aboutsummaryrefslogtreecommitdiff
path: root/secure
Commit message (Collapse)AuthorAgeFilesLines
* Update for OpenSSH 2.3.0.Brian Feldman2000-12-052-6/+9
| | | | Notes: svn path=/head/; revision=69593
* Fixed a typo from the last commit.Ruslan Ermilov2000-11-151-1/+1
| | | | | | | Submitted by: Mike Heffner <mheffner@vt.edu> Notes: svn path=/head/; revision=68744
* Correct some fallout from the semi-automated way I updated the makefile.Kris Kennaway2000-11-141-4/+4
| | | | | | | Submitted by: roberto Notes: svn path=/head/; revision=68736
* Disable /usr/bin/ssh being setuid root by default. Let the variableBrian Feldman2000-11-141-0/+2
| | | | | | | | | | | | | ENABLE_SUID_SSH being defined reenable it for those that want it. This follows discussion favoring the change from September. It is not usually necessary to be setuid root, possibly less safe, and less convenient (cannot use $HOSTALIASES, for example). Submitted by: jedgar Notes: svn path=/head/; revision=68705
* Update for OpenSSL 0.9.6Kris Kennaway2000-11-134-61/+69
| | | | Notes: svn path=/head/; revision=68655
* Fix up the build for the STARTTLS version of sendmail (again). This methodGregory Neil Shapiro2000-10-242-78/+0
| | | | | | | | | | | | | mimics that of tcpdump in that for normal builds, sendmail will only be built once. For 'make release', it is built once for the bin dist and once for the crypto dist. This method also removes the need for two separate Makefiles (which could become out of sync). Suggested by: bde Assisted by: kris Notes: svn path=/head/; revision=67502
* Do not override BINDIR settings from subdirectory Makefiles.Gregory Neil Shapiro2000-10-131-1/+1
| | | | | | | Submitted by: bde Notes: svn path=/head/; revision=67085
* ../Makefile.inc was clobbering BINDIR so sendmail was being installed inGregory Neil Shapiro2000-10-131-1/+1
| | | | | | | | | /usr/sbin/ instead of /usr/libexec/sendmail/ Submitted by: bde Notes: svn path=/head/; revision=67083
* Activate the 'secure' (TLS) version of sendmail if !NO_SENDMAIL && !NO_OPENSSLGregory Neil Shapiro2000-10-131-0/+4
| | | | Notes: svn path=/head/; revision=67053
* Given that sendmail's STARTTLS support requires OpenSSL and the bootstrapGregory Neil Shapiro2000-10-131-4/+11
| | | | | | | | | | issues that brings, build the non-TLS version of sendmail in src/usr.sbin/sendmail and the TLS version in src/secure/usr.sbin/sendmail. This allows the TLS version to be part of the secure distribution when building a release. Notes: svn path=/head/; revision=67052
* Remove STARTTLS support as it breaks builds without crypto installed.Gregory Neil Shapiro2000-10-121-7/+0
| | | | | | | Waiting to hear back regarding the best way to do this. Notes: svn path=/head/; revision=67029
* With apoligies to Greg Shapiro, fix the world. The previous commitPeter Wemm2000-10-111-2/+2
| | | | | | | | lost -lutil and -lwrap by replacing $LDADD and $DPADD rather than appending to them with +=. Notes: svn path=/head/; revision=66977
* Style fixesGregory Neil Shapiro2000-10-111-4/+4
| | | | Notes: svn path=/head/; revision=66961
* NOCRYPT imples NO_OPENSSL.Gregory Neil Shapiro2000-10-111-1/+1
| | | | | | | | | Still need to solve the distribution problem. Submitted by: kris Notes: svn path=/head/; revision=66959
* Build sendmail with STARTTLS support unless NO_OPENSSL is set.Gregory Neil Shapiro2000-10-101-0/+7
| | | | Notes: svn path=/head/; revision=66944
* Overhaul of the build-time include file generation. Don't break in evp.hKris Kennaway2000-09-173-47/+32
