3127d9274519b25ed10e320f45045ba8d7f3be
Author: Damien Miller <djm@mindrot.org>
Date:   Fri Apr 5 11:29:31 2019 -0700

    Revert "rewrite README"
    
    This reverts commit 9444d82678cb7781820da4d1c23b3c2b9fb1e12f.

commit 9444d82678cb7781820da4d1c23b3c2b9fb1e12f
Author: Damien Miller <djm@mindrot.org>
Date:   Fri Apr 5 11:21:48 2019 -0700

    rewrite README
    
    Include basic build instructions and comments on commonly-used build-
    time flags, links to the manual pages and other resources.
    
    Now in Markdown format for better viewing on github, etc.

commit a924de0c4908902433813ba205bee1446bd1a157
Author: Damien Miller <djm@mindrot.org>
Date:   Fri Apr 5 03:41:52 2019 +1100

    update versions

commit 312dcee739bca5d6878c536537b2a8a497314b75
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Wed Apr 3 15:48:45 2019 +0000

    upstream: openssh-8.0
    
    OpenBSD-Commit-ID: 5aafdf218679dab982fea20771afd643be9a127b

commit 885bc114692046d55e2a170b932bdc0092fa3456
Author: Damien Miller <djm@mindrot.org>
Date:   Thu Apr 4 02:47:40 2019 +1100

    session: Do not use removed API
    
    from Jakub Jelen

commit 9d7b2882b0c9a5e9bf8312ce4075bf178e2b98be
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Fri Mar 29 11:31:40 2019 +0000

    upstream: when logging/fataling on error, include a bit more detail
    
    than just the function name and the error message
    
    OpenBSD-Commit-ID: dd72d7eba2215fcb89be516c378f633ea5bcca9f

commit 79a87d32783d6c9db40af8f35e091d9d30365ae7
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Wed Apr 3 06:27:45 2019 +1100

    Remove "struct ssh" from sys_auth_record_login.
    
    It's not needed, and is not available from the call site in loginrec.c
    Should only affect AIX, spotted by Kevin Brott.

commit 138c0d52cdc90f9895333b82fc57d81cce7a3d90
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Tue Apr 2 18:21:35 2019 +1100

    Adapt custom_failed_login to new prototype.
    
    Spotted by Kevin Brott.

commit a0ca4009ab2f0b1007ec8ab6864dbf9b760a8ed5
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Mon Apr 1 20:07:23 2019 +1100

    Add includes.h for compat layer.
    
    Should fix build on AIX 7.2.

commit 00991151786ce9b1d577bdad1f83a81d19c8236d
Author: Tim Rice <tim@multitalents.net>
Date:   Sun Mar 31 22:14:22 2019 -0700

    Stop USL compilers for erroring with "integral constant expression expected"

commit 43f47ebbdd4037b569c23b8f4f7981f53b567f1d
Author: Tim Rice <tim@multitalents.net>
Date:   Sun Mar 31 19:22:19 2019 -0700

    Only use O_NOFOLLOW in fchownat and fchmodat if defined

commit 342d6e51589b184c337cccfc4c788b60ff8b3765
Author: Jakub Jelen <jjelen@redhat.com>
Date:   Fri Mar 29 12:29:41 2019 +0100

    Adjust softhsm2 path on Fedora Linux for regress
    
    The SoftHSM lives in Fedora in /usr/lib64/pkcs11/libsofthsm2.so

commit f5abb05f8c7358dacdcb866fe2813f6d8efd5830
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Thu Mar 28 09:26:14 2019 +1100

    Only use O_NOFOLLOW in utimensat if defined.
    
    Fixes build on systems that don't have it (Solaris <=9)  Found by
    Tom G. Christensen.

commit 786cd4c1837fdc3fe7b4befe54a3f37db7df8715
Author: Corinna Vinschen <vinschen@redhat.com>
Date:   Wed Mar 27 18:18:21 2019 +0100

    drop old Cygwin considerations
    
    - Cygwin supports non-DOS characters in filenames
    - Cygwin does not support Windows XP anymore
    
    Signed-off-by: Corinna Vinschen <vinschen@redhat.com>

commit 21da87f439b48a85b951ef1518fe85ac0273e719
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Wed Mar 27 09:29:14 2019 +0000

    upstream: fix interaction between ClientAliveInterval and RekeyLimit
    
    that could cause connection to close incorrectly; Report and patch from Jakub
    Jelen in bz#2757; ok dtucker@ markus@
    
    OpenBSD-Commit-ID: 17229a8a65bd8e6c2080318ec2b7a61e1aede3fb

commit 4f0019a9afdb4a94d83b75e82dbbbe0cbe826c56
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Mon Mar 25 22:34:52 2019 +0000

    upstream: Fix authentication failures when "AuthenticationMethods
    
    any" in a Match block overrides a more restrictive global default.
    
