summaryrefslogtreecommitdiff
path: root/secure/usr.bin
Commit message (Collapse)AuthorAgeFilesLines
* Correct OpenSSL 0.9.8za release date.Jung-uk Kim2014-06-0938-38/+38
| | | | | | | Approved by: re (delphij) Notes: svn path=/stable/9/; revision=267287
* Merge OpenSSL 0.9.8za.Jung-uk Kim2014-06-0938-79/+79
| | | | | | | Approved by: re (kib), so (delphij) Notes: svn path=/stable/9/; revision=267285
* MFH (r237568, r255422, r255460, r255766, r255767, r255774, r255829,Dag-Erling Smørgrav2014-03-317-23/+65
| | | | | | | | | | | | | | | r256126, r257954, r261320, r261499, r263691, r263712): upgrade to OpenSSH 6.6p1 via 6.3p1, 6.4p1 and 6.5p1. Differences relative to head: - No DNSSEC support since stable/9 does not have LDNS - Sandboxing off by default, and uses rlimit instead of Capsicum - ED25519 moved to the bottom of the order of preference to avoid "new public key" warnings Notes: svn path=/stable/9/; revision=263970
* MFH (r254407, r254960, r255371): misc cleanupDag-Erling Smørgrav2014-03-207-0/+7
| | | | | | | | MFH (r255386): make libssh private MFH (r255369, r255376, r255393, r262530): import OpenPAM Nummularia Notes: svn path=/stable/9/; revision=263421
* Merge OpenSSL 0.9.8y. This is a direct commit to stable/9 as HEAD is on aXin LI2013-03-1438-80/+80
| | | | | | | different release now. Notes: svn path=/stable/9/; revision=248272
* MFH (r245527): add OPENSSH_NONE_CIPHER build optionDag-Erling Smørgrav2013-03-011-0/+4
| | | | Notes: svn path=/stable/9/; revision=247515
* MFC: r237657, r237658, r237666Jung-uk Kim2012-07-0238-78/+78
| | | | | | | Merge OpenSSL 0.9.8x and regen manual pages. Notes: svn path=/stable/9/; revision=237998
* MFC r233136, r233432:Eitan Adler2012-03-291-13/+4
| | | | | | | | | | Restore the ability to use a non-standard LOCALBASE to sshd Add the ability to use a non-standard LOCALBASE to ssh Approved by: cperciva (implicit) Notes: svn path=/stable/9/; revision=233632
* Regenerate manual pages for OpenSSL 0.9.8q.Simon L. B. Nielsen2010-12-0338-38/+38
| | | | Notes: svn path=/head/; revision=216167
* Regenerate manual pages for OpenSSL 0.9.8p.Simon L. B. Nielsen2010-11-2238-1474/+1298
| | | | Notes: svn path=/head/; revision=215698
* Regenerate manual pages for OpenSSL 0.9.8n.Simon L. B. Nielsen2010-04-0138-38/+38
| | | | Notes: svn path=/head/; revision=206048
* Regenerate manual pages for OpenSSL 0.9.8m.Simon L. B. Nielsen2010-03-1338-48/+54
| | | | | | | MFC after: 3 weeks Notes: svn path=/head/; revision=205129
* Upgrade to OpenSSH 5.4p1.Dag-Erling Smørgrav2010-03-091-1/+1
| | | | | | | MFC after: 1 month Notes: svn path=/head/; revision=204917
* Fix a couple of comment typos.John Baldwin2009-11-031-2/+2
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=198856
* Upgrade to OpenSSH 5.3p1.Dag-Erling Smørgrav2009-10-017-1/+24
| | | | Notes: svn path=/head/; revision=197679
* Regenerate manual pages for OpenSSL 0.9.8k.Simon L. B. Nielsen2009-06-1438-92/+189
| | | | Notes: svn path=/head/; revision=194208
* Update build infrastructure for OpenSSL 0.9.8k.Simon L. B. Nielsen2009-06-141-1/+1
| | | | Notes: svn path=/head/; revision=194207
* Upgrade to OpenSSH 5.1p1.Dag-Erling Smørgrav2008-08-011-1/+1
| | | | | | | | | | | | | I have worked hard to reduce diffs against the vendor branch. One notable change in that respect is that we no longer prefer DSA over RSA - the reasons for doing so went away years ago. This may cause some surprises, as ssh will warn about unknown host keys even for hosts whose keys haven't changed. MFC after: 6 weeks Notes: svn path=/head/; revision=181111
* Add $FreeBSD$Peter Wemm2008-07-031-0/+1
| | | | Notes: svn path=/head/; revision=180206
* For users of FreeBSD <= 6.2 we recommend during the x.org 7.x upgradeKris Kennaway2008-03-051-1/+10
