aboutsummaryrefslogtreecommitdiff
path: root/secure
Commit message (Collapse)AuthorAgeFilesLines
* Unbreak the WITHOUT_KERBEROS build and try to reduce the odds of aDag-Erling Smørgrav2013-09-233-4/+12
| | | | | | | | | | | | repeat performance by introducing a script that runs configure with and without Kerberos, diffs the result and generates krb5_config.h, which contains the preprocessor macros that need to be defined in the Kerberos case and undefined otherwise. Approved by: re (marius) Notes: svn path=/head/; revision=255829
* Replace claims that DES is a strong cryptosystem with a warning statingDag-Erling Smørgrav2013-09-211-28/+7
| | | | | | | | | that it should no longer be considered secure. Approved by: re (gjb) Notes: svn path=/head/; revision=255760
* Clean up the OpenSSH build. It is now possible to build most componentsDag-Erling Smørgrav2013-09-1012-46/+190
| | | | | | | | | | | | | as static binaries, if desired. The one exception is sshd, which runs into trouble due to libpam.a's includion of pam_ssh. Make OpenSSH use LDNS if available. This allows it to verify signed SSHFP records. Approved by: re (blanket) Notes: svn path=/head/; revision=255460
* Make libldns and libssh private.Dag-Erling Smørgrav2013-09-0812-0/+12
| | | | | | | Approved by: re (blanket) Notes: svn path=/head/; revision=255386
* Remove references to MK_IDEA.Ed Schouten2013-04-273-21/+1
| | | | | | | | | As of r249959, we want to build with IDEA support enabled unconditionally. As this change removed the MK_IDEA flag, update these Makefiles accordingly. Notes: svn path=/head/; revision=249971
* Upgrade to OpenSSH 6.2p1. The most important new features are supportDag-Erling Smørgrav2013-03-221-4/+4
| | | | | | | for a key revocation list and more fine-grained authentication control. Notes: svn path=/head/; revision=248619
* Retire the mislabeled ENABLE_SUID_SSH knob.Dag-Erling Smørgrav2013-03-221-3/+1
| | | | Notes: svn path=/head/; revision=248617
* Merge OpenSSL 1.0.1e.Jung-uk Kim2013-02-13336-731/+736
| | | | | | | Approved by: secteam (simon), benl (silence) Notes: svn path=/head/; revision=246772
* Add a src.conf(5) option to allow users to compile in the "NONE cipher",Bjoern A. Zeeb2013-01-173-0/+12
| | | | | | | | | | | | which, only after authentication, disables crypto, and only for sessions without a terminal. Submitted by: Jeremy Chadwick (freebsd jdc.parodius.com) PR: bin/163095 MFC after: 10 days Notes: svn path=/head/; revision=245527
* Fix typo; s/ouput/outputKevin Lo2012-11-071-1/+1
| | | | Notes: svn path=/head/; revision=242692
* Upgrade OpenSSH to 6.1p1.Dag-Erling Smørgrav2012-09-031-2/+0
| | | | Notes: svn path=/head/; revision=240075
* Sort ASM definitions by crypto module for slightly easier maintenance.Jung-uk Kim2012-07-121-2/+4
| | | | | | | Specifically, GHASH_ASM belongs to crypto/modes. Notes: svn path=/head/; revision=238407
* Merge OpenSSL 1.0.1c.Jung-uk Kim2012-07-12394-13827/+67060
| | | | | | | Approved by: benl (maintainer) Notes: svn path=/head/; revision=238405
* Regen ca(1) for r237658. This re-applies r227458, i.e., add a missing "be".Jung-uk Kim2012-06-271-1/+1
| | | | Notes: svn path=/head/; revision=237666
* Merge OpenSSL 0.9.8x.Jung-uk Kim2012-06-27278-561/+567
| | | | | | | | | Reviewed by: stas Approved by: benl (maintainer) MFC after: 3 days Notes: svn path=/head/; revision=237657
* Update the previous openssl fix. [12:01]Bjoern A. Zeeb2012-05-301-1/+1
| | | | | | | | | | | Fix a bug in crypt(3) ignoring characters of a passphrase. [12:02] Security: FreeBSD-SA-12:01.openssl (revised) Security: FreeBSD-SA-12:02.crypt Approved by: so (bz, simon) Notes: svn path=/head/; revision=236304
