non port: security/openssh-portable/files/openssh.in |
Number of commits found: 20 |
Monday, 7 Mar 2022
|
23:02 Bryan Drewery (bdrewery)
security/openssh-portable: Add comment in openssh.in about host keys
Commit ae66cffc19f added some rc vars to allow disabling host keys.
The naming caused some confusion. Attempt to address that with a
comment since these are not documented anywhere else.
PR: 202169
21cedc6 |
Thursday, 3 Mar 2022
|
19:37 Bryan Drewery (bdrewery)
security/openssh-portable: Tweak new rc var names
Commit ae66cffc19f357cbd5 added new rc vars to control generating of
host keys [1]. Rename these to more closely match the base version
before it becomes widely adopted.
PR: 202169 [1]
PR: 209948 [FYI]
1249b09 |
19:25 Bryan Drewery (bdrewery)
security/openssh-portable: Fix subtle rc script problem.
Invoking 'run_rc_command' taints '$rc_var' with 'keygen' which blocks further
processing for something like openssh_oomprotect. Note that openssh_oomprotect
is broken in rc.subr until it learns to read a pidfile.
ad60ad3 |
19:25 Bryan Drewery (bdrewery)
security/openssh-portable: Update to 8.9p1
- Unbreak GSSAPI [1]
- rc.d/openssh: Allow modifying host key generation [2]
Changes: https://www.openssh.com/txt/release-8.9
PR: 259909 [1]
PR: 202169 [2]
Submitted by: Rick Miller [1]
Submitted by: Chad Jacob Milios [2]
ae66cff |
Tuesday, 6 Apr 2021
|
14:31 Mathieu Arnold (mat)
all: Remove all other $FreeBSD keywords.
135fdee |
Thursday, 24 Sep 2015
|
21:54 bdrewery
Stop trying to create the RSA protocol 1 key from the rc.d file. It is no
longer supported by default since 7.0. [1]
I do plan to make this configurable based on PR 202169 [2] soon.
PR: 202792 [1]
PR: 202169 [2]
Submitted by: chrysalis@chrysalisnet.org [1]
|
Saturday, 21 Mar 2015
|
19:28 bdrewery
Fix incorrect reference to ETCSSH from r381709
|
Friday, 3 Oct 2014
|
19:23 bdrewery
Support multiple ListenAddress ports
Reported by: rustamabd@gmail.com
|
Wednesday, 5 Feb 2014
|
03:06 bdrewery
- Fix RC script
Pointyhat to: bdrewery
Reported by: Kenta S. <kentas@hush.com>
|
01:40 bdrewery
- Update to 6.5
ChangeLog: http://www.openssh.org/txt/release-6.5
- Update X509 patch to 7.8
- Update LIB_DEPENDS to new format
- Revert r328706 and re-enable privilege separation sandboxing by default
as the issue causing crashes has been fixed upstream
- capsicum(4) is now enabled upstream. A local patch is added to fix an issue
with it [1]
- KERB_GSSAPI is marked BROKEN. It does not build.
This patch lacks an upstream and I have no way to test it. It needs
a non-trivial amount of refactoring for 6.5 as the key handling API
has changed quite a bit.
Submitted by: pjd@ [1]
|
Saturday, 22 Jun 2013
|
15:11 bdrewery
- In rc script, be consistent in reload and check for and generate keys
if needed, as well as checking for port collision with base sshd.
Reported by: delphij
|
Wednesday, 17 Apr 2013
|
00:35 bdrewery
- Remove compatibiliy for FreeBSD <4.x
* /var/empty has been in hier(7) since 4.x
* User sshd has been in base since 4.x
* Simplify a patch for realhostname_sa(3) usage
- Remove SUID_SSH - It was removed from ssh in 2002
- Fix 'make test'
- Add some hints into the patches on where they came from
- Mirror all patches
- Move LPK patch out of files/
- Remove the need for 2 patches
* Removal of 'host-key check-config' in install phase
* Adding -lutil
- Add SCTP support [1]
- Remove FILECONTROL as it has not been supported since the 5.8
update
- Replace tab with space pkg-descr
- Remove default WRKSRC
- Add 'configtest' command to rc script
- Mark X509 broken with other patches due to PATCH_DIST_STRIP=-p1
PR: ports/174570 [1]
Submitted by: oleg <proler@gmail.com> [1]
Obtained from: https://bugzilla.mindrot.org/show_bug.cgi?id=2016 (upstream) [1]
Feature safe: yes
|
Sunday, 24 Jun 2012
|
22:49 dougb
Add KEYWORD: shutdown
Simplify some code
Fix an error message
|
17:51 sunpoet
- Fix ECDSA key generation in openssh rc.d script
- Bump PORTREVISION for package change
Submitted by: J. Hellenthal <jhellenthal@dataix.net>
|
Saturday, 14 Jan 2012
|
08:57 dougb
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
|
Friday, 21 Oct 2011
|
16:18 flo
- update to 5.8p2 [1]
- fix Kerberos knob [2]
- fix build on 9.0 [3]
- fix deinstall with various knobs [4]
- fix LPK knob [5]
PR: ports/161818 [1], ports/144597 [2], ports/160389 [3]
ports/150493, ports/156926 [4], ports/155456 [5]
Submitted by: "Grzegorz Blach" <magik@roorback.net> [1], [2], [4], [5]
pluknet [3]
Reported by: Jonathan <lordsith49@hotmail.com> [2]
Kevin Thompson <antiduh@csh.rit.edu> [4]
Alexey Remizov <alexey@remizov.org> [5]
|
Saturday, 27 Mar 2010
|
00:15 dougb
Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr#
|
Friday, 18 Sep 2009
|
14:05 pav
- Unbreak KERBEROS option
- Add option for OpenBSD support
- Fix crash in sftp listing
PR: ports/138409 (cumulative patch)
Submitted by: Denis Barov <dindin@dindin.ru> (maintainer)
Feature safe: yes
|
Tuesday, 21 Feb 2006
|
19:28 mnag
- Fix order in rc.d script. Because of pidfile are empty, reload [2] and restart
[1]
commands kill all connections.
- Separate keygen part and create keygen command.
- Bump PORTREVISION
PR: 93228 [1]
Reported by: DanGer on #bsdports [2]
|
Tuesday, 7 Feb 2006
|
20:07 mnag
- Update to 4.3p1
- Use DISTVERSION
- Add most configuration in OPTIONS
- Enable support to libedit in sftp [1]
- Add OPTIONS to HPN patches [2]
- Add new rc.d script [3]
- New rc.d script are responsible to check configuration and create host keys
- Using USE_RC_SUBR
- Modify pkg-message to reflect new rc.d script
- Fix pkg-plist
Reviewd by: dougb [3]
Submitted by: vs [1], brooks [2]
Tested by: me, John E Hein
|
Number of commits found: 20 |