aboutsummaryrefslogtreecommitdiffstats
path: root/lib/ssh/doc/src/notes.xml
blob: 902511f20a0b784f3ca6cbabf075154927ea97dc (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
<?xml version="1.0" encoding="iso-8859-1" ?>
<!DOCTYPE chapter SYSTEM "chapter.dtd">

<chapter>
  <header>
    <copyright>
      <year>2004</year><year>2013</year>
      <holder>Ericsson AB. All Rights Reserved.</holder>
    </copyright>
    <legalnotice>
      The contents of this file are subject to the Erlang Public License,
      Version 1.1, (the "License"); you may not use this file except in
      compliance with the License. You should have received a copy of the
      Erlang Public License along with this software. If not, it can be
      retrieved online at http://www.erlang.org/.

      Software distributed under the License is distributed on an "AS IS"
      basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See
      the License for the specific language governing rights and limitations
      under the License.

    </legalnotice>

    <title>SSH Release Notes</title>
    <prepared></prepared>
    <docno></docno>
    <date></date>
    <rev>%VSN%</rev>
    <file>notes.xml</file>
  </header>

<section><title>Ssh 2.1.3</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
	    It is now possible to send an empty binary using
	    ssh_connection:send/3, this corner case previously caused
	    ssh_connection:send to hang.</p>
          <p>
	    Own Id: OTP-9478 Aux Id: kunagi-226 [137] </p>
        </item>
        <item>
          <p>
	    Fix typo in keyboard-interactive string. Thanks to Daniel
	    Goertzen</p>
          <p>
	    Own Id: OTP-10456</p>
        </item>
        <item>
          <p>
	    ssh_connectino:send/3 will not return until all data has
	    been sent. Previously it could return too early,
	    resulting in things such premature close of the
	    connection. Also improved error handling of closed SSH
	    channels.</p>
          <p>
	    Own Id: OTP-10467</p>
        </item>
        <item>
	    <p>Fixed ssh_cli.erl crashes because #state.buf is yet
	    'undefined'.</p> <p>Fixed Client terminateing connections
	    due to channel_request message response is sent to the
	    wrong id.</p> <p>Affected SSH clients: - all clients
	    based on SSH-2.0-TrileadSSH2Java_213 (problem #1) - SSH
	    Term Pro (problem #2)</p> <p>Thanks to Stefan Zegenhagen
	    </p>
          <p>
	    Own Id: OTP-10475</p>
        </item>
        <item>
          <p>
	    Fixed various syntax errors in SSH appup file</p>
          <p>
	    Own Id: OTP-10657</p>
        </item>
      </list>
    </section>


    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
	    SSH_FX_FILE_IS_A_DIRECTORY message for sftp implemented</p>
          <p>
	    Own Id: OTP-6406 Aux Id: kunagi-218 [129] </p>
        </item>
        <item>
          <p>
	    SSH Rekeying fixed</p>
          <p>
	    Own Id: OTP-7785 Aux Id: kunagi-220 [131] </p>
        </item>
        <item>
          <p>
	    Added User Guide for the SSH application</p>
          <p>
	    Own Id: OTP-7786 Aux Id: kunagi-221 [132] </p>
        </item>
        <item>
          <p>
	    Documentation regarding failfun, connectfun and
	    disconnectfun provided</p>
          <p>
	    Own Id: OTP-7792 Aux Id: kunagi-222 [133] </p>
        </item>
        <item>
          <p>
	    SSH connection timer implementation</p>
          <p>
	    New option, {idle_time, integer()}, sets a timeout on
	    connection when no channels are active, defaults to
	    infinity</p>
          <p>
	    Own Id: OTP-10514 Aux Id: seq12020 </p>
        </item>
        <item>
	    <p> Some examples overflowing the width of PDF pages have
	    been corrected. </p>
          <p>
	    Own Id: OTP-10665</p>
        </item>
        <item>
          <p>
	    Fixed internal error on when client and server can not
	    agree o which authmethod to use.</p>
          <p>
	    Own Id: OTP-10731 Aux Id: seq12237 </p>
        </item>
      </list>
    </section>

