aboutsummaryrefslogtreecommitdiff
path: root/secure/libexec
Commit message (Collapse)AuthorAgeFilesLines
...
| | * | | | | | Sync FreeBSD's bmake branch with Juniper's internal bmake branch.Marcel Moolenaar2012-08-223-0/+78
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Requested by: Simon Gerraty <sjg@juniper.net> Notes: svn path=/projects/bmake/; revision=239572
* | | | | | | | Move ssh into a dedicated packageBaptiste Daroussin2015-03-051-0/+1
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Flag config files as "to be merged on upgrade" Notes: svn path=/projects/release-pkg/; revision=279674
* | | | | | | Reduce overlinkingBaptiste Daroussin2014-11-253-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The framework now ensure by itself that pthread is added to the link chain as the last component if linked to kerberos hence avoid with out any explicit addition prevent issue like CVE-2014-8475 Notes: svn path=/head/; revision=275083
* | | | | | | Convert to LIBADDBaptiste Daroussin2014-11-253-15/+6
| |_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reduce overlinking Notes: svn path=/head/; revision=275077
* | | | | | Rework privatelib/internallibBaptiste Daroussin2014-08-063-3/+3
| |_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make sure everything linking to a privatelib and/or an internallib does it directly from the OBJDIR rather than DESTDIR. Add src.libnames.mk so bsd.libnames.mk is not polluted by libraries not existsing in final installation Introduce the LD* variable which is what ld(1) is expecting (via LDADD) to link to internal/privatelib Directly link to the .so in case of private library to avoid having to complexify LDFLAGS. Phabric: https://phabric.freebsd.org/D553 Reviewed by: imp, emaste Notes: svn path=/head/; revision=269648
* | | | | Use src.opts.mk in preference to bsd.own.mk except where we need stuffWarner Losh2014-05-064-4/+4
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | from the latter. Notes: svn path=/head/; revision=265420
* | | | Add placeholder Kyuafiles for various top-level hierarchies.Julio Merino2014-04-212-0/+14
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change adds tests/ directories in the source tree to create various subdirectories in /usr/tests/ and to install placeholder Kyuafiles for them. the relevant hierarchies are: cddl, etc, games, gnu and secure. The reason for this is to simplify the addition of new test programs for utilities or libraries under any of these directories. Doing so on a case by case basis is unnecessary and is quite an obscure process. Notes: svn path=/head/; revision=264741
* | | Clean up the OpenSSH build. It is now possible to build most componentsDag-Erling Smørgrav2013-09-103-9/+51
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | as static binaries, if desired. The one exception is sshd, which runs into trouble due to libpam.a's includion of pam_ssh. Make OpenSSH use LDNS if available. This allows it to verify signed SSHFP records. Approved by: re (blanket) Notes: svn path=/head/; revision=255460
* | | Make libldns and libssh private.Dag-Erling Smørgrav2013-09-083-0/+3
| |/ |/| | | | | | | | | | | Approved by: re (blanket) Notes: svn path=/head/; revision=255386
* | Retire the mislabeled ENABLE_SUID_SSH knob.Dag-Erling Smørgrav2013-03-221-3/+1
|/ | | | Notes: svn path=/head/; revision=248617
* Revert r204939Dag-Erling Smørgrav2010-03-101-1/+1
| | | | Notes: svn path=/head/; revision=204949
* Forgot to svn add the Makefile.Dag-Erling Smørgrav2010-03-101-0/+16
| | | | Notes: svn path=/head/; revision=204948
* Fix the build. The ssh-pkcs11-helper directory is empty, which isDoug Barton2010-03-101-1/+1
| | | | | | | causing confusion. Notes: svn path=/head/; revision=204939
* Upgrade to OpenSSH 5.4p1.Dag-Erling Smørgrav2010-03-091-1/+1
| | | | | | | MFC after: 1 month Notes: svn path=/head/; revision=204917
* Fix 'make checkdpadd'Dag-Erling Smørgrav2010-02-251-1/+1
| | | | | | | Submitted by: ru@ Notes: svn path=/head/; revision=204340
* Remove -static; it was a failed experiment that got committed by accident.Dag-Erling Smørgrav2010-02-251-1/+4
| | | | Notes: svn path=/head/; revision=204334
* Upgrade to OpenSSH 5.3p1.Dag-Erling Smørgrav2009-10-012-2/+2
| | | | Notes: svn path=/head/; revision=197679
* Upgrade to OpenSSH 5.1p1.Dag-Erling Smørgrav2008-08-011-1/+1
