summaryrefslogtreecommitdiff
path: root/security (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Update to 0.6.1Nick Sayer1999-11-282-4/+4
| | | | | | | Submitted by: sascha@schumann.cx Notes: svn path=/head/; revision=23462
* Re-importing in net.Steve Price1999-11-261-1/+0
| | | | | | | Suggested by: kris Notes: svn path=/head/; revision=23423
* Activate the dante and p5-Authen-PAM ports.Steve Price1999-11-261-0/+2
| | | | Notes: svn path=/head/; revision=23404
* Initial import of p5-Authen-PAM version 0.08.Steve Price1999-11-265-0/+35
| | | | | | | | | | A Perl interface to the PAM library. PR: 14137 Submitted by: Matt Behrens <matt@zigg.com> Notes: svn path=/head/; revision=23403
* Forgot a lineChris Piazza1999-11-251-0/+1
| | | | Notes: svn path=/head/; revision=23333
* Patches are now available from www.ssh.org/patchesChris Piazza1999-11-252-2/+5
| | | | | | | Submitted by: Issei Suzuki <issei@jp.freebsd.org> Notes: svn path=/head/; revision=23332
* Removed an obsoleted patch.SADA Kenji1999-11-241-4/+0
| | | | | | | | PR: 15059 Submitted by: Maintainer Notes: svn path=/head/; revision=23303
* Also, set SSH_PROGRAM correctly.Brian Feldman1999-11-241-1/+1
| | | | Notes: svn path=/head/; revision=23297
* Update the CVS_DATE. This brings in support for TIS authentication,Brian Feldman1999-11-2421-298/+578
| | | | | | | | | | | | | | | | | | | | | obsoleting a couple patches (it's the same code, though, except for additions). This also brings in KNFization of everything (please hold the cheering down :) and made me reroll all my patches. My patches have been almost entirely rewritten. The places are the same, but the code's rewritten. It fits with the style (KNF) now, and looks better. I've also added strlcat.c to the build, which, just like strlcpy.c, is necessary for compatibility with older libcs. After strlcat() snuck into the OpenSSH code recently, this would prevent OpenSSH from building on (e.g.) FreeBSD 3.2. Adding it to ssh/lib/ makes it work yet again :) Notes: svn path=/head/; revision=23296
* Correct ssh-keygen usage.Brian Feldman1999-11-231-1/+1
| | | | | | | Submitted by: Larry Baird <lab@gta.com> Notes: svn path=/head/; revision=23275
* Clean up some shell scripting and replace it with proper MakefileBrian Feldman1999-11-221-8/+12
| | | | | | | | syntax. Run ssh-keygen for ssh_host_key on port install, not just package install. Notes: svn path=/head/; revision=23263
* I wish CVS would report new files. This broke the carefully designedBrian Feldman1999-11-221-8/+10
| | | | | | | mirroring system. The tarball was fine, but the extraction was not Notes: svn path=/head/; revision=23262
* And away we go! Here comes the source mirror, thanks Mark!Brian Feldman1999-11-211-1/+1
| | | | | | | Submitted by: markm Notes: svn path=/head/; revision=23253
* Update to 2.3 Beta8.David E. O'Brien1999-11-212-3/+3
| | | | | | | | | | | | | | * Added "firewall mode" timing optimizations which can decrease the amount of time neccessary to SYN or connect scan some heavily filtered hosts. * Changed "TCP Ping" to use a random ACK value rather than 0 (an IDS called Snort was using this to detect Nmap TCP pings). * better FDDI support * changes which should lead to tremendous speedups against some firewalled hosts. Notes: svn path=/head/; revision=23252
* Mastersite has moved.SADA Kenji1999-11-211-1/+1
| | | | Notes: svn path=/head/; revision=23245
* Update to the latest CVS_DATE, obsoleting patches patch-a[yz].Brian Feldman1999-11-213-15/+42
| | | | | | | | | | | | | | | | Add "ignorelogin" login.conf functionality to sshd. The biggest change: new port functionality. Making "fetchsrctarball" will soon work for those of you who cannot use CVS to get OpenSSH. Mark Murray, the savior he is :), will use "make makesrctarball" and put the snapshots of OpenSSH source in the proper place. The current ${MASTER_SITES} is just a guess at where the snapshot files could be hosted; something definite should be worked out very soon. Notes: svn path=/head/; revision=23238
* Set all the default PATHs correctly, removing a "hack"-ish ${PERL}Brian Feldman1999-11-201-2/+0
| | | | | | | | | transform. Prompted by: deraadt Notes: svn path=/head/; revision=23223
* Default to not allowing root logins. This makes it consistant withWarner Losh1999-11-201-1/+1
| | | | | | | | OpenSSH. Users desiring the old functionality can edit their sshd-config files by hand for new installs. Notes: svn path=/head/; revision=23216
* Give OpenSSH TIS client-side authentication.Brian Feldman1999-11-204-0/+99
