| Port details on branch 2024Q1 |
- openssh-portable The portable version of OpenBSD's OpenSSH
- 9.6.p1_1,1 security
 =0       9.6.p1_1,1Version of this port present on the latest quarterly branch. - Maintainer: bdrewery@FreeBSD.org
- Port Added: 2024-01-11 18:12:05
- Last Update: 2024-01-24 01:42:25
- Commit Hash: 0bcc128
- License: OPENSSH
- WWW:
- https://www.openssh.com/portable.html
- Description:
- OpenBSD's OpenSSH portable version
Normal OpenSSH development produces a very small, secure, and easy to maintain
version for the OpenBSD project. The OpenSSH Portability Team takes that pure
version and adds portability code so that OpenSSH can run on many other
operating systems (Unfortunately, in particular since OpenSSH does
authentication, it runs into a *lot* of differences between Unix operating
systems).
The portable OpenSSH follows development of the official version, but releases
are not synchronized. Portable releases are marked with a 'p' (e.g. 3.1p1).
The official OpenBSD source will never use the 'p' suffix, but will instead
increment the version number when they hit 'stable spots' in their development.
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - There is no configure plist information for this port.
- Dependency lines:
-
- openssh-portable>0:security/openssh-portable
- Conflicts:
- CONFLICTS:
- openssh-3.*
- ssh-1.*
- ssh2-3.*
- openssh-portable-devel
- CONFLICTS_INSTALL:
- openssh-portable-hpn
- openssh-portable-gssapi
- openssh-portable-x509
- To install the port:
- cd /usr/ports/security/openssh-portable/ && make install clean
- To add the package, run one of these commands:
- pkg install security/openssh-portable
- pkg install openssh-portable
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: openssh-portable
- Package flavors (<flavor>: <package>)
- default: openssh-portable
- hpn: openssh-portable-hpn
- gssapi: openssh-portable-gssapi
- distinfo:
- TIMESTAMP = 1706059638
SHA256 (openssh-9.6p1.tar.gz) = 910211c07255a8c5ad654391b40ee59800710dd8119dd5362de09385aa7a777c
SIZE (openssh-9.6p1.tar.gz) = 1857862
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- pkgconf>=1.3.0_1 : devel/pkgconf
- autoconf>=2.71 : devel/autoconf
- automake>=1.16.5 : devel/automake
- Library dependencies:
-
- libfido2.so : security/libfido2
- libldns.so : dns/ldns
- libedit.so.0 : devel/libedit
- There are no ports dependent upon this port
Configuration Options:- ===> The following configuration options are available for openssh-portable-9.6.p1_1,1:
BLACKLISTD=off: FreeBSD blacklistd(8) support
BSM=off: OpenBSM Auditing
DOCS=on: Build and/or install documentation
FIDO_U2F=on: FIDO/U2F support (security/libfido2)
HPN=off: HPN-SSH patch
KERB_GSSAPI=off: Kerberos/GSSAPI patch (req: GSSAPI)
LDNS=on: SSHFP/LDNS support
LIBEDIT=on: Command line editing via libedit
NONECIPHER=off: NONE Cipher support
PAM=on: Pluggable authentication module support
TCP_WRAPPERS=on: tcp_wrappers support
XMSS=off: XMSS key support (experimental)
====> Kerberos support: you can only select none or one of them
MIT=off: MIT Kerberos (security/krb5)
HEIMDAL=off: Heimdal Kerberos (security/heimdal)
HEIMDAL_BASE=off: Heimdal Kerberos (base)
===> Use 'make config' to modify these settings
- Options name:
- security_openssh-portable
- USES:
- alias autoreconf compiler:c11 cpe localbase ncurses pkgconfig ssl libedit
- pkg-message:
- For install:
- To enable this port, add openssh_enable="YES" in your rc.conf. To
prevent conflict with openssh in the base system add sshd_enable="NO"
in your rc.conf. Also you can configure openssh at another TCP port (via
sshd_config 'Port' and 'Listen' options or via 'openssh_flags'
variable in rc.conf) and run it in same time with base sshd.
'PermitRootLogin no' is the default for the OpenSSH port.
This now matches the PermitRootLogin configuration of OpenSSH in
the base system. Please be aware of this when upgrading your
OpenSSH port, and if truly necessary, re-enable remote root login
by readjusting this option in your sshd_config.
Users are encouraged to create single-purpose users with ssh keys, disable
Password authentication by setting 'PasswordAuthentication no' and
'ChallengeResponseAuthentication no', and to define very narrow sudo
privileges instead of using root for automated tasks.
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
9.6.p1_1,1
24 Jan 2024 01:42:25
 |
Bryan Drewery (bdrewery) |
security/openssh-portable: Fix KERB_GSSAPI build
(cherry picked from commit bb65ffae9e937ddb7f11c9cf683d98be502dcfc5) |
9.6.p1_1,1
11 Jan 2024 18:09:20
|
Bryan Drewery (bdrewery) |
security/openssh-portable: Update HPN patch.
- Mark GSSAPI build as broken while here.
(cherry picked from commit b3f86656fc67aa397f60747c85f7f7b967c3279d) |
9.6.p1_1,1
11 Jan 2024 18:09:14
|
Bryan Drewery (bdrewery)
Author: Bernard Spil |
security/openssh-portable: Fix blacklistd patch
(cherry picked from commit d820fcf123b40037884c06a94a42275934587a8f) |
As an Amazon Associate I earn from qualifying purchases.