aboutsummaryrefslogtreecommitdiff
path: root/secure/lib
Commit message (Collapse)AuthorAgeFilesLines
* MFC r291941:Bryan Drewery2016-01-081-5/+2
| | | | | | | Replace unneeded manual dependency on header by adding it to SRCS. Notes: svn path=/stable/9/; revision=293400
* Merge OpenSSL 0.9.8zh.Jung-uk Kim2015-12-03241-482/+489
| | | | Notes: svn path=/stable/9/; revision=291722
* MFC: r290121Jung-uk Kim2015-11-021-2/+6
| | | | | | | Define endianness for non-x86 platforms. Notes: svn path=/stable/9/; revision=290274
* MFC r287981:Bryan Drewery2015-10-031-8/+0
| | | | | | | Replace afterinstall: hack from r111083 with 'make delete-old' functionality. Notes: svn path=/stable/9/; revision=288612
* Merge OpenSSL 0.9.8zg.Jung-uk Kim2015-06-11241-489/+513
| | | | Notes: svn path=/stable/9/; revision=284286
* Merge OpenSSL 0.9.8zf.Jung-uk Kim2015-03-20241-491/+483
| | | | | | | Relnotes: yes Notes: svn path=/stable/9/; revision=280305
* Fix multiple OpenSSL vulnerabilities.Xin LI2015-03-191-1/+9
| | | | | | | | | | | | | Security: FreeBSD-SA-15:06.openssl Security: CVE-2015-0209 Security: CVE-2015-0286 Security: CVE-2015-0287 Security: CVE-2015-0288 Security: CVE-2015-0289 Security: CVE-2015-0293 Notes: svn path=/stable/9/; revision=280266
* Merge OpenSSL 0.9.8zd.Jung-uk Kim2015-01-09241-3011/+5160
| | | | Notes: svn path=/stable/9/; revision=276865
* Merge OpenSSL 0.9.8zc.Jung-uk Kim2014-10-15241-242/+247
| | | | Notes: svn path=/stable/9/; revision=273151
* Merge OpenSSL 0.9.8zb.Jung-uk Kim2014-08-07243-284/+636
| | | | Notes: svn path=/stable/9/; revision=269687
* Correct OpenSSL 0.9.8za release date.Jung-uk Kim2014-06-09240-240/+240
| | | | | | | Approved by: re (delphij) Notes: svn path=/stable/9/; revision=267287
* Merge OpenSSL 0.9.8za.Jung-uk Kim2014-06-09240-573/+532
| | | | | | | Approved by: re (kib), so (delphij) Notes: svn path=/stable/9/; revision=267285
* MFC r265995:Xin LI2014-05-281-1/+1
| | | | | | | | | | Switch using the new $2b$ format by default, when bcrypt is used. Relnotes: default Blowfish crypt(3) format have been changed to $2b$. Approved by: re (gjb) Notes: svn path=/stable/9/; revision=266818
* MFH (r237568, r255422, r255460, r255766, r255767, r255774, r255829,Dag-Erling Smørgrav2014-03-311-14/+16
| | | | | | | | | | | | | | | r256126, r257954, r261320, r261499, r263691, r263712): upgrade to OpenSSH 6.6p1 via 6.3p1, 6.4p1 and 6.5p1. Differences relative to head: - No DNSSEC support since stable/9 does not have LDNS - Sandboxing off by default, and uses rlimit instead of Capsicum - ED25519 moved to the bottom of the order of preference to avoid "new public key" warnings Notes: svn path=/stable/9/; revision=263970
* MFC r262501:Xin LI2014-03-271-33/+52
| | | | | | | | | | | | | | | | | | | | | Refresh our implementation of OpenBSD's Blowfish password format. Notable changes: - Support of $2b$ password format to address a problem where very long passwords (more than 256 characters, when an integer overflow would happen and cause the length to wrap at 256). - Updated pseudo code in comments to reflect the reality. - Removed our local shortcut of processing magic string and rely on the centralized and tigntened validation. - Diff reduction from upstream. For now we are still generating the older $2a$ format of password but we will migrate to the new format once the format is formally finalized. Notes: svn path=/stable/9/; revision=263784
* MFH (r254407, r254960, r255371): misc cleanupDag-Erling Smørgrav2014-03-201-0/+1
| | | | | | | | MFH (r255386): make libssh private MFH (r255369, r255376, r255393, r262530): import OpenPAM Nummularia Notes: svn path=/stable/9/; revision=263421
* Pull in OpenSSH 6.2p2 from head.Dag-Erling Smørgrav2013-05-301-4/+4
| | | | Notes: svn path=/stable/9/; revision=251135
* Merge OpenSSL 0.9.8y. This is a direct commit to stable/9 as HEAD is on aXin LI2013-03-14241-481/+482
