Deprecate publickey(5) stuff

This uses DES and it's likely that nobody uses that in 2025.
If somebody uses this we help them by deprecating and removing this.

Reviewed by:	bapt, emaste
Differential Revision:	https://reviews.freebsd.org/D30682

(cherry picked from commit 723425f837270dd3b22098168ae9464a1ebe38c6)

10 files changed, 30 insertions, 0 deletions

diff --git a/usr.bin/chkey/chkey.1 b/usr.bin/chkey/chkey.1
index 508227ba9601..e754d676e5d1 100644
--- a/usr.bin/chkey/chkey.1
+++ b/usr.bin/chkey/chkey.1
@@ -26,3 +26,8 @@ database.
 .Xr publickey 5 ,
 .Xr keyserv 8 ,
 .Xr newkey 8
+.Sh HISTORY
+The
+.Nm
+utility was removed from
+.Fx 15.0 .
diff --git a/usr.bin/chkey/chkey.c b/usr.bin/chkey/chkey.c
index afacae4d0f75..922a16b5b227 100644
--- a/usr.bin/chkey/chkey.c
+++ b/usr.bin/chkey/chkey.c
@@ -96,6 +96,7 @@ main(int argc, char **argv)
 	char *cryptpw;
 #endif
 
+	fprintf(stderr, "chkey is deprecated and removed from FreeBSD 15.\n");
 	while ((ch = getopt(argc, argv, "f")) != -1)
 		switch(ch) {
 		case 'f':
diff --git a/usr.bin/keylogin/keylogin.1 b/usr.bin/keylogin/keylogin.1
index 32a3e8e1b5b4..69b59cb68c5e 100644
--- a/usr.bin/keylogin/keylogin.1
+++ b/usr.bin/keylogin/keylogin.1
@@ -31,3 +31,8 @@ to be used by any secure network services, such as NFS.
 .Xr publickey 5 ,
 .Xr keyserv 8 ,
 .Xr newkey 8
+.Sh HISTORY
+The
+.Nm
+utility was removed from
+.Fx 15.0 .
diff --git a/usr.bin/keylogin/keylogin.c b/usr.bin/keylogin/keylogin.c
index 021935163a1d..c8a4206df3b3 100644
--- a/usr.bin/keylogin/keylogin.c
+++ b/usr.bin/keylogin/keylogin.c
@@ -54,6 +54,7 @@ main(void)
 	char fullname[MAXNETNAMELEN + 1];
 	struct key_netstarg netst;
 
+	fprintf(stderr, "keylogin is deprecated and removed from FreeBSD 15.\n");
 	if (!getnetname(fullname)) {
 		fprintf(stderr, "netname lookup failed -- make sure the ");
 		fprintf(stderr, "system domain name is set.\n");
diff --git a/usr.bin/keylogout/keylogout.1 b/usr.bin/keylogout/keylogout.1
index 1480a83aece5..b2d0071416ef 100644
--- a/usr.bin/keylogout/keylogout.1
+++ b/usr.bin/keylogout/keylogout.1
@@ -43,3 +43,8 @@ This will break secure NFS if it is done on a server.
 .Xr publickey 5 ,
 .Xr keyserv 8 ,
 .Xr newkey 8
+.Sh HISTORY
+The
+.Nm
+utility was removed from
+.Fx 15.0 .
diff --git a/usr.bin/keylogout/keylogout.c b/usr.bin/keylogout/keylogout.c
index 03eeee0f6417..faad41462340 100644
--- a/usr.bin/keylogout/keylogout.c
+++ b/usr.bin/keylogout/keylogout.c
@@ -47,6 +47,7 @@ main(int argc, char **argv)
 {
 	static char secret[HEXKEYBYTES + 1];
 
+	fprintf(stderr, "keylogin is deprecated and removed from FreeBSD 15.\n");
 	if (geteuid() == 0) {
 		if ((argc != 2 ) || (strcmp(argv[1], "-f") != 0)) {
 			fprintf(stderr,
diff --git a/usr.bin/newkey/newkey.8 b/usr.bin/newkey/newkey.8
index 51dca6688bd0..294198c50972 100644
--- a/usr.bin/newkey/newkey.8
+++ b/usr.bin/newkey/newkey.8
@@ -53,6 +53,11 @@ password of the given username.
 .Xr keylogin 1 ,
 .Xr publickey 5 ,
 .Xr keyserv 8
+.Sh HISTORY
+The
+.Nm
+utility was removed from
+.Fx 15.0 .
 .Sh NOTES
 The Network Information Service
 .Pq NIS
diff --git a/usr.bin/newkey/newkey.c b/usr.bin/newkey/newkey.c
index 6efe64993ec5..6998ddf34658 100644
--- a/usr.bin/newkey/newkey.c
+++ b/usr.bin/newkey/newkey.c
@@ -105,6 +105,7 @@ main(int argc, char *argv[])
 	struct hostent *h;
 #endif
 
+	fprintf(stderr, "newkey is deprecated and removed from FreeBSD 15.\n");
 	if (argc != 3 || !(strcmp(argv[1], "-u") == 0 ||
 		strcmp(argv[1], "-h") == 0)) {
 		usage();
diff --git a/usr.sbin/keyserv/keyserv.8 b/usr.sbin/keyserv/keyserv.8
index 17007c7d8f40..578f548cbe73 100644
--- a/usr.sbin/keyserv/keyserv.8
+++ b/usr.sbin/keyserv/keyserv.8
@@ -81,3 +81,8 @@ Display status of DES support (enabled/disabled).
 .Xr keylogin 1 ,
 .Xr keylogout 1 ,
 .Xr publickey 5
+.Sh HISTORY
+The
+.Nm
+utility was removed from
+.Fx 15.0 .
diff --git a/usr.sbin/keyserv/keyserv.c b/usr.sbin/keyserv/keyserv.c
index bc219e886020..4fe719029d01 100644
--- a/usr.sbin/keyserv/keyserv.c
+++ b/usr.sbin/keyserv/keyserv.c
@@ -114,6 +114,7 @@ main(int argc, char *argv[])
 	register SVCXPRT *transp;
 	struct netconfig *nconf = NULL;
 
+	fprintf(stderr, "keyserv is deprecated and removed from FreeBSD 15.\n");
 	__key_encryptsession_pk_LOCAL = &key_encrypt_pk_2_svc_prog;
 	__key_decryptsession_pk_LOCAL = &key_decrypt_pk_2_svc_prog;
 	__key_gendes_LOCAL = &key_gen_1_svc_prog;