aboutsummaryrefslogtreecommitdiff
path: root/security/openssh-portable
Commit message (Collapse)AuthorAgeFilesLines
* security/openssh-portable: Update to 8.6p1Bryan Drewery2021-04-2912-248/+143
| | | | | | | | | | | - gssapi is disabled for now. Changes: - https://www.openssh.com/txt/release-8.5 - https://www.openssh.com/txt/release-8.6 Submitted by: Yasuhiro Kimura [earlier version][1] PR: 254389 [1]
* all: Remove all other $FreeBSD keywords.Mathieu Arnold2021-04-061-2/+0
|
* Remove # $FreeBSD$ from Makefiles.Mathieu Arnold2021-04-061-1/+0
|
* Add limited patch for CVE-2021-28041 from upstream.Bryan Drewery2021-03-182-1/+33
| | | | Notes: svn path=/head/; revision=568761
* security/openssh-portable@gssapi: fix build on GCC architecturesPiotr Kubaj2020-12-091-1/+1
| | | | | | | | | | | gss-genr.c: In function 'ssh_gssapi_kex_mechs': gss-genr.c:175:9: error: 'strncpy' specified bound depends on the length of the source argument [-Werror=stringop-overflow=] 175 | cp = strncpy(s, kex, strlen(kex)); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors Notes: svn path=/head/; revision=557337
* security/openssh-portable: fix build on GCC architecturesPiotr Kubaj2020-11-291-1/+5
| | | | | | | | | | | | | | | | | loginrec.c:763:2: error: 'strncpy' output may be truncated copying 32 bytes from a string of length 511 [-Werror=stringop-truncation] strncpy(utx->ut_user, li->username, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ MIN_SIZEOF(utx->ut_user, li->username)); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ loginrec.c: In function 'record_failed_login': loginrec.c:1687:2: error: 'strncpy' specified bound 32 equals destination size [-Werror=stringop-truncation] strncpy(ut.ut_user, username, sizeof(ut.ut_user)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ loginrec.c:1696:2: error: 'strncpy' specified bound 256 equals destination size [-Werror=stringop-truncation] strncpy(ut.ut_host, hostname, sizeof(ut.ut_host)); Notes: svn path=/head/; revision=556545
* - Fix KERB_GSSAPI build; missing prototypes for DH openssl-compat.Bryan Drewery2020-11-243-1/+31
| | | | | | | PR: 212151 (maybe) Notes: svn path=/head/; revision=556185
* - Add pkg-config dependency which avoids some maintainer testing errorsBryan Drewery2020-11-204-16/+49
| | | | | | | | | | | | | | | | | | | | | and also removes a few unneeded library links such as -lcurses. - libfido2 package is broken with pkg-config and base ssl. Workaround this by not using pkg-config for that library for now. - Add USES=localbase to simplify some options - Make crypt(3) MD5 password support optional but still on-by-default. The default in FreeBSD changed in 10.0 but that does not mean - Enable -Werror - Remove some old baggage from the port build o The zlib version check has not been needed for a while. o sshd.8 has not had %%PREFIX%% or %$RC_SCRIPT_NAME%% since 2011 and is not worth more patches/complexity. o The strnvis(3) problem noted in r311891 was fixed in OpenSSH 7.4. o autoreconf is run so it makes no sense to patch configure for -ldes o --with-md5-passwords is not needed as our crypt(3) supports it natively. This is only relevant without PAM. Notes: svn path=/head/; revision=555734
* - Add blacklistd(8) support.Bryan Drewery2020-11-172-1/+439