| | | | | | | different release now. Notes: svn path=/stable/9/; revision=248272
* MFH (r245527): add OPENSSH_NONE_CIPHER build optionDag-Erling Smørgrav2013-03-011-0/+4
| | | | Notes: svn path=/stable/9/; revision=247515
* Pull in OpenSSH 6.1 from head.Dag-Erling Smørgrav2013-02-281-2/+0
| | | | Notes: svn path=/stable/9/; revision=247485
* MFC: r237657, r237658, r237666Jung-uk Kim2012-07-02240-485/+491
| | | | | | | Merge OpenSSL 0.9.8x and regen manual pages. Notes: svn path=/stable/9/; revision=237998
* Update the previous openssl fix. [12:01]Bjoern A. Zeeb2012-05-301-1/+1
| | | | | | | | | | | Fix a bug in crypt(3) ignoring characters of a passphrase. [12:02] Security: FreeBSD-SA-12:01.openssl (revised) Security: FreeBSD-SA-12:02.crypt Approved by: so (bz, simon) Notes: svn path=/stable/9/; revision=236304
* MFC r228307:Konstantin Belousov2012-01-031-0/+1
| | | | | | | | | | Force linker error when created shared library contains a relocation against text. Provide the override switch to turn off the strict behaviour. Apparently, openssl libcrypto needs it due to assembler code not being PIC. Notes: svn path=/stable/9/; revision=229380
* Upgrade to OpenSSH 5.8p2.Dag-Erling Smørgrav2011-05-041-5/+6
| | | | Notes: svn path=/head/; revision=221420
* Fix some leftover binaries and shared libraries in the system that stillDimitry Andric2011-02-151-0/+4
| | | | | | | | | | | | | | | | | | have an executable stack, due to linking in hand-assembled .S or .s files, that have no .GNU-stack sections: RWX --- --- /lib/libcrypto.so.6 RWX --- --- /lib/libmd.so.5 RWX --- --- /lib/libz.so.6 RWX --- --- /lib/libzpool.so.2 RWX --- --- /usr/lib/liblzma.so.5 These were found using scanelf, from the sysutils/pax-utils port. Reviewed by: kib Notes: svn path=/head/; revision=218723
* Regenerate manual pages for OpenSSL 0.9.8q.Simon L. B. Nielsen2010-12-03240-253/+242
| | | | Notes: svn path=/head/; revision=216167
* Regenerate manual pages for OpenSSL 0.9.8p.Simon L. B. Nielsen2010-11-22240-8165/+6319
| | | | Notes: svn path=/head/; revision=215698
* Revert changes of 'assure' to 'ensure' made in r211936.Rebecca Cran2010-09-111-1/+1
| | | | | | | Approved by: rrs (mentor) Notes: svn path=/head/; revision=212463
* Fix incorrect usage of 'assure' and 'insure'.Rebecca Cran2010-08-281-1/+1
| | | | | | | Approved by: rrs (mentor) Notes: svn path=/head/; revision=211936
* Repair some build breakage introduced in r211725 and garbage collect someNathan Whitehorn2010-08-283-220/+12
| | | | | | | code made obsolete in the same commit. Notes: svn path=/head/; revision=211934
* MFtbemd:Warner Losh2010-08-231-15/+15
| | | | | | | | Prefer MACHNE_CPUARCH to MACHINE_ARCH in most contexts where you want to test of all the CPUs of a given family conform. Notes: svn path=/head/; revision=211725
* Fix buildworld -DNO_CLEAN when using with Perforce, which marks files asWill Andrews2010-08-121-2/+2
| | | | | | | | | | read-only by default, meaning files copied can't be overwritten next time. Reviewed by: imp Approved by: ken (mentor) Notes: svn path=/head/; revision=211243
* Whitespace fix for last check-in, move empty line to below endif.Jayachandran C.2010-08-041-1/+1
| | | | Notes: svn path=/head/; revision=210843
* MIPS 64 bit support.Jayachandran C.2010-08-041-0/+14
| | | | | | | | | | When compiled for MIPS n64 ABI - DES_LONG should be 'unsigned int' - BN_LLONG should be undefined - SIXTY_FOUR_BIT_LONG should be defined. Notes: svn path=/head/; revision=210842
* OpenSSL configuration for powerpc64Nathan Whitehorn2010-07-101-0/+217
| | | | | | | Obtained from: projects/ppc64 Notes: svn path=/head/; revision=209890
* Regenerate manual pages for OpenSSL 0.9.8n.Simon L. B. Nielsen2010-04-01239-239/+239
| | | | Notes: svn path=/head/; revision=206048
* - Make it slightly simpler to update OpenSSL version informationSimon L. B. Nielsen2010-04-011-1/+6