    Spotted by jmc@, ok markus@
    
    OpenBSD-Commit-ID: a90a4fe2ab81d0eeeb8fdfc21af81f7eabda6666

commit d6e5def308610f194c0ec3ef97a34a3e9630e190
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Mon Mar 25 22:33:44 2019 +0000

    upstream: whitespace
    
    OpenBSD-Commit-ID: 106e853ae8a477e8385bc53824d3884a8159db07

commit 26e0cef07b04479537c971dec898741df1290fe5
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Mon Mar 25 16:19:44 2019 +0000

    upstream: Expand comment to document rationale for default key
    
    sizes. "seems worthwhile" deraadt.
    
    OpenBSD-Commit-ID: 72e5c0983d7da1fb72f191870f36cb58263a2456

commit f47269ea67eb4ff87454bf0d2a03e55532786482
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Mon Mar 25 15:49:00 2019 +0000

    upstream: Increase the default RSA key size to 3072 bits. Based on
    
    the estimates from NIST Special Publication 800-57, 3k bits provides security
    equivalent to 128 bits which is the smallest symmetric cipher we enable by
    default. ok markus@ deraadt@
    
    OpenBSD-Commit-ID: 461dd32ebe808f88f4fc3ec74749b0e6bef2276b

commit 62949c5b37af28d8490d94866e314a76be683a5e
Author: jmc@openbsd.org <jmc@openbsd.org>
Date:   Fri Mar 22 20:58:34 2019 +0000

    upstream: full stop in the wrong place;
    
    OpenBSD-Commit-ID: 478a0567c83553a2aebf95d0f1bd67ac1b1253e4

commit 1b1332b5bb975d759a50b37f0e8bc8cfb07a0bb0
Author: jmc@openbsd.org <jmc@openbsd.org>
Date:   Sat Mar 16 19:14:21 2019 +0000

    upstream: benno helped me clean up the tcp forwarding section;
    
    OpenBSD-Commit-ID: d4bec27edefde636fb632b7f0b7c656b9c7b7f08

commit 2aee9a49f668092ac5c9d34e904ef7a9722e541d
Author: markus@openbsd.org <markus@openbsd.org>
Date:   Fri Mar 8 17:24:43 2019 +0000

    upstream: fix use-after-free in ssh-pkcs11; found by hshoexer w/AFL
    
    OpenBSD-Commit-ID: febce81cca72b71f70513fbee4ff52ca050f675c

commit 9edbd7821e6837e98e7e95546cede804dac96754
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Thu Mar 14 10:17:28 2019 +1100

    Fix build when configured --without-openssl.
    
    ok djm@

commit 825ab32f0d04a791e9d19d743c61ff8ed9b4d8e5
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Thu Mar 14 08:51:17 2019 +1100

    On Cygwin run sshd as SYSTEM where possible.
    
    Seteuid now creates user token using S4U.  We don't create a token
    from scratch anymore, so we don't need the "Create a process token"
    privilege.  The service can run under SYSTEM again...
    
    ...unless Cygwin is running on Windows Vista or Windows 7 in the
    WOW64 32 bit emulation layer.  It turns out that WOW64 on these systems
    didn't implement MsV1_0 S4U Logon so we still need the fallback
    to NtCreateToken for these systems.
    
    Signed-off-by: Corinna Vinschen <vinschen@redhat.com>

commit a212107bfdf4d3e870ab7a443e4d906e5b9578c3
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Wed Mar 13 10:49:16 2019 +1100

    Replace alloca with xcalloc.
    
    The latter checks for memory exhaustion and integer overflow and may be
    at a less predictable place.  Sanity check by vinschen at redhat.com, ok
    djm@

commit daa7505aadca68ba1a2c70cbdfce423208eb91ee
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Tue Mar 12 09:19:19 2019 +1100

    Use Cygwin-specific matching only for users+groups.
    