| | | | | | | | | | | | | I have worked hard to reduce diffs against the vendor branch. One notable change in that respect is that we no longer prefer DSA over RSA - the reasons for doing so went away years ago. This may cause some surprises, as ssh will warn about unknown host keys even for hosts whose keys haven't changed. MFC after: 6 weeks Notes: svn path=/head/; revision=181111
* Add a manual dependency on ssh_namespace.h.Dag-Erling Smørgrav2006-05-132-0/+4
| | | | | | | Discussed with: ru Notes: svn path=/head/; revision=158529
* Introduce a namespace munging hack inspired by NetBSD to avoid pollutingDag-Erling Smørgrav2006-05-132-2/+2
| | | | | | | | | | | the namespace of applications which inadvertantly link in libssh (usually through pam_ssh) Suggested by: lukem@netbsd.org MFC after: 6 weeks Notes: svn path=/head/; revision=158519
* Reimplementation of world/kernel build options. For details, see:Ruslan Ermilov2006-03-171-3/+3
| | | | | | | | | | | http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) Notes: svn path=/head/; revision=156813
* Revert the commits that made libssh an INTERNALLIB; they caused too muchDag-Erling Smørgrav2005-06-072-6/+2
| | | | | | | | | trouble, especially on amd64. Requested by: ru Notes: svn path=/head/; revision=147098
* Make libssh an INTERNALLIB like it is in {Net,Open}BSD.Dag-Erling Smørgrav2005-06-062-2/+6
| | | | Notes: svn path=/head/; revision=147056
* Update for OpenSSH 4.1p1.Dag-Erling Smørgrav2005-06-052-2/+2
| | | | Notes: svn path=/head/; revision=147007
* Fixed style of DPADD and LDADD assignments as per style.Makefile(5).Ruslan Ermilov2004-02-051-2/+2
| | | | Notes: svn path=/head/; revision=125503
* Update Makefiles for OpenSSH 3.7.1p2.Dag-Erling Smørgrav2004-01-072-4/+4
| | | | Notes: svn path=/head/; revision=124212
* Explicitly add libz and libcrypto to LDADD for any ssh utilities missingGordon Tetlow2003-08-191-2/+2
| | | | | | | | | | | | | | | it. While not strictly required, it unbreaks the cross-build world that is resulting from moving the libraries around. I have a more permanent solution to this problem in the works, but I asked des for permission to commit this to get the ball rolling. This also makes the ssh build more along the lines of what the openssh-portable and OpenBSD openssh Makefile glue does. Reviewed by: des Notes: svn path=/head/; revision=119116
* Very big makeover in the way telnet, telnetd and libtelnet are built.Mark Murray2003-07-162-29/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | Previously, there were two copies of telnet; a non-crypto version that lived in the usual places, and a crypto version that lived in crypto/telnet/. The latter was built in a broken manner somewhat akin to other "contribified" sources. This meant that there were 4 telnets competing with each other at build time - KerberosIV, Kerberos5, plain-old-secure and base. KerberosIV is no longer in the running, but the other three took it in turns to jump all over each other during a "make buildworld". As the crypto issue has been clarified, and crypto _calls_ are not a problem, crypto/telnet has been repo-copied to contrib/telnet, and with this commit, all telnets are now "contribified". The contrib path was chosen to not destroy history in the repository, and differs from other contrib/ entries in that it may be worked on as "normal" BSD code. There is no dangerous crypto in these sources, only a very weak system less strong than enigma(1). Kerberos5 telnet and Secure telnet are now selected by using the usual macros in /etc/make.conf, and the build process is unsurprising and less treacherous. Notes: svn path=/head/; revision=117675
* Turn MAKE_KERBEROS5 into NO_KERBEROS by negating the logic. Some extraMark Murray2003-05-051-1/+1
| | | | | | | | cleanups were necessary in release/Makefile, and the tinderbox code was syntax checked, not run checked. Notes: svn path=/head/; revision=114709
* The including makefile's directory is tried first for .include "...".Ruslan Ermilov2003-04-301-2/+2
| | | | Notes: svn path=/head/; revision=114283
* Most things depend on !defined(NO_OPENSSL); make it look so.Ruslan Ermilov2003-04-301-4/+7
| | | | Notes: svn path=/head/; revision=114282
* NOSECURE is implied by NOCRYPT, meaning if the latter is definedRuslan Ermilov2003-04-301-1/+1
| | | | | | | we won't be here. Notes: svn path=/head/; revision=114281
* Remove Kerberos IV shims.Dag-Erling Smørgrav2003-04-231-1/+1
| | | | Notes: svn path=/head/; revision=113916