| | | | | | | | | | | | | | This differs slightly from base as it uses the current NetBSD hook points. This is off-by-default as it needs testing and has issues that may cause crashes. One such issue is the use of private bl_create() symbol from libblacklist. It is also unclear if the hook points are sufficient or proper after the libssh refactoring in 8.x. PR: 223628 (patch rewritten as it no longer applied) Notes: svn path=/head/; revision=555531
* - Add and enable FIDO/U2F support for security keys by default.Bryan Drewery2020-11-161-3/+8
| | | | | | | | This feature came in 8.2, is enabled by default on OpenBSD, and suggested to be enabled by default for packages. Notes: svn path=/head/; revision=555524
* - Slightly reduce diff with baseBryan Drewery2020-11-164-63/+49
| | | | | | | | | | - No functional changes. PR: 223010 Submitted by: brnrd (earlier patch) Notes: svn path=/head/; revision=555518
* - bindresvport support hasn't been used since 7.8Bryan Drewery2020-11-161-13/+0
| | | | Notes: svn path=/head/; revision=555516
* - Remove sctp patch missed in r466577Bryan Drewery2020-11-161-873/+0
| | | | Notes: svn path=/head/; revision=555514
* - Update to 8.4p1 (skipped 8.3)Bryan Drewery2020-11-164-52/+52
| | | | | | | | | | | - https://www.openssh.com/txt/release-8.3 - https://www.openssh.com/txt/release-8.4 PR: 239807, 250319 Sponsored by: Dell EMC Notes: svn path=/head/; revision=555512
* security/openssh-portable: Set LICENSEMateusz Piotrowski2020-11-121-2/+4
| | | | | | | | | | | | | | | | | | | In the past, the ports framework did not support handling situations where a port contained a multitude of licenses. In case of OpenSSH the list is/was: BSD2, BSD3, MIT, public domain, BSD-Style, BEER-WARE, "any purpose with notice intact", and ISC-Style. Instead of having to keep track of all the involved licenses which all are very similar, let's use LICENSE_PERMS. I am not bumping PORTREVISION as it is not a vital change from the perspective of package users. Approved by: bdrewery (maintainer) Differential Revision: https://reviews.freebsd.org/D27133 Notes: svn path=/head/; revision=554948
* Install the moduli file as a @sampleMateusz Piotrowski2020-11-072-2/+4
| | | | | | | | | PR: 250559 Submitted by: Michał "rysiek" Woźniak <rysiek % isnic.is> Approved by: maintainer timeout Notes: svn path=/head/; revision=554395
* Fix a typoMateusz Piotrowski2020-11-071-1/+1
| | | | | | | Approved by: portmgr blanket Notes: svn path=/head/; revision=554393
* Update WWWSunpoet Po-Chuan Hsieh2020-08-151-1/+1
| | | | | | | Approved by: portmgr (blanket) Notes: svn path=/head/; revision=545050
* - Simplify and refactor login.conf environment handling.Bryan Drewery2020-03-232-59/+33
| | | | Notes: svn path=/head/; revision=529015
* Fix build without PAM optionBryan Drewery2020-03-231-8/+16
| | | | Notes: svn path=/head/; revision=529010
* Remove long broken X509 patch.Bryan Drewery2020-03-233-187/+3
| | | | | | | Approved by: portmgr (implicit) Notes: svn path=/head/; revision=528982
* Fix plist for 8.2p1Bryan Drewery2020-03-231-1/+3
| | | | Notes: svn path=/head/; revision=528981
* - Update to 8.2p1Bryan Drewery2020-03-236-45/+46
| | | | | | | Release notes: https://www.openssh.com/txt/release-8.2 Notes: svn path=/head/; revision=528979
* Update to 8.1p1Bryan Drewery2019-12-223-22/+11
| | | | | | | | | Changes: https://www.openssh.com/txt/release-8.1 Sponsored by: Dell EMC Notes: svn path=/head/; revision=520603
* Drop the ipv6 virtual category for s* category as it is not relevant anymoreBaptiste Daroussin2019-10-091-1/+1