    Patch from vinschen at redhat.com, updated a little by me.

commit fd10cf027b56f9aaa80c9e3844626a05066589a4
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Wed Mar 6 22:14:23 2019 +0000

    upstream: Move checks for lists of users or groups into their own
    
    function. This is a no-op on OpenBSD but will make things easier in
    -portable, eg on systems where these checks should be case-insensitive.  ok
    djm@
    
    OpenBSD-Commit-ID: 8bc9c8d98670e23f8eaaaefe29c1f98e7ba0487e

commit ab5fee8eb6a011002fd9e32b1597f02aa8804a25
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Wed Mar 6 21:06:59 2019 +0000

    upstream: Reset last-seen time when sending a keepalive. Prevents
    
    sending two keepalives successively and prematurely terminating connection
    when ClientAliveCount=1.  While there, collapse two similar tests into one.
    ok markus@
    
    OpenBSD-Commit-ID: 043670d201dfe222537a2a4bed16ce1087de5ddd

commit c13b74530f9f1d9df7aeae012004b31b2de4438e
Author: naddy@openbsd.org <naddy@openbsd.org>
Date:   Tue Mar 5 16:17:12 2019 +0000

    upstream: PKCS#11 support is no longer limited to RSA; ok benno@
    
    kn@
    
    OpenBSD-Commit-ID: 1a9bec64d530aed5f434a960e7515a3e80cbc826

commit e9552d6043db7cd170ac6ba1b4d2c7a5eb2c3201
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Fri Mar 1 03:29:32 2019 +0000

    upstream: in ssh_set_newkeys(), mention the direction that we're
    
    keying in debug messages. Previously it would be difficult to tell which
    direction it was talking about
    
    OpenBSD-Commit-ID: c2b71bfcceb2a7389b9d0b497fb2122a406a522d

commit 76a24b3fa193a9ca3e47a8779d497cb06500798b
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Fri Mar 1 02:32:39 2019 +0000

    upstream: Fix two race conditions in sshd relating to SIGHUP:
    
    1. Recently-forked child processes will briefly remain listening to
      listen_socks. If the main server sshd process completes its restart
      via execv() before these sockets are closed by the child processes
      then it can fail to listen at the desired addresses/ports and/or
      fail to restart.
    
    2. When a SIGHUP is received, there may be forked child processes that
      are awaiting their reexecution state. If the main server sshd
      process restarts before passing this state, these child processes
      will yield errors and use a fallback path of reading the current
      sshd_config from the filesystem rather than use the one that sshd
      was started with.
    
    To fix both of these cases, we reuse the startup_pipes that are shared
    between the main server sshd and forked children. Previously this was
    used solely to implement tracking of pre-auth child processes for
    MaxStartups, but this extends the messaging over these pipes to include
    a child->parent message that the parent process is safe to restart. This
    message is sent from the child after it has completed its preliminaries:
    closing listen_socks and receiving its reexec state.
    
    bz#2953, reported by Michal Koutný; ok markus@ dtucker@
    
    OpenBSD-Commit-ID: 7df09eacfa3ce13e9a7b1e9f17276ecc924d65ab

commit de817e9dfab99473017d28cdf69e60397d00ea21
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Fri Mar 1 02:16:47 2019 +0000

    upstream: mention PKCS11Provide=none, reword a little and remove
    
    mention of RSA keys only (since we support ECDSA now and might support others
    in the future). Inspired by Jakub Jelen via bz#2974
    
    OpenBSD-Commit-ID: a92e3686561bf624ccc64ab320c96c9e9a263aa5

commit 95a8058c1a90a27acbb91392ba206854abc85226
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Fri Mar 1 02:08:50 2019 +0000

    upstream: let PKCS11Provider=none do what users expect
    
    print PKCS11Provider instead of obsolete SmartcardDevice in config dump.
    
    bz#2974 ok dtucker@
    
    OpenBSD-Commit-ID: c303d6f0230a33aa2dd92dc9b68843d56a64f846

commit 8e7bac35aa576d2fd7560836da83733e864ce649
Author: markus@openbsd.org <markus@openbsd.org>
Date:   Wed Feb 27 19:37:01 2019 +0000

    upstream: dup stdout/in for proxycommand=-, otherwise stdout might
    
    be redirected to /dev/null; ok djm@
    
    OpenBSD-Commit-ID: 97dfce4c47ed4055042de8ebde85b7d88793e595

commit 9b61130fbd95d196bce81ebeca94a4cb7c0d5ba0
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Sat Feb 23 08:20:43 2019 +0000

    upstream: openssh-7.9 accidentally reused the server's algorithm lists
    
    in the client for KEX, ciphers and MACs. The ciphers and MACs were identical
    between the client and server, but the error accidentially disabled the
    diffie-hellman-group-exchange-sha1 KEX method.
    
    This fixes the client code to use the correct method list, but
    because nobody complained, it also disables the
    diffie-hellman-group-exchange-sha1 KEX method.
    
