The ssh library was designed to be used by programmers needing a working SSH
implementation by the mean of a library. The complete control of the client is
made by the programmer. With libssh, you can remotely execute programs, transfer
files, use a secure and transparent tunnel for your remote programs.
With its Secure FTP implementation, you can play with remote files easily,
without third-party programs others than libcrypto (from OpenSSL).
libssh features:
- Full C library functions for manipulating a client-side SSH connection
- SSH2 protocol compliant
- Fully configurable sessions
- Server support, SSH agent authentication support
- Support for AES-128, AES-192, AES-256, Blowfish, 3DES in CBC mode
- Use multiple SSH connections in a same process, at same time
- Use multiple channels in the same connection
- Thread safety when using different sessions at same time
- POSIX-like SFTP implementation with openssh extension support
- SCP implementation
- RSA and DSS server public key supported
- Compression support (with zlib)
- Public key (RSA and DSS), password and keyboard-interactive authentication
===> The following configuration options are available for libssh-0.12.2:
OPENSSL=on: SSL/TLS support via OpenSSL
STATIC=on: Build static executables and/or libraries
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
GSSAPI_HEIMDAL=off: GSSAPI support via security/heimdal
GSSAPI_MIT=off: GSSAPI support via security/krb5
GSSAPI_NONE=off: Disable GSSAPI support
===> Use 'make config' to modify these settings
security/libssh: Fix build on FreeBSD 15+ with OpenSSL from base system
openssl/ml_kem.h is missing from the OpenSSL 3.5 in the base system.
Add a workaround to disable MLKEM support on such systems temporarily.
security/libssh: Mark BROKEN on 15+ and add backup for MASTER_SITES
Fails to build on 15+,
src/mlkem_crypto.c:31:10: fatal error: 'openssl/ml_kem.h' file not found
Add temporary backup for MASTER_SITES to avoid build failures on other
versions and of consumers as main upstream site current truncates
downloads
Thanks to eduardo@ for verifying build issues on -CURRENT
PR: 294268
Approved by: blanket, just fix it
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above )
security/libssh: Assign to submitter
While here, pet portlint and clean option section by using OPT_CMAKE_BOOL.
PR: 241716
Submitted by: Lorenzo Salvadore <phascolarctos@protonmail.ch>
Remove any mention of SSH1 -- it is no longer provided by the code,
but trying to enable the port's option causes the port to fail to
package.
Add a shim to allow compiling against LibreSSL
PR: 233346, 232437
Submitted by: Arrigo Marchiori, Franco Fichtner
Approved by: maintainer timeout
Change cmake default behaviour to outsource.
Ports that build out of source now simply can use "USES=cmake"
instead of "USES=cmake:outsource". Ports that fail to build
out of source now need to specify "USES=cmake:insource".
I tried to only set insource where explictely needed.
PR: 232038
Exp-run by: antoine
Update to 0.6.5 to fix CVE-2015-3146 (null pointer dereference).
This release also fixed the bug in 0.6.4 that prevented the GCRYPT option
from working.
PR: 200106
Approved by: johans
MFH: 2015Q2
Security: 0b040e24-f751-11e4-b24d-5453ed2e2b49
devel/libssh: Remove -pedantic-error flags and reset port
This port breaks if it violates standards according to the -pedantic flag.
Accord to gcc-5, it indeed does with dozens of warnings like this:
/wrkdirs/security/libssh/work/libssh-0.6.3/include/libssh/priv.h:200:33:
error: ISO C does not support '__FUNCTION__' predefined identifier
[-Wpedantic] _ssh_set_error(error, code, __FUNCTION__, __VA_ARGS__)
The maintainer has been MIA for over a year with PRs on 8 ports. I'm not
waiting for this one to time out too. While here, reset MAINTAINER.
PR: 197785
Submitted by: marino
Approved by: maintainer reset
security/libgcrypt: 1.6.1 -> 1.6.2, bump depends
Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code. Take
care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in
(Only the first 15 lines of the commit message are shown above )
Update to 0.6.3 to fix CVE-2014-0017.
While here, get rid of a lot of cruft:
- Use an https in MASTER_SITES and stop using a snapshot URL for the
tarballs.
- Switch to an out-of-source CMake build with USES=cmake:outsource, and get
rid of all the messing around with CMAKE_SOURCE_PATH and *_WRKSRC.
- Move the LICENSE block to the right place to pet portlint.
- Explicitly set CMAKE_ARGS with some options which we were already
implicitly assuming to be set.
- Disable examples and tests via CMAKE_ARGS instead of using an ugly sed
call.
- Do not pass WITH_OPENSSL=ON/OFF to CMake, this has no effect in the build
system.
- Stop gratuitously including bsd.port.options.mk.
- Remove sed calls and patches related to the libssh_threads. I fixed some
of the problems a few releases ago upstream, and the things I've removed
now just look unnecessary.
PR: 187595
Approved by: fluffy (implicit, and 230 days of timeout)
MFH: 2014Q4
Security: f8c88d50-5fb3-11e4-81bd-5453ed2e2b49
Bump PORTREVISION on more ports that depend on libgcrypt after the update
in r363436 and remove the UPDATING entry because it did not guarantee
that all ports were updated nor that they were updated in the right order.
Also remove libgcrypt.la again.
PR: 192342
Approved by: portmgr (implicit, bump unstaged ports)
- Install a static version of the library [1]
- Fix slow response in Remmina SSH [2]
- Remove MD5 checksum from distinfo
PR: ports/151653 [1]
Submitted by: Ronald F.Guilmette <rfg AT tristatelogic.com> [1]
Obtained from: libssh git [2]