* Restore the ability to use a non-standard LOCALBASE to sshdEitan Adler2012-03-242-0/+8
| | | | | | | | | | | | Add the ability to use a non-standard LOCALBASE to ssh Submitted by: jhb Reviewed by: des Approved by: cperciva MFC after: 0 days (with r233136) Notes: svn path=/head/; revision=233432
* X11BASE is not used any more and has been killed by the x11 team.Eitan Adler2012-03-192-26/+0
| | | | | | | | | Reviewed by: ??? Approved by: ??? MFC after: 3 days Notes: svn path=/head/; revision=233136
* Return NULL on error rather than ":", per the crypt(3) man page.Kevin Lo2012-02-221-6/+5
| | | | | | | Discussed in: http://www.openwall.com/lists/oss-security/2011/11/15/3 Notes: svn path=/head/; revision=231986
* Force linker error when created shared library contains a relocationKonstantin Belousov2011-12-061-0/+1
| | | | | | | | | | | | against text. Provide the override switch to turn off the strict behaviour. Apparently, openssl libcrypto needs it due to assembler code not being PIC. Discussed with: bf MFC after: 2 weeks Notes: svn path=/head/; revision=228307
* - add a missing "be" and "in"Eitan Adler2011-11-111-1/+1
| | | | | | | | | | | | | | - fix other errors introduced when committing r226436 - add 'function' to a sentence where it makes sense Submitted by: delphij Submitted by: dougb Submitted by: jhb Approved by: dougb Approved by: jhb Notes: svn path=/head/; revision=227458
* - change "is is" to "is" or "it is"Eitan Adler2011-10-163-3/+3
| | | | | | | | | | | - change "the the" to "the" Approved by: lstewart Approved by: sahil (mentor) MFC after: 3 days Notes: svn path=/head/; revision=226436
* Upgrade to OpenSSH 5.9p1.Dag-Erling Smørgrav2011-10-051-1/+2
| | | | | | | MFC after: 3 months Notes: svn path=/head/; revision=226046
* Upgrade to OpenSSH 5.8p2.Dag-Erling Smørgrav2011-05-042-7/+9
| | | | Notes: svn path=/head/; revision=221420
* Fix some leftover binaries and shared libraries in the system that stillDimitry Andric2011-02-151-0/+4
| | | | | | | | | | | | | | | | | | have an executable stack, due to linking in hand-assembled .S or .s files, that have no .GNU-stack sections: RWX --- --- /lib/libcrypto.so.6 RWX --- --- /lib/libmd.so.5 RWX --- --- /lib/libz.so.6 RWX --- --- /lib/libzpool.so.2 RWX --- --- /usr/lib/liblzma.so.5 These were found using scanelf, from the sysutils/pax-utils port. Reviewed by: kib Notes: svn path=/head/; revision=218723
* Regenerate manual pages for OpenSSL 0.9.8q.Simon L. B. Nielsen2010-12-03278-291/+280
| | | | Notes: svn path=/head/; revision=216167
* Regenerate manual pages for OpenSSL 0.9.8p.Simon L. B. Nielsen2010-11-22278-9639/+7617
| | | | Notes: svn path=/head/; revision=215698
* Revert changes of 'assure' to 'ensure' made in r211936.Rebecca Cran2010-09-111-1/+1
| | | | | | | Approved by: rrs (mentor) Notes: svn path=/head/; revision=212463
* Fix incorrect usage of 'assure' and 'insure'.Rebecca Cran2010-08-281-1/+1
| | | | | | | Approved by: rrs (mentor) Notes: svn path=/head/; revision=211936
* Repair some build breakage introduced in r211725 and garbage collect someNathan Whitehorn2010-08-283-220/+12
| | | | | | | code made obsolete in the same commit. Notes: svn path=/head/; revision=211934
* MFtbemd:Warner Losh2010-08-231-15/+15
| | | | | | | | Prefer MACHNE_CPUARCH to MACHINE_ARCH in most contexts where you want to test of all the CPUs of a given family conform. Notes: svn path=/head/; revision=211725
* Fix buildworld -DNO_CLEAN when using with Perforce, which marks files asWill Andrews2010-08-121-2/+2
| | | | | | | | | | read-only by default, meaning files copied can't be overwritten next time. Reviewed by: imp Approved by: ken (mentor) Notes: svn path=/head/; revision=211243