| | | | | | | Submitted by: peter Notes: svn path=/head/; revision=23210
* ARGH! Remember the echo -n ' sshd'.Brian Feldman1999-11-202-2/+2
| | | | Notes: svn path=/head/; revision=23209
* Change around sshd.sh for the last time.Brian Feldman1999-11-203-16/+7
| | | | Notes: svn path=/head/; revision=23208
* Turn on HAVE_OPENPTY so more than 16 terminals work with sshd.Brian Feldman1999-11-202-9/+8
| | | | | | | | | | | | | | | | | Put sshd.sh installation in the pre-install, ssh_host_key generation back in the PLIST, and check for ssh_config, too. This port now works much better as a package. The configuration files and sshd.sh are also part of the package, and as such removed on deinstall. The proper upgrade procedure from one OpenSSH version to a newer one is: chflags schg /usr/local/etc/ssh* # preserve them from deletion cd /usr/ports/security/openssh make all deinstall reinstall clean Partially submitted by: peter Notes: svn path=/head/; revision=23206
* Add that pesky slogin link to the packing list.Brian Feldman1999-11-201-0/+1
| | | | Notes: svn path=/head/; revision=23203
* Update to the latest CVS_DATE (now =) The biggest change to the OpenBSDBrian Feldman1999-11-202-19/+19
| | | | | | | | | | | | code tree is the addition of the SSH_CMSG_MAX_PACKET_SIZE command. Really big tiny change: PermitRootLogin is now DISABLED by default. This change has been specifically okayed. Reviewed by: imp Notes: svn path=/head/; revision=23202
* Fix spelling errors.. privledges -> privilegesJim Mock1999-11-181-11/+7
| | | | | | | Submitted by: Jeroen Ruigrok van der Werven <asmodai@bart.nl> Notes: svn path=/head/; revision=23184
* Make the second CVS site work for real.Brian Feldman1999-11-184-25/+39
| | | | | | | | | | | | | | | | Move sshd.sh to files and ${INSTALL_SCRIPT}/${PERL} -pi it. Clean up the Makefile's style a bit (MNF anyone? :) Add WWW: to pkg/DESCR. Change MASTER_SITES back to CVS_SITES to avoid problems with MASTER_SITE_OVERRIDE. Parts submitted by: Christian Weisgerber <naddy@mips.rhein-neckar.de>, Robert Muir <rmuir@gibralter.net> Notes: svn path=/head/; revision=23178
* Use a different PATCH_SITE so we don't keep getting people telling usChris Piazza1999-11-181-1/+2
| | | | | | | | | that the port is broken. Thanks to Charles "spork" <spork@super-g.com> Notes: svn path=/head/; revision=23177
* Update OpenSSH to the latest CVS_DATE.Brian Feldman1999-11-173-13/+27
| | | | | | | | | | | | | | | | | | | | | | | | CVS_SITE is now MASTER_SITES, and each is tried if the previous fails Include a :pserver: as one of the CVS repositories, so those inside firewalls should be able to fetch SSH. If this doesn't work for everyone, I've still got a trick up my sleeve. Fix rlimit-related warnings people are seeing by moving the setclasscontext() to before the switching of uids. Let me know if this does not work, as I never got the warnings in the first place. Don't clobber sshd_config, etc. Instead, if they're there, just warn of their existance. Take the config files and sshd.sh out of the pkg/PLIST, mainly so you don't lose your configuration files by doing a "make deinstall reinstall clean" update. Parts submitted by: Robert Muir <rmuir@gibralter.net>, Travis Mikalson <bofh@terranova.net> Notes: svn path=/head/; revision=23167
* Thanks to those who replied! The include (ssl versus openssl) transformBrian Feldman1999-11-1712-153/+4
| | | | | | | | | is now done in post-patch. Submitted by: Anton Berezin <tobez@plab.ku.dk>, Christian Weisgerber <naddy@unix-ag.uni-kl.de> Notes: svn path=/head/; revision=23166
* And update those checksums too.Brian Feldman1999-11-171-4/+4
| | | | Notes: svn path=/head/; revision=23159
* Prompted by Kris Kennaway <kris@FreeBSD.org>Brian Feldman1999-11-174-32/+31
| | | | | | | | | | | | | | | | Update to to the current time for OpenSSH. The notable commit given to me for this new date is: (provos@cvs.openbsd.org) usr.bin/ssh : hostfile.c in known_hosts key lookup the entry for the bits does not need to match, all the information is contained in n and e. This solves the problem with buggy servers announcing the wrong modulus length. markus and me. Notes: svn path=/head/; revision=23158
* upgrade to 2.09Andrey A. Chernov1999-11-162-4/+4
| | | | | | | PR: 14792 Notes: svn path=/head/; revision=23155
* Don't overflow rsa bits. As seen on bugtraq and elsewhere.Warner Losh1999-11-161-0/+25
| | | | | | | | | Submitted by: drow@false.org Reviewed by: ache PR: 14749 Notes: svn path=/head/; revision=23147