| | | | | | | | | | | | | | | | | | | | | | | | that they add X11BASE=${LOCALBASE} to /etc/make.conf since X11BASE was hard-wired to the now-wrong location in old releases. However, both X11BASE and LOCALBASE have moved out of scope of src/ into ports/ now, which causes problems for upgraded users who have old make.conf files still containing the above setting. X11BASE becomes null and we instruct ssh and sshd to look for xauth in /bin/xauth where it is unlikely to be found. Instead, provide a copy of the default LOCALBASE?=/usr/local setting here. We also have to deal with the case where the user only overrides LOCALBASE and doesn't set an explicit X11BASE (in ports it will be set implicitly but not here), which will also move the location of xauth. MFC after: 3 days Reported by: rwatson Notes: svn path=/head/; revision=176844
* getopt(3) returns -1, not EOF.Ruslan Ermilov2008-02-191-1/+1
| | | | Notes: svn path=/head/; revision=176407
* Upgrade to OpenSSL 0.9.8e.Simon L. B. Nielsen2007-03-1538-83/+85
| | | | Notes: svn path=/head/; revision=167616
* Fix static compilation.Ruslan Ermilov2006-10-071-2/+2
| | | | Notes: svn path=/head/; revision=163089
* Upgrade to OpenSSL 0.9.8d.Simon L. B. Nielsen2006-10-0138-43/+80
| | | | Notes: svn path=/head/; revision=162915
* Upgrade to OpenSSL 0.9.8b.Simon L. B. Nielsen2006-07-2940-102/+1666
| | | | Notes: svn path=/head/; revision=160819
* Add a manual dependency on ssh_namespace.h.Dag-Erling Smørgrav2006-05-137-0/+14
| | | | | | | Discussed with: ru Notes: svn path=/head/; revision=158529
* Introduce a namespace munging hack inspired by NetBSD to avoid pollutingDag-Erling Smørgrav2006-05-137-7/+7
| | | | | | | | | | | the namespace of applications which inadvertantly link in libssh (usually through pam_ssh) Suggested by: lukem@netbsd.org MFC after: 6 weeks Notes: svn path=/head/; revision=158519
* Reimplementation of world/kernel build options. For details, see:Ruslan Ermilov2006-03-172-3/+7
| | | | | | | | | | | http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) Notes: svn path=/head/; revision=156813
* Add a new extensible GSS-API layer which can support GSS-API plugins,Doug Rabson2005-12-291-3/+3
| | | | | | | | | | | | similar the the Solaris implementation. Repackage the krb5 GSS mechanism as a plugin library for the new implementation. This also includes a comprehensive set of manpages for the GSS-API functions with text mostly taken from the RFC. Reviewed by: Love Hörnquist Åstrand <lha@it.su.se>, ru (build system), des (openssh parts) Notes: svn path=/head/; revision=153838
* Revert the commits that made libssh an INTERNALLIB; they caused too muchDag-Erling Smørgrav2005-06-077-22/+10
| | | | | | | | | trouble, especially on amd64. Requested by: ru Notes: svn path=/head/; revision=147098
* Make libssh an INTERNALLIB like it is in {Net,Open}BSD.Dag-Erling Smørgrav2005-06-067-10/+22
| | | | Notes: svn path=/head/; revision=147056
* Update for OpenSSH 4.1p1.Dag-Erling Smørgrav2005-06-052-3/+3
| | | | Notes: svn path=/head/; revision=147007
* Update OpenSSL 0.9.7d -> 0.9.7e.Jacques Vidrine2005-02-2536-1638/+1778
| | | | Notes: svn path=/head/; revision=142429
* Sync program's usage() with manpage's SYNOPSIS.Ruslan Ermilov2005-02-101-1/+1
| | | | Notes: svn path=/head/; revision=141651
* Correctly hide the command arguments.Diomidis Spinellis2005-01-171-15/+2
| | | | | | | | PR: bin/76374 MFC after: 2 weeks Notes: svn path=/head/; revision=140394
* Update for 3.8p1, including workaround for a bug in gss-genr.c.Dag-Erling Smørgrav2004-02-262-2/+3
| | | | Notes: svn path=/head/; revision=126282
* style.Makefile(5):Johan Karlsson2004-02-231-1/+1