* Update for 3.6.1p1; also remove Kerberos IV shims.Dag-Erling Smørgrav2003-04-231-1/+1
| | | | Notes: svn path=/head/; revision=113915
* Update for OpenSSH 3.5p1.Dag-Erling Smørgrav2002-10-291-0/+1
| | | | Notes: svn path=/head/; revision=106132
* ssh-keysign(8) belongs in /usr/libexec, not in /usr/bin, and needs to beDag-Erling Smørgrav2002-07-052-1/+16
| | | | | | | | | | setuid so ssh(1) doesn't have to be. Pointy hat to: des Submitted by: Katsuyuki TATEISHI <katsu@iec.hiroshima-u.ac.jp> Notes: svn path=/head/; revision=99430
* No guts, no glory. Switch to OpenSSH-portable.Dag-Erling Smørgrav2002-06-251-2/+2
| | | | | | | Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=98820
* Now that cross-tools ld(1) has been fixed to look for dynamicRuslan Ermilov2002-02-081-2/+2
| | | | | | | | | | | | | dependencies in the correct place, record the fact that -lssh depends on -lcrypto and -lz. Removed false dependencies on -lz (except ssh(1) and sshd(8)). Removed false dependencies on -lcrypto and -lutil for scp(1). Reviewed by: markm Notes: svn path=/head/; revision=90405
* Set WFORMAT=0, overlooked in previous commits to libexec/.Kris Kennaway2002-02-061-0/+1
| | | | | | | Reported by: jhay Notes: svn path=/head/; revision=90296
* Add pam_ssh support to the static PAM library, libpam.a:Ruslan Ermilov2002-01-231-2/+2
| | | | | | | | | | | | | | - Spam /usr/lib some more by making libssh a standard library. - Tweak ${LIBPAM} and ${MINUSLPAM}. - Garbage collect unused libssh_pic.a. - Add fake -lz dependency to secure/ makefiles needed for dynamic linkage with -lssh. Reviewed by: des, markm Approved by: markm Notes: svn path=/head/; revision=89705
* Clean up makefiles, and turn on WARNS=2. Take into account the telnetMark Murray2001-11-301-2/+4
| | | | | | | #if cleanup. Notes: svn path=/head/; revision=87141
* Revamp and diff-reduce the various secure telnets. Make sure thatMark Murray2001-08-031-1/+1
| | | | | | | | Kerberos5 has _a_ telnet (which is not currently K5 enabled). Incorporate BDE's static linking fixes. Notes: svn path=/head/; revision=81104
* Fixed world breakage when NOSHARED=yes. libmp now depends on libcrypto,Bruce Evans2001-07-301-4/+4
| | | | | | | so it must be linked before libcrypto to work right. Notes: svn path=/head/; revision=80637
* Fixed world breakage in previous commit. -lpam must never be usedBruce Evans2001-05-091-3/+4
| | | | | | | | | | | | directly (except in the definition of MINUSLPAM in bsd.libnames.mk) since it doesn't give all the lbraries necessary for static linkage. Fixed new and old bugs in DPADD. ${LIBPAM} was missing, and the library order was different from that in LDADD so `make checkdpadd' reported a non-bug. Notes: svn path=/head/; revision=76407
* Add PAM support to SRA authentication. Cribbed mostly from ftpd. ThisNick Sayer2001-05-071-1/+1
| | | | | | | | doesn't solve the problem of root being allowed to log in, but that sort of thing is something PAM should be doing anyway. Notes: svn path=/head/; revision=76337
* Follow the OpenSSH 2.9 upgrade with the infrastructure. Two newBrian Feldman2001-05-041-1/+1
| | | | | | | programs are now included: sftp(1) and ssh-keyscan(1). Notes: svn path=/head/; revision=76264
* Bye-bye /usr/lib/libtelnet.a. This should fix ``make release'' brokeness.Ruslan Ermilov2001-03-281-1/+1
| | | | | | | Approved by: markm Notes: svn path=/head/; revision=74928
* secure/ build fixes:Ruslan Ermilov2001-03-263-17/+9
| | | | | | | | | | | | | | | | | | | | | | | - TELNETOBJDIR is gone. `buildworld' already installs libtelnet.a in ${WORLDTMP}/usr/lib, and we have LIBRARY_PATH pointing there. - SSHDIR (formerly SSHSRC) is now shared between all SSH modules. New LIBSSH is introduced for libssh.a (an internal static lib). Previously, build without prior `obj' was broken; SSH modules always looked for libssh.a in ${.OBJDIR}. Also, the dependancies on the libssh.a were missing. - libtelnet/ did not install the crypto version of telnet.h into /usr/include/arpa. - Removed BINOWN, BINMODE, BINDIR and SRCS with default values. Reviewed by: markm - MAN[1-9] -> MAN. Notes: svn path=/head/; revision=74818
* Only build sftp-server conditionallyKris Kennaway2000-09-161-1/+3
| | | | Notes: svn path=/head/; revision=65961
* Add sftp-serverAndrey A. Chernov2000-09-151-0/+1
| | | | Notes: svn path=/head/; revision=65872
generated by cgit v1.2.3 (git 2.25.1) at 2026-02-15 18:23:07 +0000