summaryrefslogtreecommitdiff
path: root/security (unfollow)
Commit message (Collapse)AuthorFilesLines
1999-11-28Update to 0.6.1Nick Sayer2-4/+4
Submitted by: sascha@schumann.cx Notes: svn path=/head/; revision=23462
1999-11-26Re-importing in net.Steve Price1-1/+0
Suggested by: kris Notes: svn path=/head/; revision=23423
1999-11-26Activate the dante and p5-Authen-PAM ports.Steve Price1-0/+2
Notes: svn path=/head/; revision=23404
1999-11-26Initial import of p5-Authen-PAM version 0.08.Steve Price5-0/+35
A Perl interface to the PAM library. PR: 14137 Submitted by: Matt Behrens <matt@zigg.com> Notes: svn path=/head/; revision=23403
1999-11-25Forgot a lineChris Piazza1-0/+1
Notes: svn path=/head/; revision=23333
1999-11-25Patches are now available from www.ssh.org/patchesChris Piazza2-2/+5
Submitted by: Issei Suzuki <issei@jp.freebsd.org> Notes: svn path=/head/; revision=23332
1999-11-24Removed an obsoleted patch.SADA Kenji1-4/+0
PR: 15059 Submitted by: Maintainer Notes: svn path=/head/; revision=23303
1999-11-24Also, set SSH_PROGRAM correctly.Brian Feldman1-1/+1
Notes: svn path=/head/; revision=23297
1999-11-24Update the CVS_DATE. This brings in support for TIS authentication,Brian Feldman21-298/+578
obsoleting a couple patches (it's the same code, though, except for additions). This also brings in KNFization of everything (please hold the cheering down :) and made me reroll all my patches. My patches have been almost entirely rewritten. The places are the same, but the code's rewritten. It fits with the style (KNF) now, and looks better. I've also added strlcat.c to the build, which, just like strlcpy.c, is necessary for compatibility with older libcs. After strlcat() snuck into the OpenSSH code recently, this would prevent OpenSSH from building on (e.g.) FreeBSD 3.2. Adding it to ssh/lib/ makes it work yet again :) Notes: svn path=/head/; revision=23296
1999-11-23Correct ssh-keygen usage.Brian Feldman1-1/+1
Submitted by: Larry Baird <lab@gta.com> Notes: svn path=/head/; revision=23275
1999-11-22Clean up some shell scripting and replace it with proper MakefileBrian Feldman1-8/+12
syntax. Run ssh-keygen for ssh_host_key on port install, not just package install. Notes: svn path=/head/; revision=23263
1999-11-22I wish CVS would report new files. This broke the carefully designedBrian Feldman1-8/+10
mirroring system. The tarball was fine, but the extraction was not Notes: svn path=/head/; revision=23262
1999-11-21And away we go! Here comes the source mirror, thanks Mark!Brian Feldman1-1/+1
Submitted by: markm Notes: svn path=/head/; revision=23253
1999-11-21Update to 2.3 Beta8.David E. O'Brien2-3/+3
* Added "firewall mode" timing optimizations which can decrease the amount of time neccessary to SYN or connect scan some heavily filtered hosts. * Changed "TCP Ping" to use a random ACK value rather than 0 (an IDS called Snort was using this to detect Nmap TCP pings). * better FDDI support * changes which should lead to tremendous speedups against some firewalled hosts. Notes: svn path=/head/; revision=23252
1999-11-21Mastersite has moved.SADA Kenji1-1/+1
Notes: svn path=/head/; revision=23245
1999-11-21Update to the latest CVS_DATE, obsoleting patches patch-a[yz].Brian Feldman3-15/+42
Add "ignorelogin" login.conf functionality to sshd. The biggest change: new port functionality. Making "fetchsrctarball" will soon work for those of you who cannot use CVS to get OpenSSH. Mark Murray, the savior he is :), will use "make makesrctarball" and put the snapshots of OpenSSH source in the proper place. The current ${MASTER_SITES} is just a guess at where the snapshot files could be hosted; something definite should be worked out very soon. Notes: svn path=/head/; revision=23238
1999-11-20Set all the default PATHs correctly, removing a "hack"-ish ${PERL}Brian Feldman1-2/+0
transform. Prompted by: deraadt Notes: svn path=/head/; revision=23223
1999-11-20Default to not allowing root logins. This makes it consistant withWarner Losh1-1/+1
OpenSSH. Users desiring the old functionality can edit their sshd-config files by hand for new installs. Notes: svn path=/head/; revision=23216
1999-11-20Give OpenSSH TIS client-side authentication.Brian Feldman4-0/+99