* Whitespace fix for last check-in, move empty line to below endif.Jayachandran C.2010-08-041-1/+1
| | | | Notes: svn path=/head/; revision=210843
* MIPS 64 bit support.Jayachandran C.2010-08-041-0/+14
| | | | | | | | | | When compiled for MIPS n64 ABI - DES_LONG should be 'unsigned int' - BN_LLONG should be undefined - SIXTY_FOUR_BIT_LONG should be defined. Notes: svn path=/head/; revision=210842
* OpenSSL configuration for powerpc64Nathan Whitehorn2010-07-101-0/+217
| | | | | | | Obtained from: projects/ppc64 Notes: svn path=/head/; revision=209890
* Regenerate manual pages for OpenSSL 0.9.8n.Simon L. B. Nielsen2010-04-01277-277/+277
| | | | Notes: svn path=/head/; revision=206048
* - Make it slightly simpler to update OpenSSL version informationSimon L. B. Nielsen2010-04-011-1/+6
| | | | | | | | | | | for regenerating OpenSSL manual pages. - Explicitly set the OpenSSL release date so manual pages contain the date OpenSSL was released and not just the date OpenSSL was imported into the FreeBSD base system. - Update for Makefile for OpenSSL 0.9.8n. Notes: svn path=/head/; revision=206047
* Regenerate manual pages for OpenSSL 0.9.8m.Simon L. B. Nielsen2010-03-13280-331/+533
| | | | | | | MFC after: 3 weeks Notes: svn path=/head/; revision=205129
* Merge OpenSSL 0.9.8m into head.Simon L. B. Nielsen2010-03-131-1/+1
| | | | | | | | | | | | | | This also "reverts" some FreeBSD local changes so we should now be back to using entirely stock OpenSSL. The local changes were simple $FreeBSD$ lines additions, which were required in the CVS days, and the patch for FreeBSD-SA-09:15.ssl which has been superseded with OpenSSL 0.9.8m's RFC5746 'TLS renegotiation extension' support. MFC after: 3 weeks Notes: svn path=/head/; revision=205128
* Revert r204939Dag-Erling Smørgrav2010-03-101-1/+1
| | | | Notes: svn path=/head/; revision=204949
* Forgot to svn add the Makefile.Dag-Erling Smørgrav2010-03-101-0/+16
| | | | Notes: svn path=/head/; revision=204948
* Fix the build. The ssh-pkcs11-helper directory is empty, which isDoug Barton2010-03-101-1/+1
| | | | | | | causing confusion. Notes: svn path=/head/; revision=204939
* Upgrade to OpenSSH 5.4p1.Dag-Erling Smørgrav2010-03-094-5/+6
| | | | | | | MFC after: 1 month Notes: svn path=/head/; revision=204917
* (Almost) fixed static linkage. The remaining problem is withRuslan Ermilov2010-02-261-2/+2
| | | | | | | | libgssapi.a and libgssapi_krb5.a libraries that define the same symbols. Notes: svn path=/head/; revision=204355
* Fix 'make checkdpadd'Dag-Erling Smørgrav2010-02-251-1/+1
| | | | | | | Submitted by: ru@ Notes: svn path=/head/; revision=204340
* Remove -static; it was a failed experiment that got committed by accident.Dag-Erling Smørgrav2010-02-251-1/+4
| | | | Notes: svn path=/head/; revision=204334
* Build lib/ with WARNS=6 by default.Ed Schouten2010-01-021-0/+2
| | | | | | | | | | | | Similar to libexec/, do the same with lib/. Make WARNS=6 the norm and lower it when needed. I'm setting WARNS?=0 for secure/. It seems secure/ includes the Makefile.inc provided by lib/. I'm not going to touch that directory. Most of the code there is contributed anyway. Notes: svn path=/head/; revision=201381
* Remove pppd, it's gone.Edward Tomasz Napierala2009-12-291-2/+1
| | | | Notes: svn path=/head/; revision=201210
* Fix globbingDag-Erling Smørgrav2009-11-101-1/+1
| | | | | | | | Noticed by: delphij, David Cornejo <dave@dogwood.com> Forgotten by: des Notes: svn path=/head/; revision=199131
* Fix a couple of comment typos.John Baldwin2009-11-031-2/+2
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=198856
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-28 01:10:35 +0000