</section>

<section><title>Ssh 2.1.2</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
	    SSH quiet mode</p>
          <p>
	    A new option to ssh:connect/3,4, quiet_mode. If true, the
	    client will not print out anything on authorization.</p>
          <p>
	    Own Id: OTP-10429 Aux Id: kunagi-273 [184] </p>
        </item>
        <item>
          <p>
	    Restrict which key algorithms to use</p>
          <p>
	    A new option to ssh:connect/3,4 is introduced,
	    public_key_algs, where you can restrict which key
	    algorithms to use and in which order to try them.</p>
          <p>
	    Own Id: OTP-10498 Aux Id: kunagi-289 [200] </p>
        </item>
        <item>
          <p>
	    Confidentiality of client password</p>
          <p>
	    Unsets clients password after authentication.</p>
          <p>
	    Own Id: OTP-10511 Aux Id: kunagi-292 [203] </p>
        </item>
        <item>
          <p>
	    Fixed user interaction for SSH</p>
          <p>
	    It's now available to accept hosts and input password</p>
          <p>
	    Own Id: OTP-10513 Aux Id: kunagi-293 [204] </p>
        </item>
      </list>
    </section>

</section>

<section><title>Ssh 2.1.1</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
	    Ssh now only sends one channel close message under all
	    circumstances, before it would sometimes incorrectly send
	    two.</p>
          <p>
	    Own Id: OTP-10060</p>
        </item>
        <item>
          <p>
	    The options check mistreated the ip_v6_disable-option,
	    and did not handle some, at the moment, undocumented
	    options correctly.</p>
          <p>
	    Own Id: OTP-10061</p>
        </item>
        <item>
          <p>
	    The channel id in a channel failure message, sent to the
	    peer, is now in all cases the remote channel id</p>
          <p>
	    Own Id: OTP-10062</p>
        </item>
        <item>
          <p>
	    Improved handling of multiple closes to avoid occasional
	    crashes when a channel is closed more than once.</p>
          <p>
	    Own Id: OTP-10112</p>
        </item>
        <item>
          <p>
	    Fix lib/src/test/ssh_basic_SUITE.erl to fix IPv6 option
	    typos</p>
          <p>
	    Fixed incorrect option "ipv6_disable" to "ipv6_disabled"
	    as documented in the ssh manual.</p>
          <p>
	    Own Id: OTP-10219</p>
        </item>
        <item>
          <p>
	    SSH: Make "auth_methods" server option re-usable</p>
          <p>
	    The 'auth_methods' option is used by the server side of
	    the SSH code to tell a connecting SSH client about the
	    authentication methods that are supported by the server.
	    The code still extracts and handles the 'auth_methods'
	    option from Opts in appropriate places, but the Opts
	    checking code in ssh.erl didn't allow that option to be
	    specified.</p>
          <p>
	    Own Id: OTP-10224</p>
        </item>
        <item>
          <p>
	    Use the correct channel id when adjusting the channel
	    window</p>
          <p>
	    Own Id: OTP-10232</p>
        </item>
      </list>
    </section>

</section>

<section><title>Ssh 2.1</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
	    All keys in authorized_keys are considerd, wrongly only
	    the first one was before.</p>
          <p>
	    Own Id: OTP-7235</p>
        </item>
        <item>
          <p>
	    ssh daemon now properly handles ras host keys, in
	    previous versions only dsa host keys sufficed to set up a
	    connection.</p>
          <p>
	    Own Id: OTP-7677</p>
        </item>
        <item>
          <p>
	    ssh:shell/3 and ssh:connect/3 does not hang anymore if
	    connection negotiation fails</p>
          <p>
	    Own Id: OTP-8111</p>
        </item>
        <item>
          <p>
	    Improve check so that we will not try to read ssh packet
	    length indicator if not sure we have enough data.</p>
          <p>
	    Own Id: OTP-8380</p>
        </item>
        <item>
          <p>
	    Do not try to use user interaction when it is disabled.</p>
          <p>
	    Own Id: OTP-9466 Aux Id: seq11886 </p>
        </item>
        <item>
          <p>
	    Improved error handling of internal errors i the ssh
	    connection handling process</p>
          <p>
	    Own Id: OTP-9905</p>
        </item>
        <item>
          <p>
	    sftp daemon generates file handles correct</p>
          <p>
	    Own Id: OTP-9948</p>
        </item>
      </list>
    </section>