Submitted by: peter Notes: svn path=/head/; revision=23210
1999-11-20ARGH! Remember the echo -n ' sshd'.Brian Feldman2-2/+2
Notes: svn path=/head/; revision=23209
1999-11-20Change around sshd.sh for the last time.Brian Feldman3-16/+7
Notes: svn path=/head/; revision=23208
1999-11-20Turn on HAVE_OPENPTY so more than 16 terminals work with sshd.Brian Feldman2-9/+8
Put sshd.sh installation in the pre-install, ssh_host_key generation back in the PLIST, and check for ssh_config, too. This port now works much better as a package. The configuration files and sshd.sh are also part of the package, and as such removed on deinstall. The proper upgrade procedure from one OpenSSH version to a newer one is: chflags schg /usr/local/etc/ssh* # preserve them from deletion cd /usr/ports/security/openssh make all deinstall reinstall clean Partially submitted by: peter Notes: svn path=/head/; revision=23206
1999-11-20Add that pesky slogin link to the packing list.Brian Feldman1-0/+1
Notes: svn path=/head/; revision=23203
1999-11-20Update to the latest CVS_DATE (now =) The biggest change to the OpenBSDBrian Feldman2-19/+19
code tree is the addition of the SSH_CMSG_MAX_PACKET_SIZE command. Really big tiny change: PermitRootLogin is now DISABLED by default. This change has been specifically okayed. Reviewed by: imp Notes: svn path=/head/; revision=23202
1999-11-18Fix spelling errors.. privledges -> privilegesJim Mock1-11/+7
Submitted by: Jeroen Ruigrok van der Werven <asmodai@bart.nl> Notes: svn path=/head/; revision=23184
1999-11-18Make the second CVS site work for real.Brian Feldman4-25/+39
Move sshd.sh to files and ${INSTALL_SCRIPT}/${PERL} -pi it. Clean up the Makefile's style a bit (MNF anyone? :) Add WWW: to pkg/DESCR. Change MASTER_SITES back to CVS_SITES to avoid problems with MASTER_SITE_OVERRIDE. Parts submitted by: Christian Weisgerber <naddy@mips.rhein-neckar.de>, Robert Muir <rmuir@gibralter.net> Notes: svn path=/head/; revision=23178
1999-11-18Use a different PATCH_SITE so we don't keep getting people telling usChris Piazza1-1/+2
that the port is broken. Thanks to Charles "spork" <spork@super-g.com> Notes: svn path=/head/; revision=23177
1999-11-17Update OpenSSH to the latest CVS_DATE.Brian Feldman3-13/+27
CVS_SITE is now MASTER_SITES, and each is tried if the previous fails Include a :pserver: as one of the CVS repositories, so those inside firewalls should be able to fetch SSH. If this doesn't work for everyone, I've still got a trick up my sleeve. Fix rlimit-related warnings people are seeing by moving the setclasscontext() to before the switching of uids. Let me know if this does not work, as I never got the warnings in the first place. Don't clobber sshd_config, etc. Instead, if they're there, just warn of their existance. Take the config files and sshd.sh out of the pkg/PLIST, mainly so you don't lose your configuration files by doing a "make deinstall reinstall clean" update. Parts submitted by: Robert Muir <rmuir@gibralter.net>, Travis Mikalson <bofh@terranova.net> Notes: svn path=/head/; revision=23167
1999-11-17Thanks to those who replied! The include (ssl versus openssl) transformBrian Feldman12-153/+4
is now done in post-patch. Submitted by: Anton Berezin <tobez@plab.ku.dk>, Christian Weisgerber <naddy@unix-ag.uni-kl.de> Notes: svn path=/head/; revision=23166
1999-11-17And update those checksums too.Brian Feldman1-4/+4
Notes: svn path=/head/; revision=23159
1999-11-17Prompted by Kris Kennaway <kris@FreeBSD.org>Brian Feldman4-32/+31
Update to to the current time for OpenSSH. The notable commit given to me for this new date is: (provos@cvs.openbsd.org) usr.bin/ssh : hostfile.c in known_hosts key lookup the entry for the bits does not need to match, all the information is contained in n and e. This solves the problem with buggy servers announcing the wrong modulus length. markus and me. Notes: svn path=/head/; revision=23158
1999-11-16upgrade to 2.09Andrey A. Chernov2-4/+4
PR: 14792 Notes: svn path=/head/; revision=23155
1999-11-16Don't overflow rsa bits. As seen on bugtraq and elsewhere.Warner Losh1-0/+25
Submitted by: drow@false.org Reviewed by: ache PR: 14749 Notes: svn path=/head/; revision=23147
