aboutsummaryrefslogtreecommitdiff
path: root/security/openssh
Commit message (Collapse)AuthorAgeFilesLines
* Add the security fix for inability to actually deny ssh-agent or X11Brian Feldman2000-11-141-0/+50
| | | | | | | forwarding requests. Notes: svn path=/head/; revision=35126
* Update to OpenSSH 2.2.0. This is an end-of-life update for theBrian Feldman2000-11-0416-493/+109
| | | | | | | | | ports-based OpenSSH. OpenSSH has been in the base system for more than long enough to justify not having to maintain two separate FreeBSD versions of OpenSSH. Notes: svn path=/head/; revision=34806
* Change PKGDIR from pkg/ to . Also fix places where ${PKGDIR} isSatoshi Asami2000-10-081-1/+1
| | | | | | | | | spelled out (many of which are ${PKGDIR}/MESSAGE -> ${PKGMESSAGE} type fixes that shouldn't have been necessary) and the string "/pkg/" appear. Notes: svn path=/head/; revision=33576
* Update all ports using OpenSSL and RSA to work without rsaref sinceKris Kennaway2000-09-221-4/+1
| | | | | | | | | | it is no longer required. Apologies to the various maintainers whom I did not yet hear back from, but the ports freeze is coming up in a few hours and I will be verifying all of these ports on a 4.1 machine myself to catch any problems. Notes: svn path=/head/; revision=32957
* Fix Kerberos 4 support.Brian Feldman2000-07-302-6/+24
| | | | | | | Mostly submitted by: Mark A Gebert <geeb@thugsrus.org> Notes: svn path=/head/; revision=31137
* Update to OpenSSH 2.1.1 and fix SSHv2 serving (passwd botch).Brian Feldman2000-06-276-44/+54
| | | | Notes: svn path=/head/; revision=29922
* Remove redundant/inappropriate CATEGORIES. People need to start readingWill Andrews2000-06-021-1/+1
| | | | | | | the Porter's Handbook. :-) Notes: svn path=/head/; revision=29084
* Also generate the DSA key from a package install.Brian Feldman2000-05-301-1/+2
| | | | | | | Submitted by: Dmitry Grigorovich <odip@bionet.nsc.ru> Notes: svn path=/head/; revision=28995
* Fix this for OpenSSL versions <= 0.9.4. It seems that the OpenSSH peopleBrian Feldman2000-05-201-1/+10
| | | | | | | | | | think that it's good to immediately switch to the newest API, despite the old API call being left deliberately compatible so that that wouldn't have to happen. OpenSSL_add_all_algorithms() is now, again, SSLeay_add_all_algorithms. Notes: svn path=/head/; revision=28626
* Using login and executing a specific "command" are mutually exclusive,Brian Feldman2000-05-131-13/+66
| | | | | | | | | so turn off use_login if there's a command. Submitted by: Vadim Vygonets <vadik@cs.huji.ac.il> Notes: svn path=/head/; revision=28440
* Oops, put the I back in INSTALL_SCRIPT.Brian Feldman2000-05-131-1/+1
| | | | Notes: svn path=/head/; revision=28439
* Fix a mistake with pwcopy-related patches.Brian Feldman2000-05-133-15/+29
| | | | Notes: svn path=/head/; revision=28438
* Update to OpenSSH 2.1.0. They _FINALLY_ have distfiles, so now the CVS isBrian Feldman2000-05-1310-296/+112
| | | | | | | | | | | | not needed for the port. Big thanks to Issei-san for doing the majority of the work necessary for this upgrade! Submitted by: Issei Suzuki <issei@jp.FreeBSD.org> Notes: svn path=/head/; revision=28430
* Upgrade to version 1.2.3 with a CVS of a few hours ago. New stuff inBrian Feldman2000-04-208-513/+454
| | | | | | | | this release is mostly the support for lots of ssh2. Note that SSH2 is not fully supported here yet, but it's mostly there; see README.openssh2. Notes: svn path=/head/; revision=27828
* update compatible libraries to -current.Munechika SUMIKAWA2000-04-176-228/+188
| | | | Notes: svn path=/head/; revision=27704
* Update with the new PORTNAME/PORTVERSION variablesChris Piazza2000-04-091-3/+3
| | | | Notes: svn path=/head/; revision=27426
* Fix socklen_t for FreeBSD 3.Bill Fenner2000-03-201-1/+1
| | | | | | | PR: ports/17491 Notes: svn path=/head/; revision=26836
* Update this to a CVS_DATE of a few minutes ago.Brian Feldman2000-03-034-39/+21
| | | | Notes: svn path=/head/; revision=26504
* Allow manual PORTS_CVS_SERVER and CVS_SITES settings.Brian Somers2000-03-021-1/+4
| | | | | | | Approved by: maintainer Notes: svn path=/head/; revision=26489
* Woops fix my previous incorrect patch.Yoshinobu Inoue2000-02-271-7/+7
| | | | | | | | | | | | For green's honor, the patch I sent him for review was correct. But because it is one line fix, I hand merged it into my cvs committing environment, and then mistake happend. This time, I applied correct fix which should have been aplied at last commit. Notes: svn path=/head/; revision=26377
