src/secure, branch release/9.3.0 FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F9.3.0 2014-06-09T17:22:49Z Correct OpenSSL 0.9.8za release date. 2014-06-09T17:22:49Z Jung-uk Kim jkim@FreeBSD.org 2014-06-09T17:22:49Z urn:sha1:5532940f4712e78cd908b555260213123c2a512e Approved by: re (delphij) Merge OpenSSL 0.9.8za. 2014-06-09T16:30:56Z Jung-uk Kim jkim@FreeBSD.org 2014-06-09T16:30:56Z urn:sha1:9b3686cdf76ea1aeb060cd93cca157356e753786 Approved by: re (kib), so (delphij) MFC r265995: 2014-05-28T19:05:46Z Xin LI delphij@FreeBSD.org 2014-05-28T19:05:46Z urn:sha1:b17674e79accdfa5a66c3224944b70fced9dce66 Switch using the new $2b$ format by default, when bcrypt is used. Relnotes: default Blowfish crypt(3) format have been changed to $2b$. Approved by: re (gjb) MFC r265003: 2014-05-04T07:57:20Z Konstantin Belousov kib@FreeBSD.org 2014-05-04T07:57:20Z urn:sha1:734aadd44b378d3ee599cb7fc1b8f4c264df97cb Fix order of libthr and libc in the global dso list for sshd. MFH (r237568, r255422, r255460, r255766, r255767, r255774, r255829, 2014-03-31T14:39:56Z Dag-Erling Smørgrav des@FreeBSD.org 2014-03-31T14:39:56Z urn:sha1:8445f9d73512b4333e78ed31f64eab75a676110f r256126, r257954, r261320, r261499, r263691, r263712): upgrade to OpenSSH 6.6p1 via 6.3p1, 6.4p1 and 6.5p1. Differences relative to head: - No DNSSEC support since stable/9 does not have LDNS - Sandboxing off by default, and uses rlimit instead of Capsicum - ED25519 moved to the bottom of the order of preference to avoid "new public key" warnings MFC r262501: 2014-03-27T00:24:48Z Xin LI delphij@FreeBSD.org 2014-03-27T00:24:48Z urn:sha1:76a32489700e6028e2aad673faa36f5604afad31 Refresh our implementation of OpenBSD's Blowfish password format. Notable changes: - Support of $2b$ password format to address a problem where very long passwords (more than 256 characters, when an integer overflow would happen and cause the length to wrap at 256). - Updated pseudo code in comments to reflect the reality. - Removed our local shortcut of processing magic string and rely on the centralized and tigntened validation. - Diff reduction from upstream. For now we are still generating the older $2a$ format of password but we will migrate to the new format once the format is formally finalized. MFH (r254407, r254960, r255371): misc cleanup 2014-03-20T10:56:05Z Dag-Erling Smørgrav des@FreeBSD.org 2014-03-20T10:56:05Z urn:sha1:a0f99e6fc99e8095a750256681e75e72d53e00be MFH (r255386): make libssh private MFH (r255369, r255376, r255393, r262530): import OpenPAM Nummularia Pull in OpenSSH 6.2p2 from head. 2013-05-30T12:25:58Z Dag-Erling Smørgrav des@FreeBSD.org 2013-05-30T12:25:58Z urn:sha1:d033ec2902facc517ed1bc7cb3deb8dad811cb52 MFH (r248617): retire the mislabeled ENABLE_SUID_SSH knob. 2013-05-30T12:25:37Z Dag-Erling Smørgrav des@FreeBSD.org 2013-05-30T12:25:37Z urn:sha1:7a58c3a38b0085facf9edbdc3fe4b591eb911b16 Merge OpenSSL 0.9.8y. This is a direct commit to stable/9 as HEAD is on a 2013-03-14T17:48:07Z Xin LI delphij@FreeBSD.org 2013-03-14T17:48:07Z urn:sha1:7c8cb3f8333a17cae51d6d4502af933bfc88c78b different release now.