| | | | | | | Use WARNS?= instead of WARNS=. Notes: svn path=/head/; revision=126178
* Fixed static linkage.Ruslan Ermilov2004-01-081-2/+5
| | | | | | | Reviewed by: des Notes: svn path=/head/; revision=124249
* Enable GSSAPI support. [1]Dag-Erling Smørgrav2004-01-081-4/+4
| | | | | | | | | Also remove some duplicates from ssh's SRCS. Submitted by: [1] Björn Grönvall <bg@sics.se> Notes: svn path=/head/; revision=124242
* Update Makefiles for OpenSSH 3.7.1p2.Dag-Erling Smørgrav2004-01-077-14/+14
| | | | Notes: svn path=/head/; revision=124212
* Explicitly add libz and libcrypto to LDADD for any ssh utilities missingGordon Tetlow2003-08-195-10/+10
| | | | | | | | | | | | | | | it. While not strictly required, it unbreaks the cross-build world that is resulting from moving the libraries around. I have a more permanent solution to this problem in the works, but I asked des for permission to commit this to get the ball rolling. This also makes the ssh build more along the lines of what the openssh-portable and OpenBSD openssh Makefile glue does. Reviewed by: des Notes: svn path=/head/; revision=119116
* Very big makeover in the way telnet, telnetd and libtelnet are built.Mark Murray2003-07-162-24/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | Previously, there were two copies of telnet; a non-crypto version that lived in the usual places, and a crypto version that lived in crypto/telnet/. The latter was built in a broken manner somewhat akin to other "contribified" sources. This meant that there were 4 telnets competing with each other at build time - KerberosIV, Kerberos5, plain-old-secure and base. KerberosIV is no longer in the running, but the other three took it in turns to jump all over each other during a "make buildworld". As the crypto issue has been clarified, and crypto _calls_ are not a problem, crypto/telnet has been repo-copied to contrib/telnet, and with this commit, all telnets are now "contribified". The contrib path was chosen to not destroy history in the repository, and differs from other contrib/ entries in that it may be worked on as "normal" BSD code. There is no dangerous crypto in these sources, only a very weak system less strong than enigma(1). Kerberos5 telnet and Secure telnet are now selected by using the usual macros in /etc/make.conf, and the build process is unsurprising and less treacherous. Notes: svn path=/head/; revision=117675
* Fixed "make checkdpadd".Ruslan Ermilov2003-07-021-2/+2
| | | | | | | OK'ed by: markm Notes: svn path=/head/; revision=117181
* Fix for the NO_OPENSSL case.Mark Murray2003-06-081-2/+2
| | | | | | | Reported by: Marius Strobl <marius@alchemy.franken.de> Notes: svn path=/head/; revision=116015
* Modernise. Use libcrypto instead of libcipher for DES.Mark Murray2003-06-023-382/+427
| | | | Notes: svn path=/head/; revision=115718
* Turn MAKE_KERBEROS5 into NO_KERBEROS by negating the logic. Some extraMark Murray2003-05-052-2/+2
| | | | | | | | cleanups were necessary in release/Makefile, and the tinderbox code was syntax checked, not run checked. Notes: svn path=/head/; revision=114709
* We no longer have a separate kerberos distribution. Its now justMark Murray2003-04-301-1/+0
| | | | | | | part of the regular security dist. Notes: svn path=/head/; revision=114302
* The including makefile's directory is tried first for .include "...".Ruslan Ermilov2003-04-301-1/+1
| | | | Notes: svn path=/head/; revision=114283
* Most things depend on !defined(NO_OPENSSL); make it look so.Ruslan Ermilov2003-04-301-3/+3
| | | | Notes: svn path=/head/; revision=114282
* NOSECURE is implied by NOCRYPT, meaning if the latter is definedRuslan Ermilov2003-04-301-1/+1
| | | | | | | we won't be here. Notes: svn path=/head/; revision=114281