| | | | | | | | | | | for regenerating OpenSSL manual pages. - Explicitly set the OpenSSL release date so manual pages contain the date OpenSSL was released and not just the date OpenSSL was imported into the FreeBSD base system. - Update for Makefile for OpenSSL 0.9.8n. Notes: svn path=/head/; revision=206047
* Regenerate manual pages for OpenSSL 0.9.8m.Simon L. B. Nielsen2010-03-13242-283/+479
| | | | | | | MFC after: 3 weeks Notes: svn path=/head/; revision=205129
* Merge OpenSSL 0.9.8m into head.Simon L. B. Nielsen2010-03-131-1/+1
| | | | | | | | | | | | | | This also "reverts" some FreeBSD local changes so we should now be back to using entirely stock OpenSSL. The local changes were simple $FreeBSD$ lines additions, which were required in the CVS days, and the patch for FreeBSD-SA-09:15.ssl which has been superseded with OpenSSL 0.9.8m's RFC5746 'TLS renegotiation extension' support. MFC after: 3 weeks Notes: svn path=/head/; revision=205128
* Upgrade to OpenSSH 5.4p1.Dag-Erling Smørgrav2010-03-091-2/+3
| | | | | | | MFC after: 1 month Notes: svn path=/head/; revision=204917
* Fix globbingDag-Erling Smørgrav2009-11-101-1/+1
| | | | | | | | Noticed by: delphij, David Cornejo <dave@dogwood.com> Forgotten by: des Notes: svn path=/head/; revision=199131
* Bump the version of all non-symbol-versioned shared libraries inKen Smith2009-07-193-3/+3
| | | | | | | | | | | preparation for 8.0-RELEASE. Add the previous version of those libraries to ObsoleteFiles.inc and bump __FreeBSD_Version. Reviewed by: kib Approved by: re (rwatson) Notes: svn path=/head/; revision=195767
* Remove build timestamps from the following files:Colin Percival2009-07-111-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | /boot/kernel/hptrr.ko /etc/mail/*.cf /lib/libcrypto.so.5 /usr/bin/ntpq /usr/sbin/amd /usr/sbin/iasl /usr/sbin/ntpd /usr/sbin/ntpdate /usr/sbin/ntpdc There does not appear to be any purpose to having these timestamps, and they have the irritating consequence that the aforementioned files will be different every time they are rebuilt. After this commit, the only remaining build timestamps are in the kernel, the boot loaders, /usr/include/osreldate.h (the year in the copyright notice), and lib*.a (the timestamps on all of the included .o files). Reviewed by: scottl (hptrr), gshapiro (sendmail), simon (openssl), roberto (ntp), jkim (acpica) Approved by: re (kib) Notes: svn path=/head/; revision=195626
* Use the closefrom(2) system call.John Baldwin2009-06-161-1/+1
| | | | | | | Reviewed by: des Notes: svn path=/head/; revision=194297
* Regenerate manual pages for OpenSSL 0.9.8k.Simon L. B. Nielsen2009-06-14239-524/+563
| | | | Notes: svn path=/head/; revision=194208
* Update build infrastructure for OpenSSL 0.9.8k.Simon L. B. Nielsen2009-06-149-16/+118
| | | | Notes: svn path=/head/; revision=194207
* Upgrade to OpenSSH 5.2p1.Dag-Erling Smørgrav2009-05-221-1/+1
| | | | | | | MFC after: 3 months Notes: svn path=/head/; revision=192595
* Upgrade to OpenSSH 5.1p1.Dag-Erling Smørgrav2008-08-011-4/+4
| | | | | | | | | | | | | I have worked hard to reduce diffs against the vendor branch. One notable change in that respect is that we no longer prefer DSA over RSA - the reasons for doing so went away years ago. This may cause some surprises, as ssh will warn about unknown host keys even for hosts whose keys haven't changed. MFC after: 6 weeks Notes: svn path=/head/; revision=181111
* Merge from p4:Warner Losh2008-07-231-0/+205
| | | | | | | | | | Implement openssl config needed for mips. Submitted by: gonzo@ Reviewed by: simon@ Notes: svn path=/head/; revision=180767
* Fix conflicts after heimdal-1.1 import and add build infrastructure. ImportDoug Rabson2008-05-071-2/+2
| | | | | | | all non-style changes made by heimdal to our own libgssapi. Notes: svn path=/head/; revision=178828