| | | | | | | | if bootstrapping from a system on which the openssl headers are not already present. Notes: svn path=/head/; revision=65971
* Give users a way to alter the sendmail (and related utilities) buildGregory Neil Shapiro2000-09-171-1/+7
| | | | | | | environment so they can enable functionality such as SASL, LDAP, Hesiod. Notes: svn path=/head/; revision=65970
* Only build sftp-server conditionallyKris Kennaway2000-09-161-1/+3
| | | | Notes: svn path=/head/; revision=65961
* Add sftp-serverAndrey A. Chernov2000-09-151-0/+1
| | | | Notes: svn path=/head/; revision=65872
* Allow users to add libraries for sendmail (e.g. Cyrus SASL)Gregory Neil Shapiro2000-09-131-1/+1
| | | | | | | Obtained from: Sergei Vyshenski <svysh@pn.sinp.msu.ru> Notes: svn path=/head/; revision=65797
* Update for OpenSSH 2.2.0Kris Kennaway2000-09-104-7/+33
| | | | Notes: svn path=/head/; revision=65675
* Nuke RSAREF support from orbit.Kris Kennaway2000-09-104-75/+3
| | | | | | | It's the only way to be sure. Notes: svn path=/head/; revision=65653
* ``Anyone is now free to rub two primes together for their own gratification''Kris Kennaway2000-09-061-1/+1
| | | | | | | | | | | | | -- Unknown Now that the RSA algorithm is released into the public domain, build librsaintl by default unless NO_RSAINTL is set in make.conf. The native OpenSSL implementation of RSA is much faster, doesn't have an artificial keysize limitation, has 30% fewer calories and tastes great! Notes: svn path=/head/; revision=65551
* Err, we weren't even compiling auth1.c with LOGIN_CAP at all. Guess nobodyKris Kennaway2000-09-021-1/+1
| | | | | | | was using this feature. Notes: svn path=/head/; revision=65361
* Make the temporary file _evp.h instead of evp.h to not conflict withBrian Feldman2000-08-242-5/+7
| | | | | | | | | the real evp.h. Reported by: markm Notes: svn path=/head/; revision=65060
* Add missing quotes around xauth pathAndrey A. Chernov2000-08-231-1/+1
| | | | Notes: svn path=/head/; revision=65029
* Generate a new evp.h at build-time instead of install-time to properlyBrian Feldman2000-08-232-6/+7
| | | | | | | support NFS(ro) installworlds. Notes: svn path=/head/; revision=65024
* Respect X11BASE to derive the location of xauth(1)Kris Kennaway2000-08-231-0/+4
| | | | | | | | PR: 17818 Submitted by: Bjoern Fischer <bfischer@Techfak.Uni-Bielefeld.DE> Notes: svn path=/head/; revision=65020
* Add working and easy crypt(3)-switching. Yes, we need a whole new APIBrian Feldman2000-08-221-0/+1
| | | | | | | | | | | | | | | | | for crypt(3) by now. In any case: Add crypt_set_format(3) + documentation to -lcrypt. Add login_setcryptfmt(3) + documentation to -lutil. Support for switching crypt formats in passwd(8). Support for switching crypt formats in pw(8). The simple synopsis is: edit login.conf; add a passwd_format field set to "des" or "md5"; go nuts :) Reviewed by: peter Notes: svn path=/head/; revision=64918
* Turn on support for IPv6Gregory Neil Shapiro2000-08-141-1/+1
| | | | Notes: svn path=/head/; revision=64628
* Get rid of the /etc/aliases -> /etc/mail/aliases hack. /etc/mail/aliasesGregory Neil Shapiro2000-08-131-6/+0
| | | | | | | now exists in the distribution. Notes: svn path=/head/; revision=64597
* The rest of the changes needed to support the new version of sendmail (8.11.0).Gregory Neil Shapiro2000-08-121-11/+28
| | | | | | | | | Beyond changes to the build system, this includes fixing up the sample freebsd.mc configuration for changes in defaults and syntax, removing outdated documentation, and updating the release notes. Notes: svn path=/head/; revision=64567
