| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Previously, there were two copies of telnet; a non-crypto version
that lived in the usual places, and a crypto version that lived in
crypto/telnet/. The latter was built in a broken manner somewhat akin
to other "contribified" sources. This meant that there were 4 telnets
competing with each other at build time - KerberosIV, Kerberos5,
plain-old-secure and base. KerberosIV is no longer in the running, but
the other three took it in turns to jump all over each other during a
"make buildworld".
As the crypto issue has been clarified, and crypto _calls_ are not
a problem, crypto/telnet has been repo-copied to contrib/telnet,
and with this commit, all telnets are now "contribified". The contrib
path was chosen to not destroy history in the repository, and differs
from other contrib/ entries in that it may be worked on as "normal"
BSD code. There is no dangerous crypto in these sources, only a
very weak system less strong than enigma(1).
Kerberos5 telnet and Secure telnet are now selected by using the usual
macros in /etc/make.conf, and the build process is unsurprising and
less treacherous.
Notes:
svn path=/head/; revision=117675
|
| |
|
|
| |
Notes:
svn path=/head/; revision=114630
|
| |
|
|
|
|
|
|
|
| |
(Credential forwarding is still broken.)
PR: bin/45397
Notes:
svn path=/head/; revision=111946
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When libdes was replaced with OpenSSL's libcrypto, there were a few
interfaces that the former implemented but the latter did not. Because
some software in the base system still depended upon these interfaces,
we simply included them in our libcrypto (rnd_keys.c).
Now, finally get around to removing the dependencies on these
interfaces. There were basically two cases:
des_new_random_key -- This is just a wrapper for des_random_key, and
these calls were replaced.
des_init_random_number_generator et. al. -- A few functions were used
by the application to seed libdes's PRNG. These are not necessary
when using libcrypto, as OpenSSL internally seeds the PRNG from
/dev/random. These calls were simply removed.
Again, some of the Kerberos 4 files have been taken off the vendor
branch. I do not expect there to be future imports of KTH Kerberos 4.
Notes:
svn path=/head/; revision=110049
|
| |
|
|
|
|
|
|
|
|
|
| |
0 might simply be part of the ciphertext.
PR: bin/40266
Submitted by: andr@dgap.mipt.ru
MFC after: 3 days
Notes:
svn path=/head/; revision=102250
|
| |
|
|
| |
Notes:
svn path=/head/; revision=98884
|
| |
|
|
| |
Notes:
svn path=/head/; revision=98882
|
| |
|
|
|
|
|
|
| |
MFC after: 1 week
PR: 37766
Notes:
svn path=/head/; revision=96108
|
| |
|
|
| |
Notes:
svn path=/head/; revision=90931
|
| |
|
|
| |
Notes:
svn path=/head/; revision=87266
|
| |
|
|
|
|
|
| |
fixes that.
Notes:
svn path=/head/; revision=87155
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
1) ANSIfy.
2) Clean up ifdefs so that
a) ones that never/always apply are appropriately either
fully removed, or just the #if junk is removed.
b) change #if defined(FOO) for appropiate values of FOO.
(currently AUTHENTICATION and ENCRYPTION)
3) WARNS=2 fixing
4) GC other unused stuff
This code can now be unifdef(1)ed to make non-crypto telnet.
Notes:
svn path=/head/; revision=87139
|
| |
|
|
| |
Notes:
svn path=/head/; revision=85703
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is by the kind permission of Dave Safford, formerly of TAMU who wrote the
original code. Here is an excerpt of the e-mail exchange concerning this
issue:
Dave Safford wrote:
>Nick Sayer wrote:
>> Some time ago we spoke about SRA and importing it into FreeBSD. I forgot to
>> ask if you had a prefered license boilerplate for the top of the files. It
>> has come up recently, and the SRA code in FreeBSD doesn't have one.
>I really have no preference - use whatever is most convenient in the
>FreeBSD environment.
>dave safford
This is the standard BSD license with clause 3 removed and clause 4
suitably renumbered.
MFC after: 1 day
Notes:
svn path=/head/; revision=85690
|
| |
|
|
| |
Notes:
svn path=/head/; revision=84305
|
| |
|
|
|
|
|
|
| |
telnet, so it was treated as the reference code, except where later
commits were made to "base" telnet.
Notes:
svn path=/head/; revision=81965
|
| |
|
|
| |
Notes:
svn path=/head/; revision=76751
|
| |
|
|
| |
Notes:
svn path=/head/; revision=76711
|
| |
|
|
|
|
|
| |
(potentially) not responding to an invalid SRA 'auth is' message.
Notes:
svn path=/head/; revision=76696
|
| |
|
|
|
|
|
| |
same time simplify, the random number selection code.
Notes:
svn path=/head/; revision=76691
|
| |
|
|
|
|
|
|
|
|
| |
(512) are a little distressing, but the method really needs to be
extended to allow server-supplied DH parameters anyway.
Submitted by: kris
Notes:
svn path=/head/; revision=76690
|
| |
|
|
|
|
|
|
|
| |
low-memory situations.
Submitted by: kris
Notes:
svn path=/head/; revision=76689
|
| |
|
|
|
|
|
|
| |
insecure, do not succeed. Copied from login.c. This functionality really
should be a PAM module.
Notes:
svn path=/head/; revision=76610
|
| |
|
|
| |
Notes:
svn path=/head/; revision=76339
|
| |
|
|
|
|
|
|
| |
I just mistakenly commited this to RELENG_4. I have contacted Jordan to see
about how to fix this. Pass the pointy hat.
Notes:
svn path=/head/; revision=74411
|
| |
|
|
| |
Notes:
svn path=/head/; revision=63248
|
| |
|
|
|
|
|
| |
PR# 19835
Notes:
svn path=/head/; revision=62958
|
| |
|
|
| |
Notes:
svn path=/head/; revision=62868
|
| |
|
|
| |
Notes:
svn path=/head/; revision=57442
|
| |
|
|
|
|
|
| |
going to have to figure something else out.
Notes:
svn path=/head/; revision=49901
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
SRA does a Diffie-Hellmen exchange and then DES-encrypts the
authentication data. If the authentication is successful, it also
sets up a session key for DES encryption.
SRA was originally developed at Texas A&M University.
This code is probably export restricted (despite the fact that I
originally found it at a University in Germany).
SRA is not perfect. It is vulnerable to monkey-in-the-middle attacks
and does not use tremendously large DH constants (and thus an individual
exchange probably could be factored in a few days on modern CPU
horsepower). It does not, however, require any changes in user or
administrative behavior and foils session hijacking and sniffing.
The goal of this commit is that telnet and telnetd end up in the DES
distribution and that therefore an encrypted session telnet becomes
standard issue for FreeBSD.
Notes:
svn path=/head/; revision=49887
|
| |
|
|
|
|
|
| |
curses/termcap/terminfo implementations and causes recursion.
Notes:
svn path=/head/; revision=41858
|
| |
|
|
| |
Notes:
svn path=/head/; revision=29181
|
|
|
telnet, and after userland diffs have been merged in, will be used to
build the non-kerberised sources as well. (See unifdef(1) for details)
Notes:
svn path=/vendor-crypto/telnet/dist/; revision=29088
|