    Reported by nuxi AT vault24.org via bz#2697; ok dtucker
    
    OpenBSD-Commit-ID: e30c33a23c10fd536fefa120e86af1842e33fd57

commit 37638c752041d591371900df820f070037878a2d
Author: Corinna Vinschen <vinschen@redhat.com>
Date:   Wed Feb 20 13:41:25 2019 +0100

    Cygwin: implement case-insensitive Unicode user and group name matching
    
    The previous revert enabled case-insensitive user names again.  This
    patch implements the case-insensitive user and group name matching.
    To allow Unicode chars, implement the matcher using wchar_t chars in
    Cygwin-specific code.  Keep the generic code changes as small as possible.
    Cygwin: implement case-insensitive Unicode user and group name matching
    
    Signed-off-by: Corinna Vinschen <vinschen@redhat.com>

commit bed1d43698807a07bb4ddb93a46b0bd84b9970b3
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Fri Feb 22 15:21:21 2019 +1100

    Revert unintended parts of previous commit.

commit f02afa350afac1b2f2d1413259a27a4ba1e2ca24
Author: Corinna Vinschen <vinschen@redhat.com>
Date:   Wed Feb 20 13:41:24 2019 +0100

    Revert "[auth.c] On Cygwin, refuse usernames that have differences in case"
    
    This reverts commit acc9b29486dfd649dfda474e5c1a03b317449f1c.
    
    Signed-off-by: Corinna Vinschen <vinschen@redhat.com>

commit 4c55b674835478eb80a1a7aeae588aa654e2a433
Author: Corinna Vinschen <vinschen@redhat.com>
Date:   Sat Feb 16 14:13:43 2019 +0100

    Add tags to .gitignore
    
    Signed-off-by: Corinna Vinschen <vinschen@redhat.com>

commit 625b62634c33eaef4b80d07529954fe5c6435fe5
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Fri Feb 22 03:37:11 2019 +0000

    upstream: perform removal of agent-forwarding directory in forward
    
    setup error path with user's privileged. This is a no-op as this code always
    runs with user privilege now that we no longer support running sshd with
    privilege separation disabled, but as long as the privsep skeleton is there
    we should follow the rules.
    MIME-Version: 1.0
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: 8bit
    
    bz#2969 with patch from Erik Sjölund
    
    OpenBSD-Commit-ID: 2b708401a5a8d6133c865d7698d9852210dca846

commit d9ecfaba0b2f1887d20e4368230632e709ca83be
Author: jmc@openbsd.org <jmc@openbsd.org>
Date:   Mon Feb 18 07:02:34 2019 +0000

    upstream: sync the description of ~/.ssh/config with djm's updated
    
    description in ssh.1; issue pointed out by andreas kahari
    
    ok dtucker djm
    
    OpenBSD-Commit-ID: 1b01ef0ae2c6328165150badae317ec92e52b01c

commit 38e83e4f219c752ebb1560633b73f06f0392018b
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Feb 12 23:53:10 2019 +0000

    upstream: fix regression in r1.302 reported by naddy@ - only the first
    
    public key from the agent was being attempted for use.
    
    OpenBSD-Commit-ID: 07116aea521a04888718b2157f1ca723b2f46c8d

commit 5c68ea8da790d711e6dd5f4c30d089c54032c59a
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Mon Feb 11 09:44:42 2019 +0000

    upstream: cleanup GSSAPI authentication context after completion of the
    
    authmethod. Move function-static GSSAPI state to the client Authctxt
    structure. Make static a bunch of functions that aren't used outside this
    file.
    
    Based on patch from Markus Schmidt <markus@blueflash.cc>; ok markus@
    
    OpenBSD-Commit-ID: 497fb792c0ddb4f1ba631b6eed526861f115dbe5

commit a8c807f1956f81a92a758d3d0237d0ff06d0be5d
Author: benno@openbsd.org <benno@openbsd.org>
Date:   Sun Feb 10 16:35:41 2019 +0000

    upstream: ssh-keygen -D pkcs11.so needs to initialize pkcs11
    
    interactive, so it can ask for the smartcards PIN. ok markus@
    
    OpenBSD-Commit-ID: 1be7ccf88f1876e0fc4d7c9b3f96019ac5655bab

commit 3d896c157c722bc47adca51a58dca859225b5874
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Sun Feb 10 11:15:52 2019 +0000

    upstream: when checking that filenames sent by the server side
    
    match what the client requested, be prepared to handle shell-style brace
    alternations, e.g. "{foo,bar}".
    