    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
	    Document supported algorithms</p>
          <p>
	    Own Id: OTP-8109</p>
        </item>
        <item>
          <p>
	    Graceful handling of premature close from an sftp client.</p>
          <p>
	    Own Id: OTP-9391 Aux Id: seq11838 </p>
        </item>
        <item>
          <p>
	    Changed ssh implementation to use the public_key
	    application for all public key handling. This is also a
	    first step for enabling a callback API for supplying
	    public keys and handling keys protected with password
	    phrases. </p>
          <p>
	    Additionally the test suites where improved so that they
	    do not copy the users keys to test server directories as
	    this is a security liability. Also ipv6 and file access
	    issues found in the process has been fixed.</p>
          <p>
	    This change also solves OTP-7677 and OTP-7235</p>
          <p>
	    This changes also involves some updates to public_keys
	    ssh-functions.</p>
          <p>
	    Own Id: OTP-9911</p>
        </item>
        <item>
          <p>
	    Added options for the ssh client to support user keys
	    files that are password protected.</p>
          <p>
	    Own Id: OTP-10036 Aux Id: OTP-6400, Seq10595 </p>
        </item>
      </list>
    </section>

</section>

<section><title>Ssh 2.0.9</title>

    <section><title>Improvements and New Features</title>
      <list>
        <item>
	    <p>Erlang/OTP can now be built using parallel make if you
	    limit the number of jobs, for instance using '<c>make
	    -j6</c>' or '<c>make -j10</c>'. '<c>make -j</c>' does not
	    work at the moment because of some missing
	    dependencies.</p>
          <p>
	    Own Id: OTP-9451</p>
        </item>
        <item>
          <p>
	    Ssh behaviours now use the new directive "-callback".
	    Parameters will be further specified in a later version
	    of ssh.</p>
          <p>
	    Own Id: OTP-9796</p>
        </item>
      </list>
    </section>

</section>

<section><title>Ssh 2.0.8</title>
    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            Calling ssh_sftp:stop_channel/1 resulted in that the trap_exit flag was
            set to true for the invoking process.</p>
          <p>
            Own Id: OTP-9386 Aux Id: seq11865</p>
        </item>
      </list>
    </section>
</section>

<section><title>Ssh 2.0.7</title>
    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            An unexpected message would crash the ssh_connection_handler and close
            the connection. Now an error message is generated instead.</p>
          <p>
            Own Id: OTP-9273</p>
        </item>
      </list>
    </section>
</section>

<section><title>Ssh 2.0.6</title>
    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            A memory leak has been fixed. I.e. per terminated connection the size of
            a pid and the length of a user name string was not cleared.</p>
          <p>
            Own Id: OTP-9232</p>
        </item>
      </list>
    </section>
</section>

<section><title>Ssh 2.0.5</title>
    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
            Strengthened random number generation. (Thanks to Geoff Cant)</p>
          <p>
            Own Id: OTP-9225</p>
        </item>
      </list>
    </section>
</section>

<section><title>Ssh 2.0.4</title>
    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>In some cases SSH returned {error, normal} when a channel was terminated
             unexpectedly. This has now been changed to {error, channel_closed}.</p>
          <p>
            *** POTENTIAL INCOMPATIBILITY ***</p>
          <p>
            Own Id: OTP-8987 Aux Id: seq11748</p>
        </item>
        <item>
          <p>
            SSH did not handle the error reason enetunreach
            when trying to open a IPv6 connection.</p>
          <p>
            Own Id: OTP-9031</p>
        </item>
      </list>
    </section>
    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
            It is now possible to use SSH to sign and verify binary data.</p>
          <p>
            Own Id: OTP-8986</p>
        </item>
        <item>
          <p>
            SSH now ensures that the .ssh directory exists before trying
            to access files located in that directory.</p>
          <p>
            Own Id: OTP-9010</p>
        </item>
      </list>
    </section>
</section>

<section><title>Ssh 2.0.3</title>
    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            The fix regarding OTP-8849 was not included in the
            previous version as stated.</p>
          <p>
            Own Id: OTP-8918</p>
        </item>
      </list>
    </section>
</section>

