aboutsummaryrefslogtreecommitdiff
path: root/secure
Commit message (Collapse)AuthorAgeFilesLines
* Update buildinf.h to make SSLeay_version(3) little bit more useful.Jung-uk Kim2015-01-161-3/+3
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=277274
* Add a ${CP} alias for copying files in the build.Will Andrews2015-01-161-1/+1
| | | | | | | | | | | | | | | | | Some users build FreeBSD as non-root in Perforce workspaces. By default, Perforce sets files read-only unless they're explicitly being edited. As a result, the -f argument must be used to cp in order to override the read-only flag when copying source files to object directories. Bare use of 'cp' should be avoided in the future. Update all current users of 'cp' in the src tree. Reviewed by: emaste MFC after: 1 week Sponsored by: Spectra Logic Notes: svn path=/head/; revision=277273
* Merge OpenSSL 1.0.1l.Jung-uk Kim2015-01-16335-336/+336
| | | | | | | | MFC after: 1 week Relnotes: yes Notes: svn path=/head/; revision=277270
* Merge OpenSSL 1.0.1k.Jung-uk Kim2015-01-08335-4325/+7347
| | | | Notes: svn path=/head/; revision=276861
* Reduce overlinkingBaptiste Daroussin2014-11-2512-33/+10
| | | | | | | | | The framework now ensure by itself that pthread is added to the link chain as the last component if linked to kerberos hence avoid with out any explicit addition prevent issue like CVE-2014-8475 Notes: svn path=/head/; revision=275083
* Convert to LIBADDBaptiste Daroussin2014-11-2515-84/+36
| | | | | | | Reduce overlinking Notes: svn path=/head/; revision=275077
* Merge OpenSSL 1.0.1j.Jung-uk Kim2014-10-151-0/+199
| | | | | | | Relnotes: yes Notes: svn path=/head/; revision=273146
* Merge OpenSSL 1.0.1j.Jung-uk Kim2014-10-15336-437/+473
| | | | Notes: svn path=/head/; revision=273144
* Fix typo (LIBLDNSADD -> LIBLDNS) to fix "make checkdpadd"Enji Cooper2014-08-191-1/+1
| | | | | | | | | X-MFC with: r269648 Phabric: D634 Approved by: jmmv (mentor) Notes: svn path=/head/; revision=270178
* Merge OpenSSL 1.0.1i.Jung-uk Kim2014-08-07335-444/+1107
| | | | Notes: svn path=/head/; revision=269682
* Rework privatelib/internallibBaptiste Daroussin2014-08-0612-15/+15
| | | | | | | | | | | | | | | | | Make sure everything linking to a privatelib and/or an internallib does it directly from the OBJDIR rather than DESTDIR. Add src.libnames.mk so bsd.libnames.mk is not polluted by libraries not existsing in final installation Introduce the LD* variable which is what ld(1) is expecting (via LDADD) to link to internal/privatelib Directly link to the .so in case of private library to avoid having to complexify LDFLAGS. Phabric: https://phabric.freebsd.org/D553 Reviewed by: imp, emaste Notes: svn path=/head/; revision=269648
* Replace all uses of libncurses and libtermcap with their wide characterBrooks Davis2014-07-171-2/+2
| | | | | | | | | | | | | variants. This allows usable file system images (i.e. those with both a shell and an editor) to be created with only one copy of the curses library. Exp-run: antoine PR: 189842 Discussed with: bapt Sponsored by: DARPA, AFRL Notes: svn path=/head/; revision=268804
* Remove ia64.Marcel Moolenaar2014-07-071-224/+0
| | | | | | | | | | | | | | | | | | | | This includes: o All directories named *ia64* o All files named *ia64* o All ia64-specific code guarded by __ia64__ o All ia64-specific makefile logic o Mention of ia64 in comments and documentation This excludes: o Everything under contrib/ o Everything under crypto/ o sys/xen/interface o sys/sys/elf_common.h Discussed at: BSDcan Notes: svn path=/head/; revision=268351
* Merge OpenSSL 1.0.1h.Jung-uk Kim2014-06-09333-352/+400
| | | | | | | Approved by: so (delphij) Notes: svn path=/head/; revision=267256
* Switch using the new $2b$ format by default, when bcrypt is used.Xin LI2014-05-141-1/+1
| | | | | | | | MFC after: 2 weeks Relnotes: default Blowfish crypt(3) format have been changed to $2b$. Notes: svn path=/head/; revision=265995
* Use src.opts.mk in preference to bsd.own.mk except where we need stuffWarner Losh2014-05-0618-18/+18
| | | | | | | from the latter. Notes: svn path=/head/; revision=265420
* Fix order of libthr and libc in the global dso list for sshd, byKonstantin Belousov2014-04-271-0/+10