    "looks good to me" millert@ + in snaps for the last week courtesy
    deraadt@
    
    OpenBSD-Commit-ID: 3b1ce7639b0b25b2248e3a30f561a548f6815f3e

commit 318e4f8548a4f5c0c913f61e27d4fc21ffb1eaae
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Sun Feb 10 11:10:57 2019 +0000

    upstream: syslog when connection is dropped for attempting to run a
    
    command when ForceCommand=internal-sftp is in effect; bz2960; ok dtucker@
    
    OpenBSD-Commit-ID: 8c87fa66d7fc6c0fffa3a3c28e8ab5e8dde234b8

commit 2ff2e19653b8c0798b8b8eff209651bdb1be2761
Author: Damien Miller <djm@mindrot.org>
Date:   Fri Feb 8 14:53:35 2019 +1100

    don't set $MAIL if UsePam=yes
    
    PAM typically specifies the user environment if it's enabled, so don't
    second guess. bz#2937; ok dtucker@

commit 03e92dd27d491fe6d1a54e7b2f44ef1b0a916e52
Author: Damien Miller <djm@mindrot.org>
Date:   Fri Feb 8 14:50:36 2019 +1100

    use same close logic for stderr as stdout
    
    Avoids sending SIGPIPE to child processes after their parent exits
    if they attempt to write to stderr.
    
    Analysis and patch from JD Paul; patch reworked by Jakub Jelen and
    myself. bz#2071; ok dtucker@

commit 8c53d409baeeaf652c0c125a9b164edc9dbeb6de
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Tue Feb 5 11:35:56 2019 +0000

    upstream: Adapt code in the non-USE_PIPES codepath to the new packet
    
    API. This code is not normally reachable since USE_PIPES is always defined.
    bz#2961, patch from adrian.fita at gmail com.
    
    OpenBSD-Commit-ID: 8d8428d678d1d5eb4bb21921df34e8173e6d238a

commit 7a7fdca78de4b4774950be056099e579ef595414
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Mon Feb 4 23:37:54 2019 +0000

    upstream: fix NULL-deref crash in PKCS#11 code when attempting
    
    login to a token requiring a PIN; reported by benno@ fix mostly by markus@
    
    OpenBSD-Commit-ID: 438d0b114b1b4ba25a9869733db1921209aa9a31

commit cac302a4b42a988e54d32eb254b29b79b648dbf5
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Mon Feb 4 02:39:42 2019 +0000

    upstream: Remove obsolete "Protocol" from commented out examples. Patch
    
    from samy.mahmoudi at gmail com.
    
    OpenBSD-Commit-ID: 16aede33dae299725a03abdac5dcb4d73f5d0cbf

commit 483b3b638500fd498b4b529356e5a0e18cf76891
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Fri Feb 1 03:52:23 2019 +0000

    upstream: Save connection timeout and restore for 2nd and
    
    subsequent attempts, preventing them from having no timeout.  bz#2918, ok
    djm@
    
    OpenBSD-Commit-ID: 4977f1d0521d9b6bba0c9a20d3d226cefac48292

commit 5f004620fdc1b2108139300ee12f4014530fb559
Author: markus@openbsd.org <markus@openbsd.org>
Date:   Wed Jan 30 19:51:15 2019 +0000

    upstream: Add authors for public domain sntrup4591761 code;
    
    confirmed by Daniel J. Bernstein
    
    OpenBSD-Commit-ID: b4621f22b8b8ef13e063c852af5e54dbbfa413c1

commit 2c21b75a7be6ebdcbceaebb43157c48dbb36f3d8
Author: jmc@openbsd.org <jmc@openbsd.org>
Date:   Sun Jan 27 07:14:11 2019 +0000

    upstream: add -T to usage();
    
    OpenBSD-Commit-ID: a7ae14d9436c64e1bd05022329187ea3a0ce1899

commit 19a0f0529d3df04118da829528cac7ceff380b24
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Mon Jan 28 03:50:39 2019 +0000

    upstream: The test sshd_config in in $OBJ.
    
    OpenBSD-Regress-ID: 1e5d908a286d8e7de3a15a0020c8857f3a7c9172

commit 8fe25440206319d15b52d12b948a5dfdec14dca3
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Mon Jan 28 03:28:10 2019 +0000

    upstream: Remove leftover debugging.
    
    OpenBSD-Regress-ID: 3d86c3d4867e46b35af3fd2ac8c96df0ffdcfeb9

commit e30d32364d12c351eec9e14be6c61116f9d6cc90
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Mon Jan 28 00:12:36 2019 +0000

    upstream: Enable ssh-dss for the agent test. Disable it for the
    
    certificate test.
    
    OpenBSD-Regress-ID: 388c1e03e1def539d350f139b37d69f12334668d

commit ffdde469ed56249f5dc8af98da468dde35531398
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Mon Jan 28 00:08:26 2019 +0000

    upstream: Count the number of key types instead of assuming there
    
    are only two.
    
