| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This setup will add the trusted certificates from the Mozilla NSS bundle
to base.
This commit includes:
- CAROOT option to opt out of installation of certs
- mtree amendments for final destinations
- infrastructure to fetch/update certs, along with instructions
A follow-up commit will add a certctl(8) utility to give the user control
over trust specifics. Another follow-up commit will actually commit the
initial result of updatecerts.
This work was done primarily by allanjude@, with minor contributions by
myself.
No objection from: secteam
Relnotes: yes
Differential Revision: https://reviews.freebsd.org/D16856
Notes:
svn path=/head/; revision=352948
|
|
|
|
| |
Notes:
svn path=/head/; revision=325705
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
directories to SUBDIR.${MK_TESTS} idiom
This is being done to pave the way for future work (and homogenity) in
^/projects/make-check-sandbox .
No functional change intended.
MFC after: 1 weeks
Notes:
svn path=/head/; revision=321912
|
|
|
|
|
|
|
|
|
|
| |
This simplifies make logic/output
MFC after: 1 month
Sponsored by: Dell EMC Isilon
Notes:
svn path=/head/; revision=314658
|
|
|
|
|
|
|
|
|
|
| |
Reviewed by: emaste, hselasky (partial), brooks (brief)
Discussed on: arch@
Sponsored by: EMC / Isilon Storage Division
Differential Revision: https://reviews.freebsd.org/D5742
Notes:
svn path=/head/; revision=297434
|
|
|
|
|
|
|
|
| |
MFC after: 3 weeks
Sponsored by: EMC / Isilon Storage Division
Notes:
svn path=/head/; revision=289393
|
|
|
|
|
|
|
|
|
|
| |
properly.
MFC after: 1 week
Sponsored by: EMC / Isilon Storage Division
Notes:
svn path=/head/; revision=289378
|
|
|
|
|
|
|
| |
from the latter.
Notes:
svn path=/head/; revision=265420
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This change adds tests/ directories in the source tree to create various
subdirectories in /usr/tests/ and to install placeholder Kyuafiles for
them.
the relevant hierarchies are: cddl, etc, games, gnu and secure.
The reason for this is to simplify the addition of new test programs for
utilities or libraries under any of these directories. Doing so on a
case by case basis is unnecessary and is quite an obscure process.
Notes:
svn path=/head/; revision=264741
|
|
|
|
| |
Notes:
svn path=/head/; revision=264157
|
|
|
|
| |
Notes:
svn path=/head/; revision=201210
|
|
|
|
|
|
|
|
|
|
|
| |
http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html
The src.conf(5) manpage is to follow in a few days.
Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)
Notes:
svn path=/head/; revision=156813
|
|
|
|
| |
Notes:
svn path=/head/; revision=139113
|
|
|
|
|
|
|
|
|
|
|
|
| |
because otherwise it will remain having a dependency upon libssl. This
breaks the non-crypto build that happens for release.3
While here, order the list of programs and libraries.
Speculating review feedback from: ru
Notes:
svn path=/head/; revision=128833
|
|
|
|
|
|
|
|
|
|
|
| |
"kerberize" and "dekerberize" in kerberos5/Makefile. These can
be used to recompile bits with optional crypto support with and
without crypto, respectively.
Reviewed by: markm
Notes:
svn path=/head/; revision=124651
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
and rebuilt some bits with crypto but without Kerberos support
(most notably SSH) during "make release", to put them into the
"crypto" distribution.
Now that we don't ship the separate "krb5" distribution anymore
(it's now part of the "crypto" distribuion), don't waste time
recompiling SSH bits without crypto and without Kerberos support
in an attempt to put them in the "base" distribution -- it just
doesn't work as SSH always uses crypto code.
We avoid this by not rebuilding KPROGS from kerberos5/Makefile in
release/Makefile and adding "libpam" to SPROGS in secure/Makefile
to ensure it's still rebuilt without crypto support for the "base"
distribution. (Disabling crypto (NOCRYPT) also disables building
of Kerberos-related PAM modules, and it's OK to depend on this.)
This should be a no-op change saving some "make release" time.