| | | | Notes: svn path=/head/; revision=514144
* Bump PORTREVISION on ldns consumersSteve Wills2019-09-021-1/+1
| | | | | | | | | Shared lib version changed in update Reported by: sunpoet Notes: svn path=/head/; revision=510851
* Convert to UCL & cleanup pkg-message (categories s)Mathieu Arnold2019-08-141-0/+6
| | | | Notes: svn path=/head/; revision=508909
* - Update gssapi patch for 8.0Bryan Drewery2019-07-193-17/+52
| | | | | | | | | | | | - Rework how the gssapi patch is fetched/mirrored so we can fetch directly from debian. PR: 239290 Submitted by: david@dcrosstech.com (based on) Tested by: vrwmiller@gmail.com Notes: svn path=/head/; revision=506959
* Fix BROKEN handling for x509/gssapi FLAVORSBryan Drewery2019-07-181-2/+2
| | | | Notes: svn path=/head/; revision=506878
* Update to 8.0p1Bryan Drewery2019-07-127-111/+118
| | | | | | | | | | Changes: https://www.openssh.com/txt/release-8.0 With help from: Lee Prokowich Sponsored by: DellEMC Notes: svn path=/head/; revision=506433
* - Fix X509 build after r484765 openssl fixBryan Drewery2018-11-124-48/+24
| | | | | | | | | | | - Fix patch URL for KERB_GSSAPI - Add FLAVORs for x509 and gssapi since they are distinct types of OpenSSH rather than feature flags. Approved by: portmgr (implicit) Notes: svn path=/head/; revision=484842
* - Update KERB_GSSAPI for 7.9p1Bryan Drewery2018-11-122-3/+3
| | | | Notes: svn path=/head/; revision=484824
* - Fix HPN for 7.9p1Bryan Drewery2018-11-123-20/+40
| | | | | | | | | | | | | - DOCS is required for HPN but it's not exclusively a flavor so needs to be in the default list. - Fix a build-time OpenSSL version comparison [1] PR: 233157 [1] Reported by: Robert Schulze <rs@bytecamp.net> [1] Obtained from: upstream c0a35265907533be10ca151ac797f34ae0d68969 [1] Notes: svn path=/head/; revision=484823
* Update to 7.9p1.Bryan Drewery2018-11-1112-210/+56
| | | | | | | | | | | | | | - Fixes build on 12, head, and openssl-devel. - GSSAPI and HPN are currently marked BROKEN as I don't want to block the main update for anyone. http://www.openssh.com/txt/release-7.8 http://www.openssh.com/txt/release-7.9 MFH: 2018Q4 (due to being broken on 12+head) Notes: svn path=/head/; revision=484765
* security/openssl-devel was removed, but there is a security/openssl111 now.Mathieu Arnold2018-11-101-2/+2
| | | | Notes: svn path=/head/; revision=484599
* Add DOCS options to ports that should have one.Mathieu Arnold2018-09-101-0/+1
| | | | | | | | | | | Also various fixes related to said option. PR: 230864 Submitted by: mat exp-runs by: antoine Notes: svn path=/head/; revision=479406
* Simplify CONFLICTS_INSTALL.Bryan Drewery2018-06-291-3/+3
| | | | | | | Reported by: mat Notes: svn path=/head/; revision=473555
* - Fix and update HPN patch to latest from upstream but leave it off byBryan Drewery2018-06-283-282/+307
| | | | | | | | | | | default. - Add an 'hpn' FLAVOR to produce a package for users with HPN and NONECIPHER enabled. Approved by: portmgr (implicit) Notes: svn path=/head/; revision=473485
* Update x509 patch to 11.3.2Bryan Drewery2018-06-263-4/+38
| | | | Notes: svn path=/head/; revision=473412
* Forgot PORTREVISION bump for r472797.Bryan Drewery2018-06-191-1/+1
| | | | | | | PR: 229147 Notes: svn path=/head/; revision=472798
* Fix nologin check when PAM option is disabled in the port.Bryan Drewery2018-06-191-11/+14