| | | | | | | | | | | | | | | | | | | | explicitely linking main binary with -lpthread. Before, libthr appeared in the list due to dependency of one of the kerberos libs. Due to the change in ld(1) behaviour of not copying NEEDED entries from direct dependencies into the link results, the order becomes reversed. The libthr must appear before libc to properly interpose libc symbols and provide working rtld locks implementation. The symptom was sshd hanging on rtld bind lock during nested symbol binding from a signal handler. Approved by: des (openssh maintainer) Sponsored by: The FreeBSD Foundation MFC after: 1 week Notes: svn path=/head/; revision=265003
* Add placeholder Kyuafiles for various top-level hierarchies.Julio Merino2014-04-2110-1/+71
| | | | | | | | | | | | | | | This change adds tests/ directories in the source tree to create various subdirectories in /usr/tests/ and to install placeholder Kyuafiles for them. the relevant hierarchies are: cddl, etc, games, gnu and secure. The reason for this is to simplify the addition of new test programs for utilities or libraries under any of these directories. Doing so on a case by case basis is unnecessary and is quite an obscure process. Notes: svn path=/head/; revision=264741
* NO_MAN= has been deprecated in favor of MAN= for some time, go aheadWarner Losh2014-04-131-1/+1
| | | | | | | | | and finish the job. ncurses is now the only Makefile in the tree that uses it since it wasn't a simple mechanical change, and will be addressed in a future commit. Notes: svn path=/head/; revision=264400
* Merge OpenSSL 1.0.1g.Jung-uk Kim2014-04-08334-356/+376
| | | | | | | Approved by: benl (maintainer) Notes: svn path=/head/; revision=264278
* Use MK_CRYPT=no in preference to WITHOUT_CRYPT here.Warner Losh2014-04-051-5/+5
| | | | Notes: svn path=/head/; revision=264157
* Upgrade to OpenSSH 6.6p1.Dag-Erling Smørgrav2014-03-252-5/+5
| | | | Notes: svn path=/head/; revision=263712
* multiple: Remove 3rd clause from BSD license where approved by theEitan Adler2014-03-141-5/+1
| | | | | | | | | | | | regents and renumber. This patch skips files in contrib/ and crypto/ Acked by: imp Discussed with: emaste Notes: svn path=/head/; revision=263142
* Refresh our implementation of OpenBSD's Blowfish password format.Xin LI2014-02-251-33/+52
| | | | | | | | | | | | | | | | | | | | | Notable changes: - Support of $2b$ password format to address a problem where very long passwords (more than 256 characters, when an integer overflow would happen and cause the length to wrap at 256). - Updated pseudo code in comments to reflect the reality. - Removed our local shortcut of processing magic string and rely on the centralized and tigntened validation. - Diff reduction from upstream. For now we are still generating the older $02a$ format of password but we will migrate to the new format once the format is formally finalized. MFC after: 1 month Notes: svn path=/head/; revision=262501
* Upgrade to OpenSSH 6.5p1.Dag-Erling Smørgrav2014-01-312-6/+10
| | | | Notes: svn path=/head/; revision=261320
* Merge OpenSSL 1.0.1f.Jung-uk Kim2014-01-22335-895/+796
| | | | | | | Approved by: so (delphij), benl (silence) Notes: svn path=/head/; revision=261037
* Unbreak the WITHOUT_KERBEROS build and try to reduce the odds of aDag-Erling Smørgrav2013-09-233-4/+12
| | | | | | | | | | | | repeat performance by introducing a script that runs configure with and without Kerberos, diffs the result and generates krb5_config.h, which contains the preprocessor macros that need to be defined in the Kerberos case and undefined otherwise. Approved by: re (marius) Notes: svn path=/head/; revision=255829
* Replace claims that DES is a strong cryptosystem with a warning statingDag-Erling Smørgrav2013-09-211-28/+7
| | | | | | | | | that it should no longer be considered secure. Approved by: re (gjb) Notes: svn path=/head/; revision=255760
* Clean up the OpenSSH build. It is now possible to build most componentsDag-Erling Smørgrav2013-09-1012-46/+190
| | | | | | | | | | | | | as static binaries, if desired. The one exception is sshd, which runs into trouble due to libpam.a's includion of pam_ssh. Make OpenSSH use LDNS if available. This allows it to verify signed SSHFP records. Approved by: re (blanket) Notes: svn path=/head/; revision=255460
* Make libldns and libssh private.Dag-Erling Smørgrav2013-09-0812-0/+12
| | | | | | | Approved by: re (blanket) Notes: svn path=/head/; revision=255386