    OpenBSD-Regress-ID: 0998702c41235782cf0beee396ec49b5056eaed9

commit 1d05b4adcba08ab068466e5c08dee2f5417ec53a
Author: Corinna Vinschen <vinschen@redhat.com>
Date:   Sat Jan 26 23:42:40 2019 +0100

    Cygwin: only tweak sshd_config file if it's new, drop creating sshd user
    
    The sshd_config tweaks were executed even if the old file was
    still in place.  Fix that.  Also disable sshd user creation.
    It's not used on Cygwin.

commit 89843de0c4c733501f6b4f988098e6e06963df37
Author: Corinna Vinschen <vinschen@redhat.com>
Date:   Sat Jan 26 23:03:12 2019 +0100

    Cygwin: Change service name to cygsshd
    
    Microsoft hijacked the sshd service name without asking.

commit 2a9b3a2ce411d16cda9c79ab713c55f65b0ec257
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Sun Jan 27 06:30:53 2019 +0000

    upstream: Generate all key supported key types and enable for keyscan
    
    test.
    
    OpenBSD-Regress-ID: 72f72ff49946c61bc949e1692dd9e3d71370891b

commit 391ffc4b9d31fa1f4ad566499fef9176ff8a07dc
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Sat Jan 26 22:41:28 2019 +0000

    upstream: check in scp client that filenames sent during
    
    remote->local directory copies satisfy the wildcard specified by the user.
    
    This checking provides some protection against a malicious server
    sending unexpected filenames, but it comes at a risk of rejecting wanted
    files due to differences between client and server wildcard expansion rules.
    
    For this reason, this also adds a new -T flag to disable the check.
    
    reported by Harry Sintonen
    fix approach suggested by markus@;
    has been in snaps for ~1wk courtesy deraadt@
    
    OpenBSD-Commit-ID: 00f44b50d2be8e321973f3c6d014260f8f7a8eda

commit c2c18a39683db382a15b438632afab3f551d50ce
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Sat Jan 26 22:35:01 2019 +0000

    upstream: make ssh-keyscan return a non-zero exit status if it
    
    finds no keys. bz#2903
    
    OpenBSD-Commit-ID: 89f1081fb81d950ebb48e6e73d21807b2723d488

commit 05b9a466700b44d49492edc2aa415fc2e8913dfe
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Thu Jan 24 17:00:29 2019 +0000

    upstream: Accept the host key fingerprint as a synonym for "yes"
    
    when accepting an unknown host key.  This allows you to paste a fingerprint
    obtained out of band into the yes/no prompt and have the client do the
    comparison for you.  ok markus@ djm@
    
    OpenBSD-Commit-ID: 3c47d10b9f43d3d345e044fd9ec09709583a2767

commit bdc6c63c80b55bcbaa66b5fde31c1cb1d09a41eb
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Thu Jan 24 16:52:17 2019 +0000

    upstream: Have progressmeter force an update at the beginning and
    
    end of each transfer.  Fixes the problem recently introduces where very quick
    transfers do not display the progressmeter at all.  Spotted by naddy@
    
    OpenBSD-Commit-ID: 68dc46c259e8fdd4f5db3ec2a130f8e4590a7a9a

commit 258e6ca003e47f944688ad8b8de087b58a7d966c
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Thu Jan 24 02:42:23 2019 +0000

    upstream: Check for both EAGAIN and EWOULDBLOCK. This is a no-op
    
    in OpenBSD (they are the same value) but makes things easier in -portable
    where they may be distinct values.  "sigh ok" deraadt@
    
    (ID sync only, portable already had this change).
    
    OpenBSD-Commit-ID: 91f2bc7c0ecec905915ed59fa37feb9cc90e17d7

commit 281ce042579b834cdc1e74314f1fb2eeb75d2612
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Thu Jan 24 02:34:52 2019 +0000

    upstream: Always initialize 2nd arg to hpdelim2. It populates that
    
    *ONLY IF* there's a delimiter.  If there's not (the common case) it checked
    uninitialized memory, which usually passed, but if not would cause spurious
    failures when the uninitialized memory happens to contain "/".  ok deraadt.
    
    OpenBSD-Commit-ID: 4291611eaf2a53d4c92f4a57c7f267c9f944e0d3

commit d05ea255678d9402beda4416cd0360f3e5dfe938
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Wed Jan 23 21:50:56 2019 +0000

    upstream: Remove support for obsolete host/port syntax.
    
    host/port was added in 2001 as an alternative to host:port syntax for
    the benefit of IPv6 users.  These days there are establised standards
    for this like [::1]:22 and the slash syntax is easily mistaken for CIDR
    notation, which OpenSSH now supports for some things.  Remove the slash
    notation from ListenAddress and PermitOpen.  bz#2335, patch from jjelen
    at redhat.com, ok markus@
    