* Bump CVS_DATE to a few minutes ago, and update MD5 checksums for updatedBrian Feldman1999-11-152-11/+14
| | | | | | | | | files. Also, CVS_RSH can now be specified (to override the ignored environmental CVS_RSH) as PORTS_CVS_RSH. For instance, you can use ssh to check out ssh ( :] ) with "PORTS_CVS_RSH=ssh make fetch". Notes: svn path=/head/; revision=23137
* Enable TCP wrapper support (conditionalized to turn off if tcpd.h isBrian Feldman1999-11-152-5/+14
| | | | | | | nonexistant). Also, add the Makefile hooks for AFS, Kerberos, and S/Key. Notes: svn path=/head/; revision=23135
* Add support for setting login.conf class things including rlimits, priority,Brian Feldman1999-11-131-5/+8
| | | | | | | | | | | and umask. Also support /var/run/nologin, copyright, and support motd correctly. The PR was used as a base, thanks! PR: 14859 Submitted by: Dan Harnett <danh@wzrd.com> Notes: svn path=/head/; revision=23057
* Upgrade to latest version, and set myself as MAINTAINER.Vanilla I. Shu1999-11-134-7/+25
| | | | | | | | PR: ports/14605 Submitted by: Will Andrews <andrews@technologist.com> Notes: svn path=/head/; revision=23053
* Lots of OpenSSH changes, let's see if I remember them all.Brian Feldman1999-11-134-13/+138
| | | | | | | | | | | | | | | | | | | | | | 1. Makefile cleanups, pkg/DESCR original comment (obrien) 2. sshd.sh and automatic host key generation when installed (Christian Weisgerber <naddy@unix-ag.uni-kl.de>) 3. Completely redone downloading procedure: * CVS is used to download the source (${CVS_CMD} defaults to cvs -z3) * MD5 checksums and a specific ${CVS_DATE} are used to get a specific source tree and verify it; ${CVS_DATE} and checksums can easily be rolled forward once tested. * Source is checked out to distfiles like other ports, and is only updated when ${CVS_DATE} changes. Rebuilding the port doesn't require another cvs co. Enjoy! Reviewed mostly by: obrien Notes: svn path=/head/; revision=23051
* Correct the do-fetch target and improve error detection in fetchit.Brian Feldman1999-11-111-4/+4
| | | | Notes: svn path=/head/; revision=23036
* Whoops, extra parenthesis broke do-fetch.Brian Feldman1999-11-111-1/+1
| | | | Notes: svn path=/head/; revision=23033
* Quite a bit of change to OpenSSH made:Brian Feldman1999-11-114-5/+96
| | | | | | | | | | | | | | | Add "/usr/local/bin" to _PATH_STDPATH (makes scp work inbound, for instance.) Fetch OpenSSH from OpenBSD's src tree. This uses a script and ftp(1). Add strlcpy.c to ssh/lib, so this port should build on 3.X now. Make TCP_WRAPPERS conditional on /usr/include/tcpd.h like the PR, so it should build on older RELEASEs without TCP Wrappers. The PR is still open because I am taking more from it. PR: ports/14653 Notes: svn path=/head/; revision=23032
* Make some various cleanups. Note that I did not add RESTRICTED since this isBrian Feldman1999-11-095-26/+48
| | | | | | | | | | in no way cryptographically encumbered code. The fact that it's redistributed by me from freefall is completely coincidental. Submitted by: obrien, Christian Weisgerber <naddy@unix-ag.uni-kl.de> Notes: svn path=/head/; revision=22988
* Add library dependency to crypto.1.Dirk Froemberg1999-11-091-0/+1
| | | | Notes: svn path=/head/; revision=22984
* Bombs away! Active openssh.Brian Feldman1999-11-081-0/+1
| | | | Notes: svn path=/head/; revision=22964
* Say hello to OpenSSH! It's more secure, has a better license, andBrian Feldman1999-11-0828-0/+409
| | | | | | | is actively maintained by members of the OpenBSD project. Notes: svn path=/head/; revision=22963
* Spelling error correction.Brian Feldman1999-11-081-1/+1
| | | | Notes: svn path=/head/; revision=22962
* Change dependencies from static to shared openssl libraries,Dirk Froemberg1999-11-075-4/+11
| | | | | | | because openssl also builds shared libraries, now. Notes: svn path=/head/; revision=22957
* Build and install shared libraries libcrypto.so.1 and libssl.so.1, too.Dirk Froemberg1999-11-076-10/+78
| | | | | | | Submitted by: Issei Suzuki <issei@jp.freebsd.org> Notes: svn path=/head/; revision=22956
* Clean up a bunch of portlint(1) FATAL errors, and tidy up theMark Murray1999-11-072-12/+29
| | | | | | | | | PREFIX handling. OK'ed by: MAINTAINER (a few days ago) Notes: svn path=/head/; revision=22949
* Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quiteEivind Eklund1999-11-063-2/+10
| | | | | | | some time ago). Notes: svn path=/head/; revision=22944
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-14 14:47:44 +0000