Notes:
svn path=/head/; revision=124638
|
|
|
|
|
|
|
|
|
|
| |
package management tools.
- Drop redundant dependency of pkg_create(1) and pkg_delete(1)
on crypto libraries now that they do not link with libfetch.
Notes:
svn path=/head/; revision=124633
|
|
|
|
| |
Notes:
svn path=/head/; revision=124607
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Previously, there were two copies of telnet; a non-crypto version
that lived in the usual places, and a crypto version that lived in
crypto/telnet/. The latter was built in a broken manner somewhat akin
to other "contribified" sources. This meant that there were 4 telnets
competing with each other at build time - KerberosIV, Kerberos5,
plain-old-secure and base. KerberosIV is no longer in the running, but
the other three took it in turns to jump all over each other during a
"make buildworld".
As the crypto issue has been clarified, and crypto _calls_ are not
a problem, crypto/telnet has been repo-copied to contrib/telnet,
and with this commit, all telnets are now "contribified". The contrib
path was chosen to not destroy history in the repository, and differs
from other contrib/ entries in that it may be worked on as "normal"
BSD code. There is no dangerous crypto in these sources, only a
very weak system less strong than enigma(1).
Kerberos5 telnet and Secure telnet are now selected by using the usual
macros in /etc/make.conf, and the build process is unsurprising and
less treacherous.
Notes:
svn path=/head/; revision=117675
|
|
|
|
|
|
|
| |
for this area later.
Notes:
svn path=/head/; revision=115842
|
|
|
|
|
|
|
|
| |
(Similar targets were once used during the release building
process for kerberosIV and kerberos5.)
Notes:
svn path=/head/; revision=99770
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
o Don't b uild libdes.
o Crypto is now housed in libcrypto (with a compatability symlink to
libdes)
o RSA may depend on RSAREF at your locale.
o OpenSSH is now a part of the base system.
Notes:
svn path=/head/; revision=57437
|
|
|
|
|
|
|
| |
Submitted by: Nick Sayer
Notes:
svn path=/head/; revision=51993
|
|
|
|
| |
Notes:
svn path=/head/; revision=50479
|
|
|
|
| |
Notes:
svn path=/head/; revision=49971
|
|
|
|
|
|
|
|
|
| |
target.
Reviewed by: <many different folks>
Submitted by: Nickolay N. Dudorov" <nnd@nnd.itfs.nsk.su>
Notes:
svn path=/head/; revision=30113
|
|
|
|
| |
Notes:
svn path=/head/; revision=22990
|
|
|
|
|
|
|
|
|
|
|
| |
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.
Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.
Notes:
svn path=/head/; revision=21673
|
|
|
|
|
|
|
| |
(bootstrap etc)
Notes:
svn path=/head/; revision=15615
|
|
|
|
|
|
|
| |
if available and allowed
Notes:
svn path=/head/; revision=11074
|
|
|
|
|
|
|
|
|
|
|
|
| |
makefiles. This puts it in.
PLEASE NOTE - YOU WILL NEED TO BUILD AND INSTALL THE libtelnet IN secure/
Reviewed by:
Submitted by:
Obtained from:
Notes:
svn path=/head/; revision=9760
|
|
|
|
|
|
|
| |
init and ed, by pointing to real sources.
Notes:
svn path=/head/; revision=4485
|
|
|
|
|
|
|
|
|
| |
world of his master plan.
Submitted by: pst
Notes:
svn path=/head/; revision=2539
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
so that linking against -lcrypt (-ldescrypt) will give us the good
versions instead of the stubs in libc. (These changes need to be
made to the non-US version of libdescrypt too!)
Allow building and support for bdes program.
A bit more work still needs to be done on secure telnet.
Submitted by: pst
Notes:
svn path=/head/; revision=2536
|
|
|
|
|
|
|
|
|
| |
2) fix .include in secure/lib/Makefile.inc
3) fix afterinstall rule in libcrypt/Makefile
Submitted by: Geoff Rehmet
Notes:
svn path=/head/; revision=2044
|
|
|
|
| |
Notes:
svn path=/head/; revision=1962
|
|
Notes:
svn path=/head/; revision=1908
|