<section><title>Ssh 2.0.2</title>
    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            The ssh_system_sup did not catch noproc and shutdown
            messages.</p>
          <p>
            Own Id: OTP-8863</p>
        </item>
        <item>
          <p>
            In some cases a crash report was generated when a
            connection was closing down. This was caused by a race
            condition between two processes.</p>
          <p>
            Own Id: OTP-8881 Aux Id: seq11656, seq11648 </p>
        </item>
      </list>
    </section>
    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
            SSH no longer use deprecated public_key functions.</p>
          <p>
            Own Id: OTP-8849</p>
        </item>
      </list>
    </section>
 </section>
 <section><title>Ssh 2.0.1</title>
    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
	    SSH in some cases terminated channels with reason normal
	    when it should have been shutdown.</p>
          <p>
	    Own Id: OTP-8714</p>
        </item>
        <item>
          <p>
	    SSH in some cases generated a crash report when a channel
	    was closed in a normal way.</p>
          <p>
	    Own Id: OTP-8735 Aux Id: seq11615 </p>
        </item>
        <item>
          <p>
	    The processes ssh_subsystem_sup and one ssh_channel_sup
	    was not terminated when a connection was closed.</p>
          <p>
	    Own Id: OTP-8807</p>
        </item>
      </list>
    </section>

</section>

<section><title>Ssh 2.0</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>The function ssh:connect/4 was not exported.</p>
          <p>Own Id: OTP-8550 Aux Id:</p>
        </item>
        <item>
          <p>Aligned error message with used version (SSH_FX_FAILURE vs
             SSH_FX_NOT_A_DIRECTORY, the latter introduced in version 6).</p>
          <p>
            *** POTENTIAL INCOMPATIBILITY ***</p>
          <p>Own Id: OTP-8644 Aux Id: seq11574</p>
        </item>
        <item>
          <p>Resolved race condition when another connection is started
             before a channel is opened in the first connection.</p>
          <p>Own Id: OTP-8645 Aux Id: seq11577</p>
        </item>
      </list>
    </section>

    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>The configuration parameter ip_v6_disabled is now available,
             which makes it possible for the user to alter the IP version
             SSH shall use.</p>
          <p>
            *** POTENTIAL INCOMPATIBILITY ***</p>
          <p>Own Id: OTP-8535 Aux Id:</p>
        </item>
        <item>
          <p>The ssh_connection:send operation now accepts infinity as timeout.</p>
          <p>Own Id: OTP-8534 Aux Id:</p>
        </item>
        <item>
          <p>The connection handler now include stack traces when a channel 
             message is not handled correctly.</p>
          <p>Own Id: OTP-8524 Aux Id:</p>
        </item>
        <item>
          <p>Removed deprecated modules (ssh_ssh, ssh_sshd and ssh_cm) and
             functions (ssh_sftp:connect and ssh_sftp:stop).</p>
          <p>
            *** POTENTIAL INCOMPATIBILITY ***</p>
          <p>Own Id: OTP-8596 Aux Id:</p>
        </item>
      </list>
    </section>

 </section>

 <section><title>Ssh 1.1.8</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            In some cases SSH ceased to collect more data from the transport layer.</p>
          <p>
            Own Id: OTP-8401 Aux Id: seq11479</p>
        </item>
      </list>
    </section>

    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>Old release notes removed.</p>
          <p>Own Id: OTP-8356 Aux Id:</p>
        </item>
      </list>
    </section>

 </section>

 <section><title>Ssh 1.1.7</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            Now clear all processes when a connnection is terminated.</p>
          <p>
            Own Id: OTP-8121 Aux Id:</p>
        </item>
        <item>
          <p>
            In some rare cases the connection handler could enter an infinite loop.</p>
          <p>
            Own Id: OTP-8277 Aux Id: seq11428</p>
        </item>
        <item>
          <p>
            If an SFTP server did not respond with EOF, the function 
            ssh_sftp:list_dir/2/3 would enter an infinite loop.</p>
          <p>
            Own Id: OTP-8278 Aux Id: seq11450</p>
        </item>
      </list>
    </section>

    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
            The documentation is now built with open source tools (xsltproc and fop) 
            that exists on most platforms. One visible change is that the frames are removed.</p>
          <p>
            Own Id: OTP-8201 Aux Id:</p>
        </item>
      </list>
    </section>