* Remove references to MK_IDEA.Ed Schouten2013-04-273-21/+1
| | | | | | | | | As of r249959, we want to build with IDEA support enabled unconditionally. As this change removed the MK_IDEA flag, update these Makefiles accordingly. Notes: svn path=/head/; revision=249971
* Upgrade to OpenSSH 6.2p1. The most important new features are supportDag-Erling Smørgrav2013-03-221-4/+4
| | | | | | | for a key revocation list and more fine-grained authentication control. Notes: svn path=/head/; revision=248619
* Retire the mislabeled ENABLE_SUID_SSH knob.Dag-Erling Smørgrav2013-03-221-3/+1
| | | | Notes: svn path=/head/; revision=248617
* Merge OpenSSL 1.0.1e.Jung-uk Kim2013-02-13336-731/+736
| | | | | | | Approved by: secteam (simon), benl (silence) Notes: svn path=/head/; revision=246772
* Add a src.conf(5) option to allow users to compile in the "NONE cipher",Bjoern A. Zeeb2013-01-173-0/+12
| | | | | | | | | | | | which, only after authentication, disables crypto, and only for sessions without a terminal. Submitted by: Jeremy Chadwick (freebsd jdc.parodius.com) PR: bin/163095 MFC after: 10 days Notes: svn path=/head/; revision=245527
* Fix typo; s/ouput/outputKevin Lo2012-11-071-1/+1
| | | | Notes: svn path=/head/; revision=242692
* Upgrade OpenSSH to 6.1p1.Dag-Erling Smørgrav2012-09-031-2/+0
| | | | Notes: svn path=/head/; revision=240075
* Sort ASM definitions by crypto module for slightly easier maintenance.Jung-uk Kim2012-07-121-2/+4
| | | | | | | Specifically, GHASH_ASM belongs to crypto/modes. Notes: svn path=/head/; revision=238407
* Merge OpenSSL 1.0.1c.Jung-uk Kim2012-07-12394-13827/+67060
| | | | | | | Approved by: benl (maintainer) Notes: svn path=/head/; revision=238405
* Regen ca(1) for r237658. This re-applies r227458, i.e., add a missing "be".Jung-uk Kim2012-06-271-1/+1
| | | | Notes: svn path=/head/; revision=237666
* Merge OpenSSL 0.9.8x.Jung-uk Kim2012-06-27278-561/+567
| | | | | | | | | Reviewed by: stas Approved by: benl (maintainer) MFC after: 3 days Notes: svn path=/head/; revision=237657
* Update the previous openssl fix. [12:01]Bjoern A. Zeeb2012-05-301-1/+1
| | | | | | | | | | | Fix a bug in crypt(3) ignoring characters of a passphrase. [12:02] Security: FreeBSD-SA-12:01.openssl (revised) Security: FreeBSD-SA-12:02.crypt Approved by: so (bz, simon) Notes: svn path=/head/; revision=236304
* Restore the ability to use a non-standard LOCALBASE to sshdEitan Adler2012-03-242-0/+8
| | | | | | | | | | | | Add the ability to use a non-standard LOCALBASE to ssh Submitted by: jhb Reviewed by: des Approved by: cperciva MFC after: 0 days (with r233136) Notes: svn path=/head/; revision=233432
* X11BASE is not used any more and has been killed by the x11 team.Eitan Adler2012-03-192-26/+0
| | | | | | | | | Reviewed by: ??? Approved by: ??? MFC after: 3 days Notes: svn path=/head/; revision=233136
* Return NULL on error rather than ":", per the crypt(3) man page.Kevin Lo2012-02-221-6/+5
| | | | | | | Discussed in: http://www.openwall.com/lists/oss-security/2011/11/15/3 Notes: svn path=/head/; revision=231986
* Force linker error when created shared library contains a relocationKonstantin Belousov2011-12-061-0/+1
| | | | | | | | | | | | against text. Provide the override switch to turn off the strict behaviour. Apparently, openssl libcrypto needs it due to assembler code not being PIC. Discussed with: bf MFC after: 2 weeks Notes: svn path=/head/; revision=228307
* - add a missing "be" and "in"Eitan Adler2011-11-111-1/+1
| | | | | | | | | | | | | | - fix other errors introduced when committing r226436 - add 'function' to a sentence where it makes sense Submitted by: delphij Submitted by: dougb Submitted by: jhb Approved by: dougb Approved by: jhb Notes: svn path=/head/; revision=227458
* - change "is is" to "is" or "it is"Eitan Adler2011-10-163-3/+3
| | | | | | | | | | | - change "the the" to "the" Approved by: lstewart Approved by: sahil (mentor) MFC after: 3 days Notes: svn path=/head/; revision=226436
* Upgrade to OpenSSH 5.9p1.Dag-Erling Smørgrav2011-10-051-1/+2
| | | | | | | MFC after: 3 months Notes: svn path=/head/; revision=226046
* Upgrade to OpenSSH 5.8p2.Dag-Erling Smørgrav2011-05-042-7/+9
| | | | Notes: svn path=/head/; revision=221420
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-30 14:06:06 +0000