    OpenBSD-Commit-ID: fae5f4e23c51a368d6b2d98376069ac2b10ad4b7

commit 177d6c80c557a5e060cd343a0c116a2f1a7f43db
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Wed Jan 23 20:48:52 2019 +0000

    upstream: Remove duplicate word. bz#2958, patch from jjelen at
    
    redhat.com
    
    OpenBSD-Commit-ID: cca3965a8333f2b6aae48b79ec1d72f7a830dd2c

commit be3e6cba95dffe5fcf190c713525b48c837e7875
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Wed Jan 23 09:49:00 2019 +0000

    upstream: Remove 3 as a guess for possible generator during moduli
    
    generation. It's not mentioned in RFC4419 and it's not possible for
    Sophie-Germain primes greater than 5.  bz#2330, from Christian Wittenhorst ,
    ok djm@ tb@
    
    OpenBSD-Commit-ID: 1467652e6802ad3333b0959282d8d49dfe22c8cd

commit 8976f1c4b2721c26e878151f52bdf346dfe2d54c
Author: dtucker@openbsd.org <dtucker@openbsd.org>
Date:   Wed Jan 23 08:01:46 2019 +0000

    upstream: Sanitize scp filenames via snmprintf. To do this we move
    
    the progressmeter formatting outside of signal handler context and have the
    atomicio callback called for EINTR too.  bz#2434 with contributions from djm
    and jjelen at redhat.com, ok djm@
    
    OpenBSD-Commit-ID: 1af61c1f70e4f3bd8ab140b9f1fa699481db57d8

commit 6249451f381755f792c6b9e2c2f80cdc699c14e2
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Thu Jan 24 10:00:20 2019 +1100

    For broken read/readv comparisons, poll(RW).
    
    In the cases where we can't compare to read or readv function pointers
    for some reason we currently ifdef out the poll() used to block while
    waiting for reads or writes, falling back to busy waiting.  This restores
    the poll() in this case, but has it always check for read or write,
    removing an inline ifdef in the process.

commit 5cb503dff4db251520e8bf7d23b9c97c06eee031
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Thu Jan 24 09:55:16 2019 +1100

    Include unistd.h for strmode().

commit f236ca2741f29b5c443c0b2db3aa9afb9ad9befe
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Thu Jan 24 09:50:58 2019 +1100

    Also undef SIMPLEQ_FOREACH_SAFE.
    
    Prevents macro redefinition warning on at least NetBSD 6.1.

commit be063945e4e7d46b1734d973bf244c350fae172a
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Wed Jan 23 04:51:02 2019 +0000

    upstream: allow auto-incrementing certificate serial number for certs
    
    signed in a single commandline.
    
    OpenBSD-Commit-ID: 39881087641efb8cd83c7ec13b9c98280633f45b

commit 851f80328931975fe68f71af363c4537cb896da2
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Wed Jan 23 04:16:22 2019 +0000

    upstream: move a bunch of global flag variables to main(); make the
    
    rest static
    
    OpenBSD-Commit-ID: fa431d92584e81fe99f95882f4c56b43fe3242dc

commit 2265402dc7d701a9aca9f8a7b7b0fd45b65c479f
Author: Damien Miller <djm@mindrot.org>
Date:   Wed Jan 23 13:03:16 2019 +1100

    depend

commit 2c223878e53cc46def760add459f5f7c4fb43e35
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Wed Jan 23 02:01:10 2019 +0000

    upstream: switch mainloop from select(2) to poll(2); ok deraadt@
    
    OpenBSD-Commit-ID: 37645419a330037d297f6f0adc3b3663e7ae7b2e

commit bb956eaa94757ad058ff43631c3a7d6c94d38c2f
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Wed Jan 23 00:30:41 2019 +0000

    upstream: pass most arguments to the KEX hash functions as sshbuf
    
    rather than pointer+length; ok markus@
    
    OpenBSD-Commit-ID: ef0c89c52ccc89817a13a5205725148a28492bf7

commit d691588b8e29622c66abf8932362b522cf7f4051
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Jan 22 22:58:50 2019 +0000

    upstream: backoff reading messages from active connections when the
    
    input buffer is too full to read one, or if the output buffer is too full to
    enqueue a response; feedback & ok dtucker@
    
    OpenBSD-Commit-ID: df3c5b6d57c968975875de40d8955cbfed05a6c8

commit f99ef8de967949a1fc25a5c28263ea32736e5943
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Jan 22 20:48:01 2019 +0000

    upstream: add -m to usage(); reminded by jmc@
    
    OpenBSD-Commit-ID: bca476a5236e8f94210290b3e6a507af0434613e

commit 41923ce06ac149453debe472238e0cca7d5a2e5f
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Jan 22 12:03:58 2019 +0000

    upstream: Correct some bugs in PKCS#11 token PIN handling at
    
    initial login, the attempt at reading the PIN could be skipped in some cases
    especially on devices with integrated PIN readers.
    