* Fix a coredump-y bug that crept in recently.Brian Feldman2000-02-251-2/+2
| | | | Notes: svn path=/head/; revision=26267
* Change install -C usage to install -c usage, fixing the install for olderBrian Feldman2000-02-231-4/+11
| | | | | | | | | install(1)s. Submitted by: Jim Archuleta <JimArchuleta@usa.net> Notes: svn path=/head/; revision=26202
* Use 'IPv4or6' instead of AF_UNSPEC for 1st getaddrinfo() ai_family.Yoshinobu Inoue2000-02-191-3/+12
| | | | | | | | | | Without this fix, still query to AAAA recored happens even if -4 options is specified. Reviewed by: green Notes: svn path=/head/; revision=26011
* Change a MAKE_ENV= to MAKE_ENV+=. This may fix problems people onBrian Feldman2000-02-161-1/+1
| | | | | | | -STABLE are reporting. Notes: svn path=/head/; revision=25883
* When IPv4-only client connected to a server which have IPv4 and IPv6Munechika SUMIKAWA2000-02-151-3/+12
| | | | | | | | addresses, the client couldn't connect to the server via IPv4 because the client gave up on first rresevport_af(). Notes: svn path=/head/; revision=25852
* Clean things up by using the new knob for OpenSSL usage.Brian Feldman2000-02-122-11/+7
| | | | | | | Submitted by: kris Notes: svn path=/head/; revision=25722
* Tell the user that they're doing something wrong when USA_RESIDENT isBrian Feldman2000-02-101-1/+5
| | | | | | | not set. Notes: svn path=/head/; revision=25643
* Simplify IPv6 checking.Munechika SUMIKAWA2000-02-092-8/+5
| | | | | | | Suggested by: green Notes: svn path=/head/; revision=25603
* the condition for USE_INET6 setting was opposite.Munechika SUMIKAWA2000-02-011-1/+2
| | | | Notes: svn path=/head/; revision=25393
* Fix a "USET" -> "USE" again. IPv6 should work for this port. Again.Brian Feldman2000-02-012-140/+141
| | | | | | | | | | | | | | | | | | Go to a much more convenient scheme for distfiles/ignorefiles. There will be a lot less change from now on... the release name not being embedded in them helps a lot. Fix an unquoted "${CVS_DATE}" so cvs update isn't always run when we're in one of the first 9 days of a month in CVS_DATE. Update to OpenSSH-1.2.2, which doesn't really mean anything since there are no source releases anyway... The port has been verified to work with pdksh 5.2.14 as /bin/sh, and about 7 times faster. Notes: svn path=/head/; revision=25387
* Take off RESTRICTED, since this has been a proper package for someBrian Feldman2000-01-271-2/+0
| | | | | | | | time now, and is not a legal problem (see Bruce Schneier's latest Crypto-Gram). Basically, since it's unencumbered, it is alright. Notes: svn path=/head/; revision=25127
* List CVS files in IGNOREFILES so they will be properly deleted by "distclean".Satoshi Asami2000-01-262-0/+43
| | | | | | | Approved by: green (well, I thought he was going to *do* it, but anyway....) Notes: svn path=/head/; revision=25095
* Use ${OSVERSION} instead of ${USE_INET6}.Munechika SUMIKAWA2000-01-251-3/+1
| | | | Notes: svn path=/head/; revision=25075
* Fix IPv6 support: change a typo "USET_IPV6" to "USE_IPV6".Brian Feldman2000-01-191-1/+1
| | | | Notes: svn path=/head/; revision=24828
* - remove me from another MAINTAINERMunechika SUMIKAWA2000-01-182-8/+10
| | | | | | | | | | | - add 'ipv6' on CATEGORIES - use ${OSVERSION} instead of ${USE_INET6} for checking getaddrinfo() existence. - fix broken ${ECHO_MSG} - avoid duplicate copying rcmd.c Notes: svn path=/head/; revision=24814
* Add sumikawa@FreeBSD.org as another MAINTAINER. Hopefully, this willBrian Feldman2000-01-151-0/+1
| | | | | | | | reduce my workload, and maybe there'll now be someone who remembers to notify markm when updating CVS_DATE ;) Notes: svn path=/head/; revision=24767
* Add the actual change of names in sockaddr_storage. This broke thingsBrian Feldman2000-01-141-8/+5
| | | | | | | | | for people after what time my system was previously made. Sorry. Submitted by: sumikawa Notes: svn path=/head/; revision=24714
* Update to a more current OpenSSH, including...Brian Feldman2000-01-1314-75/+3716
| | | | | | | | | | | IPv6 support!! Thank you very much, Sumikawa san. Submitted by: Munechika SUMIKAWA <sumikawa@ebina.hitachi.co.jp> Notes: svn path=/head/; revision=24704
* Don't include bsd.port.pre.mk twice. This usually is caused by firstSatoshi Asami2000-01-071-1/+1
| | | | | | | | including bsd.port.pre.mk and then later including bsd.port.mk (the latter of which of course should be bsd.port.post.mk). Notes: svn path=/head/; revision=24507
