<feed xmlns='http://www.w3.org/2005/Atom'>
<title>src/secure, branch upstream/10.4.0</title>
<subtitle>FreeBSD source tree</subtitle>
<id>https://cgit-dev.freebsd.org/src/atom?h=upstream%2F10.4.0</id>
<link rel='self' href='https://cgit-dev.freebsd.org/src/atom?h=upstream%2F10.4.0'/>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/'/>
<updated>2017-09-01T22:52:18Z</updated>
<entry>
<title>Upgrade OpenSSH to 7.3p1.</title>
<updated>2017-09-01T22:52:18Z</updated>
<author>
<name>Dag-Erling Smørgrav</name>
<email>des@FreeBSD.org</email>
</author>
<published>2017-09-01T22:52:18Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=136d9dcd14cfdd403e5e4d8c4b9086bc781b9efa'/>
<id>urn:sha1:136d9dcd14cfdd403e5e4d8c4b9086bc781b9efa</id>
<content type='text'>
This is the last version of OpenSSH which does not break compatibility
more than we can live with in a stable branch.  Further commits will
follow to backport some bug fixes from newer versions.

The sshd breakage in the previous attempt was due to an upstream bug
(a 0 was changed to a 1 while refactoring send_rexec_state() in sshd.c)
which only manifested itself when sshd was built with SSH 1 support.

Approved by:	re@
</content>
</entry>
<entry>
<title>Revert OpenSSH 7.3p1; something went wrong between testing and committing.</title>
<updated>2017-09-01T21:48:36Z</updated>
<author>
<name>Dag-Erling Smørgrav</name>
<email>des@FreeBSD.org</email>
</author>
<published>2017-09-01T21:48:36Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=aee3cc37f72df6873db8aedb455560e3bc8a05ab'/>
<id>urn:sha1:aee3cc37f72df6873db8aedb455560e3bc8a05ab</id>
<content type='text'>
Approved by:	re@
</content>
</entry>
<entry>
<title>Upgrade OpenSSH to 7.3p1.</title>
<updated>2017-09-01T21:24:32Z</updated>
<author>
<name>Dag-Erling Smørgrav</name>
<email>des@FreeBSD.org</email>
</author>
<published>2017-09-01T21:24:32Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=199740709e7b512ffca9021f3aab57a56a3c9f3b'/>
<id>urn:sha1:199740709e7b512ffca9021f3aab57a56a3c9f3b</id>
<content type='text'>
This is the last version of OpenSSH which does not break compatibility
more than we can live with in a stable branch.  Further commits will
follow to backport some bug fixes from newer versions.

Approved by:	re@
</content>
</entry>
<entry>
<title>MFC r289172,r290254:</title>
<updated>2017-02-09T22:49:48Z</updated>
<author>
<name>Enji Cooper</name>
<email>ngie@FreeBSD.org</email>
</author>
<published>2017-02-09T22:49:48Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=c06eac9206cf604309c6ab9711572446719e639c'/>
<id>urn:sha1:c06eac9206cf604309c6ab9711572446719e639c</id>
<content type='text'>
r289172:

Refactor the test/ Makefiles after recent changes to bsd.test.mk (r289158) and
netbsd-tests.test.mk (r289151)

- Eliminate explicit OBJTOP/SRCTOP setting
- Convert all ad hoc NetBSD test integration over to netbsd-tests.test.mk
- Remove unnecessary TESTSDIR setting
- Use SRCTOP where possible for clarity

r290254:

Remove unused variable (SRCDIR)
</content>
</entry>
<entry>
<title>MFC r311585:</title>
<updated>2017-02-04T17:00:47Z</updated>
<author>
<name>Enji Cooper</name>
<email>ngie@FreeBSD.org</email>
</author>
<published>2017-02-04T17:00:47Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=9516035d83ad5101b4437450827d37b32a932aa8'/>
<id>urn:sha1:9516035d83ad5101b4437450827d37b32a932aa8</id>
<content type='text'>
Conditionalize building libwrap support into sshd