    based on patch from Daniel Kucera in bz#2652; ok markus@
    
    OpenBSD-Commit-ID: fad70a61c60610afe8bb0db538c90e343e75e58e

commit 2162171ad517501ba511fa9f8191945d01857bb4
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Jan 22 12:00:50 2019 +0000

    upstream: Support keys that set the CKA_ALWAYS_AUTHENTICATE by
    
    requring a fresh login after the C_SignInit operation.
    
    based on patch from Jakub Jelen in bz#2638; ok markus
    
    OpenBSD-Commit-ID: a76e66996ba7c0923b46b74d46d499b811786661

commit 7a2cb18a215b2cb335da3dc99489c52a91f4925b
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Jan 22 11:51:25 2019 +0000

    upstream: Mention that configuration for the destination host is
    
    not applied to any ProxyJump/-J hosts. This has confused a few people...
    
    OpenBSD-Commit-ID: 03f4f641df6ca236c1bfc69836a256b873db868b

commit ecd2f33cb772db4fa76776543599f1c1ab6f9fa0
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Jan 22 11:40:42 2019 +0000

    upstream: Include -m in the synopsis for a few more commands that
    
    support it
    
    Be more explicit in the description of -m about where it may be used
    
    Prompted by Jakub Jelen in bz2904
    
    OpenBSD-Commit-ID: 3b398ac5e05d8a6356710d0ff114536c9d71046c

commit ff5d2cf4ca373bb4002eef395ed2cbe2ff0826c1
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Jan 22 11:26:16 2019 +0000

    upstream: print the full pubkey being attempted at loglevel >=
    
    debug2; bz2939
    
    OpenBSD-Commit-ID: ac0fe5ca1429ebf4d460bad602adc96de0d7e290

commit 180b520e2bab33b566b4b0cbac7d5f9940935011
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Jan 22 11:19:42 2019 +0000

    upstream: clarify: ssh-keygen -e only writes public keys, never
    
    private
    
    OpenBSD-Commit-ID: 7de7ff6d274d82febf9feb641e2415ffd6a30bfb

commit c45616a199c322ca674315de88e788f1d2596e26
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Tue Jan 22 11:00:15 2019 +0000

    upstream: mention the new vs. old key formats in the introduction
    
    and give some hints on how keys may be converted or written in the old
    format.
    
    OpenBSD-Commit-ID: 9c90a9f92eddc249e07fad1204d0e15c8aa13823

commit fd8eb1383a34c986a00ef13d745ae9bd3ea21760
Author: jmc@openbsd.org <jmc@openbsd.org>
Date:   Tue Jan 22 06:58:31 2019 +0000

    upstream: tweak previous;
    
    OpenBSD-Commit-ID: d2a80e389da8e7ed71978643d8cbaa8605b597a8

commit 68e924d5473c00057f8532af57741d258c478223
Author: tb@openbsd.org <tb@openbsd.org>
Date:   Mon Jan 21 23:55:12 2019 +0000

    upstream: Forgot to add -J to the synopsis.
    
    OpenBSD-Commit-ID: 26d95e409a0b72526526fc56ca1caca5cc3d3c5e

commit 622dedf1a884f2927a9121e672bd9955e12ba108
Author: tb@openbsd.org <tb@openbsd.org>
Date:   Mon Jan 21 22:50:42 2019 +0000

    upstream: Add a -J option as a shortcut for -o Proxyjump= to scp(1)
    
    and sftp(1) to match ssh(1)'s interface.
    
    ok djm
    
    OpenBSD-Commit-ID: a75bc2d5f329caa7229a7e9fe346c4f41c2663fc

commit c882d74652800150d538e22c80dd2bd3cdd5fae2
Author: Darren Tucker <dtucker@dtucker.net>
Date:   Tue Jan 22 20:38:40 2019 +1100

    Allow building against OpenSSL dev (3.x) version.

commit d5520393572eb24aa0e001a1c61f49b104396e45
Author: Damien Miller <djm@mindrot.org>
Date:   Tue Jan 22 10:50:40 2019 +1100

    typo

commit 2de9cec54230998ab10161576f77860a2559ccb7
Author: Damien Miller <djm@mindrot.org>
Date:   Tue Jan 22 10:49:52 2019 +1100

    add missing header

commit 533cfb01e49a2a30354e191669dc3159e03e99a7
Author: djm@openbsd.org <djm@openbsd.org>
Date:   Mon Jan 21 22:18:24 2019 +0000

    upstream: switch sntrup implementation source from supercop to
    
    libpqcrypto; the latter is almost identical but doesn't rely on signed