 </section>

 <section><title>Ssh 1.1.6</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            ssh_sftp:start_channel did not handle all possible return 
            values from ssh_channel:start correctly.
          </p>
          <p>
            Own Id: OTP-8176 Aux Id: </p>
        </item>
        <item>
          <p>
            SFTPD did not handle rename command (version 4) correctly.
          </p>
          <p>
            Own Id: OTP-8175 Aux Id: seq11373</p>
        </item>
        <item>
          <p>
            If a connection manager already had been terminated it could cause a channel
            to generate a crash report when it was about to stop.
          </p>
          <p>
            Own Id: OTP-8174 Aux Id: seq11377</p>
        </item>
        <item>
          <p>
            Requests could result in badarg or badmatch EXIT messages in the connection 
            manager if the channel no longer existed.</p>
          <p>
            Own Id: OTP-8173 Aux Id: seq11379</p>
        </item>
        <item>
          <p>
            ssh_transport:unpack/3 could cause a badarg error.</p>
          <p>
            Own Id: OTP-8162 Aux Id:</p>
        </item>
      </list>
    </section>

    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
            The encryption algorithm aes128-cbc is now supported.
            Requires that crypto-1.6.1 is available.</p>
          <p>
            Own Id: OTP-8110 Aux Id:</p>
        </item>
      </list>
    </section>

 </section>


 <section><title>Ssh 1.1.5</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            ssh_sftp:start_channel/3 did not handle timout correctly.</p>
          <p>
            Own Id: OTP-8159 Aux Id: seq11386</p>
        </item>
        <item>
          <p>
            If a progress message was not recieved after invoking ssh:connect/3
            the call could hang for ever. A timeout option has also been added.</p>
          <p>
            Own Id: OTP-8160 Aux Id: seq11386</p>
        </item>
        <item>
          <p>
            A comma has been missing in the ssh.appup file since SSH-1.0.2.</p>
          <p>
            Own Id: OTP-8161 Aux Id:</p>
        </item>
      </list>
    </section>

 </section>

 <section><title>Ssh 1.1.4</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            SSH sometimes caused a crash report at disconnect.</p>
          <p>
            Own Id: OTP-8071 Aux Id: seq11319</p>
        </item>
      </list>
    </section>

 </section>

 <section><title>Ssh 1.1.3</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            The operation ssh_sftp:stop_channel/1 returned an 
            exception if the connection already had been closed.</p>
          <p>
            Own Id: OTP-7996 Aux Id: seq11281</p>
        </item>
        <item>
          <p>
            SSH did not handle if supervisor:start_child/2 returned 
            {error, already_present}.</p>
          <p>
            Own Id: OTP-8034 Aux Id: seq11307</p>
        </item>
        <item>
          <p>
            SSH no longer cause supervisor reports when a connection is 
            terminated in a controlled manner.</p>
          <p>
            Own Id: OTP-8035 Aux Id: seq11308</p>
        </item>
      </list>
    </section>

 </section>

 <section><title>Ssh 1.1.2</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            Ssh confused local and remote channel id's, which in some
            cases resulted in that messages were discarded.</p>
          <p>
            Own Id: OTP-7914 Aux Id: seq11234</p>
        </item>
        <item>
          <p>
            Ssh could not handle echo values other than 0 and 1.</p>
          <p>
            Own Id: OTP-7917 Aux Id: seq11238</p>
        </item>
        <item>
          <p>
            A crash occurred if a non-valid channel reference was received.</p>
          <p>
            Own Id: OTP-7918 Aux Id: seq11238</p>
        </item>
        <item>
          <p>
            Sftpd connections was not closed after receiving eof from a client.</p>
          <p>
            Own Id: OTP-7921 Aux Id: seq11222</p>
        </item>
        <item>
          <p>
            It was not possible to start a SFTP subsystem on certain platforms, 
            i.e. those who do not support symbolic links.</p>
          <p>
            Own Id: OTP-7930 Aux Id: </p>
        </item>
        <item>
          <p>
            In some cases the message {ssh_cm, ssh_connection_ref(), {closed, ssh_channel_id()}}
            was not passed to the registered callback module.</p>
          <p>
            Own Id: OTP-7957 Aux Id: </p>
        </item>
      </list>
    </section>

    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
            By using the sftpd option {max_files, Integer}, the message
            size for READDIR commands can be reduced.</p>
          <p>
            Own Id: OTP-7919 Aux Id: seq11230</p>
        </item>
      </list>
    </section>