Only build libwrap support into sshd if MK_TCP_WRAPPERS != no

This will unbreak the build if libwrap has been removed from the system

PR:		210141
</content>
</entry>
<entry>
<title>Disable assembly sources when compiler/assembler cannot compile certain</title>
<updated>2017-01-26T23:29:30Z</updated>
<author>
<name>Jung-uk Kim</name>
<email>jkim@FreeBSD.org</email>
</author>
<published>2017-01-26T23:29:30Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=b68aa01df902be9aeca8d91c8d7bd2265589bd67'/>
<id>urn:sha1:b68aa01df902be9aeca8d91c8d7bd2265589bd67</id>
<content type='text'>
instructions.

Note this is a direct commit because head and stable/11 has OpenSSL 1.0.2
branch.  However, it is based on r304320.

Requested by:	julian
</content>
</entry>
<entry>
<title>MFC r311140:</title>
<updated>2017-01-16T07:10:45Z</updated>
<author>
<name>Enji Cooper</name>
<email>ngie@FreeBSD.org</email>
</author>
<published>2017-01-16T07:10:45Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=14ab4b1221b5f34a3a494a1c58c3c584f31d4381'/>
<id>urn:sha1:14ab4b1221b5f34a3a494a1c58c3c584f31d4381</id>
<content type='text'>
Only bake krb5_config.h support in to ssh(3), etc if both MK_GSSAPI and
MK_KERBEROS_SUPPORT != no

This fixes the odd case where someone specified MK_GSSAPI=no and
MK_KERBEROS_SUPPORT=yes (which admittedly, probably doesn't make sense,
but the build system doesn't prevent this case today, and it didn't when
I filed the bug back in 2011 either).

PR:		159745
</content>
</entry>
<entry>
<title>Merge OpenSSL 1.0.1u.</title>
<updated>2016-09-22T15:05:38Z</updated>
<author>
<name>Jung-uk Kim</name>
<email>jkim@FreeBSD.org</email>
</author>
<published>2016-09-22T15:05:38Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=6cdb114c81742bdaff5debf8c1c3f48ce0e2c105'/>
<id>urn:sha1:6cdb114c81742bdaff5debf8c1c3f48ce0e2c105</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Hide OPENSSL_cpuid_setup and OPENSSL_ia32cap_P symbols from libcrypto.so.</title>
<updated>2016-05-16T22:42:09Z</updated>
<author>
<name>Jung-uk Kim</name>
<email>jkim@FreeBSD.org</email>
</author>
<published>2016-05-16T22:42:09Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=2fdf334d28b8a2109ff49bc63ae660edfcb3b900'/>
<id>urn:sha1:2fdf334d28b8a2109ff49bc63ae660edfcb3b900</id>
<content type='text'>
Note this is a direct commit because it is merged from OpenSSL upstream and
head (OpenSSL 1.0.2 branch) already has the same change:

https://github.com/openssl/openssl/commit/6206682
</content>
</entry>
<entry>
<title>- Make libcrypto.so position independent on i386.</title>
<updated>2016-05-16T19:30:27Z</updated>
<author>
<name>Jung-uk Kim</name>
<email>jkim@FreeBSD.org</email>
</author>
<published>2016-05-16T19:30:27Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=b356d948289d863910a43f31a71625ed0891660f'/>
<id>urn:sha1:b356d948289d863910a43f31a71625ed0891660f</id>
<content type='text'>
- Enable linker error when libcrypto.so contains a relocation against text.
- Add "Do not modify" comment to generated source files.
- Set CC environment variable for Perl scripts to enable AVX instructions.
- Update __FreeBSD_version to indicate libcrypto.so is position independent.

Note this is a direct commit because head has OpenSSL 1.0.2 branch but based
on r299389, r299462, r299464, r299479, and r299480.
</content>
</entry>
</feed>
