FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=main 2025-04-22T02:05:28Z 2025-04-22T02:05:28Z John Baldwin jhb@FreeBSD.org 2025-04-22T02:05:28Z urn:sha1:a098111a28ed59e1ab1101ad09913f0235ebd28f These all failed to link with ld.bfd used by GCC due to Fssh_sshsk_sign being an unresolved symbol. Fixes: 65d8491719bb ("secure: Adapt Makefile to ssh-sk-client everywhere") 2025-04-17T19:12:05Z Jose Luis Duran jlduran@FreeBSD.org 2025-04-17T18:56:00Z urn:sha1:9440aad19dca73fdd224b128ac2dc2e78191ff15 SRCS entries are kept in the same order and with the same line breaks as upstream, to make comparison easier. No functional change intended. Reviewed by: emaste Approved by: emaste (mentor) Differential Revision: https://reviews.freebsd.org/D49793 2025-02-20T23:33:46Z Ed Maste emaste@FreeBSD.org 2022-04-12T13:18:20Z urn:sha1:d71e7e57fc1472e3ea6d31c44e187c2819d2c71e Commit 9d63429fa163 ("ssh: move common Makefile boilerplate to a new ssh.mk") introduced ssh.mk for common OpenSSH paths and flags, as part of enabling FIDO/U2F. Move duplicated MK_LDNS and MK_TCP_WRAPPERS handling there. Reviewed by: kevans Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D31896 2024-07-15T22:43:39Z Warner Losh imp@FreeBSD.org 2024-07-15T04:46:32Z urn:sha1:e9ac41698b2f322d55ccf9da50a3596edb2c1800 This is a residual of the $FreeBSD$ removal. MFC After: 3 days (though I'll just run the command on the branches) Sponsored by: Netflix 2023-08-16T17:55:03Z Warner Losh imp@FreeBSD.org 2023-08-16T17:55:03Z urn:sha1:d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ 2021-11-03T23:38:05Z Ed Maste emaste@FreeBSD.org 2021-11-02T18:48:33Z urn:sha1:9d63429fa16352f58037ac2aa6ddc734b25e8331 This moves SSHDIR and ssh_namespace.h handling to a common location, and will simplify future work such as adding U2F support (D32509). Reviewed by: kevans MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D32808 2021-09-08T01:05:51Z Ed Maste emaste@FreeBSD.org 2021-09-08T01:05:51Z urn:sha1:19261079b74319502c6ffa1249920079f0f69a72 Some notable changes, from upstream's release notes: - sshd(8): Remove support for obsolete "host/port" syntax. - ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes". - ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm. - ssh(1), sshd(8), ssh-keygen(1): this release removes the "ssh-rsa" (RSA/SHA1) algorithm from those accepted for certificate signatures. - ssh-sk-helper(8): this is a new binary. It is used by the FIDO/U2F support to provide address-space isolation for token middleware libraries (including the internal one). - ssh(1): this release enables UpdateHostkeys by default subject to some conservative preconditions. - scp(1): this release changes the behaviour of remote to remote copies (e.g. "scp host-a:/path host-b:") to transfer through the local host by default. - scp(1): experimental support for transfers using the SFTP protocol as a replacement for the venerable SCP/RCP protocol that it has traditionally used. Additional integration work is needed to support FIDO/U2F in the base system. Deprecation Notice ------------------ OpenSSH will disable the ssh-rsa signature scheme by default in the next release. Reviewed by: imp MFC after: 1 month Relnotes: Yes Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D29985 2016-03-14T18:54:29Z Glen Barber gjb@FreeBSD.org 2016-03-14T18:54:29Z urn:sha1:538354481ef7dbcd76ebc7334512a9d60994b84e Sponsored by: The FreeBSD Foundation 2016-03-11T00:15:29Z Dag-Erling Smørgrav des@FreeBSD.org 2016-03-11T00:15:29Z urn:sha1:acc1a9ef8333c798c210fa94be6af4d5fe2dd794 2016-01-04T19:19:48Z Glen Barber gjb@FreeBSD.org 2016-01-04T19:19:48Z urn:sha1:b626f5a73a48f44a31a200291b141e1da408a2ff Sponsored by: The FreeBSD Foundation