1999-11-15Bump CVS_DATE to a few minutes ago, and update MD5 checksums for updatedBrian Feldman2-11/+14
files. Also, CVS_RSH can now be specified (to override the ignored environmental CVS_RSH) as PORTS_CVS_RSH. For instance, you can use ssh to check out ssh ( :] ) with "PORTS_CVS_RSH=ssh make fetch". Notes: svn path=/head/; revision=23137
1999-11-15Enable TCP wrapper support (conditionalized to turn off if tcpd.h isBrian Feldman2-5/+14
nonexistant). Also, add the Makefile hooks for AFS, Kerberos, and S/Key. Notes: svn path=/head/; revision=23135
1999-11-13Add support for setting login.conf class things including rlimits, priority,Brian Feldman1-5/+8
and umask. Also support /var/run/nologin, copyright, and support motd correctly. The PR was used as a base, thanks! PR: 14859 Submitted by: Dan Harnett <danh@wzrd.com> Notes: svn path=/head/; revision=23057
1999-11-13Upgrade to latest version, and set myself as MAINTAINER.Vanilla I. Shu4-7/+25
PR: ports/14605 Submitted by: Will Andrews <andrews@technologist.com> Notes: svn path=/head/; revision=23053
1999-11-13Lots of OpenSSH changes, let's see if I remember them all.Brian Feldman4-13/+138
1. Makefile cleanups, pkg/DESCR original comment (obrien) 2. sshd.sh and automatic host key generation when installed (Christian Weisgerber <naddy@unix-ag.uni-kl.de>) 3. Completely redone downloading procedure: * CVS is used to download the source (${CVS_CMD} defaults to cvs -z3) * MD5 checksums and a specific ${CVS_DATE} are used to get a specific source tree and verify it; ${CVS_DATE} and checksums can easily be rolled forward once tested. * Source is checked out to distfiles like other ports, and is only updated when ${CVS_DATE} changes. Rebuilding the port doesn't require another cvs co. Enjoy! Reviewed mostly by: obrien Notes: svn path=/head/; revision=23051
1999-11-11Correct the do-fetch target and improve error detection in fetchit.Brian Feldman1-4/+4
Notes: svn path=/head/; revision=23036
1999-11-11Whoops, extra parenthesis broke do-fetch.Brian Feldman1-1/+1
Notes: svn path=/head/; revision=23033
1999-11-11Quite a bit of change to OpenSSH made:Brian Feldman4-5/+96
Add "/usr/local/bin" to _PATH_STDPATH (makes scp work inbound, for instance.) Fetch OpenSSH from OpenBSD's src tree. This uses a script and ftp(1). Add strlcpy.c to ssh/lib, so this port should build on 3.X now. Make TCP_WRAPPERS conditional on /usr/include/tcpd.h like the PR, so it should build on older RELEASEs without TCP Wrappers. The PR is still open because I am taking more from it. PR: ports/14653 Notes: svn path=/head/; revision=23032
1999-11-09Make some various cleanups. Note that I did not add RESTRICTED since this isBrian Feldman5-26/+48
in no way cryptographically encumbered code. The fact that it's redistributed by me from freefall is completely coincidental. Submitted by: obrien, Christian Weisgerber <naddy@unix-ag.uni-kl.de> Notes: svn path=/head/; revision=22988
1999-11-09Add library dependency to crypto.1.Dirk Froemberg1-0/+1
Notes: svn path=/head/; revision=22984
1999-11-08Bombs away! Active openssh.Brian Feldman1-0/+1
Notes: svn path=/head/; revision=22964
1999-11-08Say hello to OpenSSH! It's more secure, has a better license, andBrian Feldman28-0/+409
is actively maintained by members of the OpenBSD project. Notes: svn path=/head/; revision=22963
1999-11-08Spelling error correction.Brian Feldman1-1/+1
Notes: svn path=/head/; revision=22962
1999-11-07Change dependencies from static to shared openssl libraries,Dirk Froemberg5-4/+11
because openssl also builds shared libraries, now. Notes: svn path=/head/; revision=22957
1999-11-07Build and install shared libraries libcrypto.so.1 and libssl.so.1, too.Dirk Froemberg6-10/+78
Submitted by: Issei Suzuki <issei@jp.freebsd.org> Notes: svn path=/head/; revision=22956
1999-11-07Clean up a bunch of portlint(1) FATAL errors, and tidy up theMark Murray2-12/+29
PREFIX handling. OK'ed by: MAINTAINER (a few days ago) Notes: svn path=/head/; revision=22949
1999-11-06Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quiteEivind Eklund3-2/+10
some time ago). Notes: svn path=/head/; revision=22944