* Unbreak the OpenSSL headers for those of us who don't/can't use IDEA byBrian Feldman2000-08-041-1/+10
| | | | | | | | getting rid of the check for NO_IDEA (in evp.h) completely if it's installed without MAKE_IDEA=YES. Notes: svn path=/head/; revision=64219
* Install the openssl(1) manpage with an MLINK from ssl(8) to at least putKris Kennaway2000-08-031-6/+12
| | | | | | | something in the location where OpenSSH likes to point. Notes: svn path=/head/; revision=64177
* Don't build sshd if NO_OPENSSL defined.Kris Kennaway2000-07-301-1/+1
| | | | | | | Submitted by: stephen@math.missouri.edu Notes: svn path=/head/; revision=64034
* Don't build crypto-enabled telnetd if NO_OPENSSL is defined, since itKris Kennaway2000-07-251-1/+1
| | | | | | | attempts to link against libcrypto. Notes: svn path=/head/; revision=63824
* WITH_IDEA --> MAKE_IDEA fix.Mark Murray2000-07-161-1/+1
| | | | Notes: svn path=/head/; revision=63268
* Add missing $FreeBSD$ to files that are NOT still on vendor a branch.Peter Wemm2000-07-162-0/+6
| | | | Notes: svn path=/head/; revision=63248
* Be consistant about WITH_ vs MAKE_ flags. We have a precedent of usingPeter Wemm2000-07-142-4/+4
| | | | | | | | | | MAKE_foo for things like MAKE_KERBEROS etc. Use that. I managed to confuse myself last time and made make.conf different to the code. ;-( Reported by: Jun Kuriyama <kuriyama@FreeBSD.org> Notes: svn path=/head/; revision=63123
* Argh. Cut/paste transcription error. Fix syntax of previous commit.Peter Wemm2000-07-031-1/+1
| | | | Notes: svn path=/head/; revision=62437
* USA_RESIDENT is forced to YES or NO at the start of Makefile.inc1Peter Wemm2000-07-031-1/+2
| | | | | | | | | Use that to be the final arbiter of whether or not to build the librsaintl.so plugin for openssl/openssh. Add a magic WANT_RSAINTL flag to force building even if USA_RESIDENT=YES. Notes: svn path=/head/; revision=62434
* MFI. This is a documentation-only, diffreducing patch, that ifMark Murray2000-06-244-2/+23
| | | | | | | | invoked will cause breakage. US Users - DO NOT try to turn on IDEA - the sources are not included. Notes: svn path=/head/; revision=62030
* Link explicitly against -lmd. I'm not sure what was pulling this inKris Kennaway2000-06-111-2/+2
| | | | | | | on -current, but it doesnt do it on -stable. Notes: svn path=/head/; revision=61538
* Add a new file to SRCSKris Kennaway2000-06-031-1/+1
| | | | Notes: svn path=/head/; revision=61213
* /dev/urandom is the default random device, so no use in stateing it here.David E. O'Brien2000-05-151-4/+1
| | | | | | | Also simplify the conditionals a little. Notes: svn path=/head/; revision=60615
* This version is slightly better than rev 1.10. There are still missingDavid E. O'Brien2000-05-151-10/+8
| | | | | | | | dependencies for openssl/*.h. I cannot reproduce any critical race conditions with this revision. Notes: svn path=/head/; revision=60610
* Use unadorned `mkdir -p', removing the "test ... ||".David E. O'Brien2000-05-151-2/+2
| | | | | | | | There are sometimes problems with "&&" and "||" in the `make -j' case, as it appears multiple processes may process parts of the execution line. Notes: svn path=/head/; revision=60609
* Update for OpenSSH 2.1Kris Kennaway2000-05-153-5/+15
| | | | Notes: svn path=/head/; revision=60577
* Use the C locale for running date(1).Kris Kennaway2000-04-201-1/+1
| | | | | | | Submitted by: ache Notes: svn path=/head/; revision=59426
* Update for OpenSSL 0.9.5a and clean up a bit.Kris Kennaway2000-04-135-111/+183
| | | | Notes: svn path=/head/; revision=59196
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-01 14:32:32 +0000