| | | | | | | | PR: 229147 Submitted by: Robert Schulze <rs@bytecamp.net> Notes: svn path=/head/; revision=472797
* Add lost metadata on why this patch existsBryan Drewery2018-06-191-0/+8
| | | | Notes: svn path=/head/; revision=472796
* - Add XMSS option to enable experimental key support added in 7.7 [1]Bryan Drewery2018-05-036-2/+157
| | | | | | | | | | | | | | | | | | - Bring in upstream patches post 7.7 to fix various issues [2]: b81b2d120e9c8a83489e241620843687758925ad - Fix tunnel forwarding broken in 7.7p1 341727df910e12e26ef161508ed76d91c40a61eb - don't kill ssh-agent's listening socket entriely if we fail to accept a connection 85fe48fd49f2e81fa30902841b362cfbb7f1933b - don't free the %C expansion, it's used later for LocalCommand 868afa68469de50d8a43e5daf867d7c624a34d20 - Disable SSH2_MSG_DEBUG messages for Twisted Conch clients f5baa36ba79a6e8c534fb4e0a00f2614ccc42ea6 - Omit 3des-cbc if OpenSSL built without DES PR: 227758 [1] Submitted by: IWAMOTO Kouichi <sue@iwmt.org> [1] PR: 227551 [2] Reported by: rozhuk.im@gmail.com [2] Obtained from: upstream mirror https://github.com/openssh/openssh-portable [2] Notes: svn path=/head/; revision=468998
* Update the KERB_GSSAPI patch from debian.Bryan Drewery2018-04-252-4/+6
| | | | | | | | | | | | | https://sources.debian.org/data/main/o/openssh/1:7.7p1-2/debian/patches/gssapi.patch is mirrored due to not being filename-unique and not gzipped. PR: 226789 Submitted by: Rick Miller <vmiller@verisign.com> (based on) Tested by: Rick Miller <vmiller@verisign.com> Reported by: david@dcrosstech.com Notes: svn path=/head/; revision=468286
* The block of code that canonicallizes the hostname supplied onCraig Leres2018-04-122-9/+9
| | | | | | | | | | | | | | | | | | the command line added by patch-ssh.c misapplies to 7.7p1 and moves from main() to to ssh_session2(). This breaks ssh SSHFP support for non-canonical hostnames. For example, "ssh zinc" correctly discovers the FQDN (zinc.ee.lbl.gov) and uses it to look up A and AAAA records but the non-canonical version (zinc) is used in the SSHFP record lookup which or course fails. Regenerate the patch. Reviewed by: bdrewery, ler (mentor) Approved by: bdrewery, ler (mentor) Differential Revision: https://reviews.freebsd.org/D15053 Notes: svn path=/head/; revision=467200
* Make BROKEN lines more clearBryan Drewery2018-04-051-2/+2
| | | | Notes: svn path=/head/; revision=466595
* Update to 7.7p1Bryan Drewery2018-04-057-187/+141
| | | | | | | | | | | | | | | | | - Update x509 patch to 11.3 - Remove SCTP option as it has not had a patch available since 7.2. Changes: https://www.openssh.com/txt/release-7.7 Notable changes: * ssh(1)/sshd(8): Drop compatibility support for some very old SSH implementations, including ssh.com <=2.* and OpenSSH <= 3.*. These versions were all released in or before 2001 and predate the final SSH RFCs. The support in question isn't necessary for RFC-compliant SSH implementations. Notes: svn path=/head/; revision=466577
* libressl support was fixed in r452358Bryan Drewery2018-04-031-2/+1
| | | | Notes: svn path=/head/; revision=466385
* Mark some ports broken with openssl-devel.Mathieu Arnold2018-03-291-1/+2
| | | | | | | Sponsored by: Absolight Notes: svn path=/head/; revision=465899
* Remove OVERWRITE_BASE compat - it was marked IGNORE in 2015Bryan Drewery2018-03-161-6/+1
| | | | Notes: svn path=/head/; revision=464727
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-11 11:38:37 +0000