* Upgrade to the pam_ssh module, version 1.1..Brian Feldman1999-12-281-12/+173
| | | | | | | | | | | | | (From the author:) Primarily, I have added built-in functions for manipulating the environment, so putenv() is no longer used. XDM and its variants should now work without modification. Note that the new code uses the macros in <sys/queue.h>. Submitted by: Andrew J. Korty <ajk@iu.edu> Notes: svn path=/head/; revision=24194
* Update to today's OpenSSH.Brian Feldman1999-12-233-95/+109
| | | | | | | | | | | | The version is now 1.2.1, from 1.2. You can mv your old distfiles/OpenSSH-1.2 dir to distfiles/OpenSSH-1.2.1, if you want to not waste time/space. Some minor nits have been fixed, and a couple bugs. One sizeof(len) should have just been len, and, in markus's words, "fix get_remote_port() and friends for sshd -i". Notes: svn path=/head/; revision=23866
* I've cleaned up ${CVS_DATE} usage a bit (keep spaces correctly), andBrian Feldman1999-12-085-61/+63
| | | | | | | | | | | | | updated to today's snapshot of OpenSSH. Various updates from the latest ${CVS_DATE}, and requisite patch changes, are the "big new thing". Nothing major has changed; the biggest ones would be using atomicio() in a lot of places and a fix for a SIGHUP not updating sshd(8)'s configuration until the next connection. Notes: svn path=/head/; revision=23652
* In the meantime (while things are being worked and decided on on theBrian Feldman1999-12-065-22/+328
| | | | | | | | | | | | | | | | | | OpenBSD OpenSSH front), add ConnectionsPerPeriod to prevent DoS via running the system out of resources. In reality, this wouldn't be a full DoS, but would make a system slower, but this is a better thing to do than let the system get loaded down. So here we are, rate-limiting. The default settings are now: Five connections are allowed to authenticate (and not be rejected) in a period of ten seconds. One minute is given for login grace time. More work in this area is being done by alfred@FreeBSD.org and markus@OpenBSD.org, at the very least. This is, essentially, a stopgap solution; however, it is a properly implemented and documented one, and has an easily modifiable framework. Notes: svn path=/head/; revision=23622
* Under advisories, put RESTRICTED back. It more accurately reflectsBrian Feldman1999-12-061-0/+2
| | | | | | | | | | | reality, though. One file, cipher.c, calls cryptographic routines from external libraries. This really cannot encumber OpenSSH in any case, but I put RESTRICTED back since it would give people a false hope of being able to install the OpenSSH package but not the requisite, RESTRICTED (so nonexistant) openssl package. Notes: svn path=/head/; revision=23621
* Good-bye, RESTRICTED.Brian Feldman1999-12-061-2/+0
| | | | | | | | | | | | | | | | Reasons: 1. It's not crypto. 2. It links with crypto. a. That crypto is in the public domain. b. Linking with crypto does not constitute cryptography. 3. Even if it were crypto, the description of the entire protocol, etc., is in the public domain. The RFC is PD in the USA, and the white paper in Europe. 4. Precedence? Even if it were crypto, the Bernstein case has set precedence for allowing export of that. But it's not even crypto. Notes: svn path=/head/; revision=23619
* Reduce LoginGraceTime from 10 minutes (!!!) to 30 seconds. More toBrian Feldman1999-12-041-2/+3
| | | | | | | come, soon. Notes: svn path=/head/; revision=23572
* Add the PAM SSH RSA key authentication module. For example, you can add,Brian Feldman1999-11-295-6/+373
| | | | | | | | | | | | "login auth sufficient pam_ssh.so" to your /etc/pam.conf, and users with a ~/.ssh/identity can login(1) with their SSH key :) PR: 15158 Submitted by: Andrew J. Korty <ajk@waterspout.com> Reviewed by: obrien Notes: svn path=/head/; revision=23497
* Update to a current CVS_DATE. The only real change I see is the (big)Brian Feldman1999-11-284-155/+157
| | | | | | | | | | change of KNFization being finalized :) Patches had to be modified, but should look "better" according to style(9), now. Notes: svn path=/head/; revision=23479
* Change CFLAGS to get modified in Makefile.inc, fixing theBrian Feldman1999-11-282-4/+6
| | | | | | | | | problem several people have reported with make.conf setting ${CFLAGS}. Partially submitted by: Jos Backus <Jos.Backus@nl.origin-it.com> Notes: svn path=/head/; revision=23476
* Also, set SSH_PROGRAM correctly.Brian Feldman1999-11-241-1/+1
| | | | Notes: svn path=/head/; revision=23297
generated by cgit v1.2.3 (git 2.25.1) at 2025-02-28 07:50:16 +0000