 </section>

 <section><title>Ssh 1.1.1</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            The erlang ssh server has presented itself incorrectly,
            using the special version ssh-1.99, although it never has
            supported versions below 2.0. Since ssh-1.1 client
            versions below 2.0 are correctly rejected instead of
            letting the server crash later on. Alas the problem with
            the presentation string was not discovered until after
            ssh.1.1 was released. Now the server will present itself
            as ssh-2.0.</p>
          <p>
            Own Id: OTP-7795</p>
        </item>
        <item>
          <p>
            An internal function call used an incorrect parameter, which
            caused problem when the old listen API was used. This was
            introduced in Ssh-1.1.</p>
          <p>
            Own Id: OTP-7920 Aux Id: seq11211</p>
        </item>
      </list>
    </section>

    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
            Ssh timeouts will now behave as expected i.e. defaults to
            infinity only the user of the ssh application can know of
            a reasonable timeout value for their application.</p>
          <p>
            *** POTENTIAL INCOMPATIBILITY ***</p>
          <p>
            Own Id: OTP-7807</p>
        </item>
        <item>
          <p>
            The implementation of timeouts added as a patch in
            ssh-1.0.1 was slightly changed and is now documented.</p>
          <p>
            Own Id: OTP-7808</p>
        </item>
        <item>
          <p>
            To honor the multiplexing of channels over one ssh
            connection concept ssh_sftp:connect/ [1,2,3] is
            deprecated and replaced by ssh_sftp:start_channel/[1,2,3]
            and ssh_sftp:stop/1 is deprecated and replaced by
            ssh_sftp:stop_channel/1 and to stop the ssh connection
            ssh:close/ 1 should be called.</p>
          <p>
            Own Id: OTP-7809</p>
        </item>
        <item>
          <p>
            Added the message {ssh_channel_up, ChannelId,
            ConnectionManager} that shall be handled by the channel
            callback handle_msg/2. This makes the function
            handle_msg/2 a mandatory function for ssh channels
            implementations which it was not in ssh-1.1.</p>
          <p>
            *** POTENTIAL INCOMPATIBILITY ***</p>
          <p>
            Own Id: OTP-7828</p>
        </item>
      </list>
    </section>

 </section>

  <section><title>Ssh 1.1</title>
  
  <section><title>Fixed Bugs and Malfunctions</title>
  <list>
    <item>
      <p>
	A flaw in the implementation of the supervision tree
	caused the ssh daemon to close the connections to all
	currently logged in users if one user logged out. Another
	problem related to the supervision tree caused the closing
	down of clients to leak processes i.e. all processes was
      not shutdown correctly.</p>
      <p>
      Own Id: OTP-7676</p>
    </item>
    <item>
      <p>
	Tabs could cause ssh_cli to print things in a surprising
      way.</p>
      <p>
      Own Id: OTP-7683 Aux Id: seq11102 </p>
    </item>
    <item>
      <p>
	[sftp, sftpd] - Added patch to make sftp timestamps more
	correct, in the long run it would be nice to have better
	support in file to be able to make it always behave
	correctly now it will be correct 99 % of time instead of
      almost never correct, at least on unix-based platforms.</p>
      <p>
      Own Id: OTP-7685 Aux Id: seq11082 </p>
    </item>
    <item>
      <p>
	[sftpd] - Added patch to further improve handling of
      symbolic links in the sftp-server.</p>
      <p>
      Own Id: OTP-7766 Aux Id: seq11101 </p>
    </item>
    <item>
      <p>
	Ssh incorrectly sent the local id instead of the remote
	id of a channel to the peer. For simpler cases these ids
	often happen to have the same value. One case when they
	do not is when the client sends an exec command two times
	in a raw on the same ssh connection (different channels
	of course as the channel will be closed when the exec
      command has been evaluated) .</p>
      <p>
      Own Id: OTP-7767</p>
    </item>
    <item>
      <p>
	Packet data could be lost under high load due to the fact
	that buffered data was sometimes wrongly discarded before
      it had been sent.</p>
      <p>
      Own Id: OTP-7768</p>
    </item>
    <item>
      <p>
	Improved ipv6-handling as some assumptions about inet
      functions where incorrect.</p>
      <p>
      Own Id: OTP-7770</p>
    </item>
  </list>
  </section>

  
  <section><title>Improvements and New Features</title>
  <list>
    <item>
      <p>
      Added new API function ssh:connection_info/2.</p>
      <p>
      Own Id: OTP-7456</p>
    </item>
    <item>
      <p>
	Now starts ssh channel processes later avoiding
      synchronization problems between processes.</p>
      <p>
      Own Id: OTP-7516</p>
    </item>
    <item>
      <p>
	Ssh now rejects old versions of the ssh protocol for
	security reasons. (Even if they where not correctly
	rejected before the connection would probably have failed
      anyway due to other reasons.)</p>
      <p>
      Own Id: OTP-7645 Aux Id: seq11094 </p>
    </item>
    <item>
      <p>
	New API module ssh_channel has been added. This is a
	behaviour to facilitate the implementation of ssh clients
	and plug in subsystems to the ssh daemon. Note that this
	slightly changes the options to the API function
	ssh:daemon/[1,2,3] deprecating all no longer documented
	options. Note that the new API enforces the "logical way"
	of using the old API i.e. making the subsystem process
	part of the ssh applications supervisor tree, so missuses
      of the old API are not compatible with the new API.</p>
      <p>
      *** POTENTIAL INCOMPATIBILITY ***</p>
      <p>
      Own Id: OTP-7769</p>
    </item>
  </list>
  </section>

  <section><title>Known Bugs and Problems</title>
  <list>
    <item>
      <p>
	Public keys protected by a password are currently not
      handled by the erlang ssh application.</p>
      <p>
      Own Id: OTP-6400 Aux Id: 10595 </p>
    </item>
  </list>
  </section>
  
  </section>
    
    <section><title>Ssh 1.0.2</title>
    
    <section><title>Fixed Bugs and Malfunctions</title>
    <list>
      <item>
	<p>
	  [sftpd] - Listing of symbolic link directories should now
	  work as expected.</p>
	  <p>
	  Own Id: OTP-7141 Aux Id: seq10856 </p>
        </item>
    </list>
    </section>
    
    </section>
    
   <section><title>Ssh 1.0.1</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            [sftp] - When listing a directory with more than 100
            files only the first 100 where listed. This has now been
            fixed.</p>
          <p>
            Own Id: OTP-7318 Aux Id: seq10953 </p>
        </item>
        <item>
          <p>
            When restarting an ssh-system the expected return value
            from ssh_system_sup:restart_acceptor/2 was incorrect,
            this is no longer the case.</p>
          <p>
            Own Id: OTP-7564 Aux Id: seq11055 </p>
        </item>
        <item>
          <p>
            A few minor bugs where fixed in ssh_userreg.erl and
            ssh_connection_manager and a a ssh_cli option was added
            to restore backwards compatibility with the old ssh_cm -
            API.</p>
          <p>
            Own Id: OTP-7565</p>
        </item>
        <item>
          <p>
            Fixed bug in ipv6 support and added option to disable
            ipv6 as a workaround for badly configured computers.</p>
          <p>
            Own Id: OTP-7566</p>
        </item>
      </list>
    </section>

    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
            [sftp] - Option added to set timeout value in sftp.</p>
          <p>
            Own Id: OTP-7305 Aux Id: seq10945 </p>
        </item>
      </list>
    </section>

   </section>

  <section><title>Ssh 1.0</title>

    <section><title>Fixed Bugs and Malfunctions</title>
      <list>
        <item>
          <p>
            Removed some special handling of prompts that made ssh
            behave differently than openssh.</p>
          <p>
            Own Id: OTP-7485 Aux Id: seq11025 </p>
        </item>
        <item>
          <p>
            Bug in encoding of pty opts has been fixed.</p>
          <p>
            Own Id: OTP-7504</p>
        </item>
      </list>
    </section>


    <section><title>Improvements and New Features</title>
      <list>
        <item>
          <p>
            The architecture of the ssh processes has been
            reconstructed to fit in a supervision tree as to become a
            real OTP application and benefit from this when starting
            and stopping.</p>
          <p>
            Own Id: OTP-7356 Aux Id: seq10899 </p>
        </item>
        <item>
          <p>
            Support for pty option echo off added. Requires kernel
            from R12B-4.</p>
          <p>
            *** POTENTIAL INCOMPATIBILITY ***</p>
          <p>
            Own Id: OTP-7502 Aux Id: seq10959 </p>
        </item>
        <item>
          <p>
            The ssh API has been enhanced a lot of old API functions
            has become deprecated.</p>
          <p>
            Own Id: OTP-7503</p>
        </item>
      </list>
    </section>

  </section>
</chapter>