| Port details on branch 2025Q4 |
- openssh-portable The portable version of OpenBSD's OpenSSH
- 10.0.p1_3,1 security
 =0      10.0.p1_3,1Version of this port present on the latest quarterly branch. - Maintainer: bdrewery@FreeBSD.org
- Port Added: 2025-10-06 15:57:04
- Last Update: 2025-10-07 19:20:32
- Commit Hash: a5fa98f
- License: OPENSSH
- WWW:
- https://www.openssh.com/portable.html
- Description:
- OpenBSD's OpenSSH portable version
Normal OpenSSH development produces a very small, secure, and easy to maintain
version for the OpenBSD project. The OpenSSH Portability Team takes that pure
version and adds portability code so that OpenSSH can run on many other
operating systems (Unfortunately, in particular since OpenSSH does
authentication, it runs into a *lot* of differences between Unix operating
systems).
The portable OpenSSH follows development of the official version, but releases
are not synchronized. Portable releases are marked with a 'p' (e.g. 3.1p1).
The official OpenBSD source will never use the 'p' suffix, but will instead
increment the version number when they hit 'stable spots' in their development.
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - There is no configure plist information for this port.
- USE_RC_SUBR (Service Scripts)
-
- Dependency lines:
-
- openssh-portable>0:security/openssh-portable
- Conflicts:
- CONFLICTS:
- openssh-3.*
- ssh-1.*
- ssh2-3.*
- openssh-portable-devel
- CONFLICTS_INSTALL:
- openssh-portable-hpn
- openssh-portable-gssapi
- openssh-portable-x509
- To install the port:
- cd /usr/ports/security/openssh-portable/ && make install clean
- To add the package, run one of these commands:
- pkg install security/openssh-portable
- pkg install openssh-portable
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: openssh-portable
- Package flavors (<flavor>: <package>)
- default: openssh-portable
- hpn: openssh-portable-hpn
- gssapi: openssh-portable-gssapi
- distinfo:
- TIMESTAMP = 1759765953
SHA256 (openssh-10.0p1.tar.gz) = 021a2e709a0edf4250b1256bd5a9e500411a90dddabea830ed59cef90eb9d85c
SIZE (openssh-10.0p1.tar.gz) = 1972675
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- pkgconf>=1.3.0_1 : devel/pkgconf
- autoconf>=2.72 : devel/autoconf
- automake>=1.17 : devel/automake
- Library dependencies:
-
- libfido2.so : security/libfido2
- libldns.so : dns/ldns
- libedit.so.0 : devel/libedit
- There are no ports dependent upon this port
Configuration Options:- ===> The following configuration options are available for openssh-portable-10.0.p1_3,1:
BLACKLISTD=off: FreeBSD blacklistd(8) support
BSM=off: OpenBSM Auditing
DOCS=on: Build and/or install documentation
FIDO_U2F=on: FIDO/U2F support (security/libfido2)
HPN=off: HPN-SSH patch
KERB_GSSAPI=off: Kerberos/GSSAPI patch (req: GSSAPI)
LDNS=on: SSHFP/LDNS support
LIBEDIT=on: Command line editing via libedit
NONECIPHER=off: NONE Cipher support
PAM=on: Pluggable authentication module support
TCP_WRAPPERS=on: tcp_wrappers support
XMSS=off: XMSS key support (experimental)
====> Kerberos support: you can only select none or one of them
MIT=off: MIT Kerberos (security/krb5)
HEIMDAL=off: Heimdal Kerberos (security/heimdal)
HEIMDAL_BASE=off: Heimdal Kerberos (base)
===> Use 'make config' to modify these settings
- Options name:
- security_openssh-portable
- USES:
- alias autoreconf compiler:c11 cpe localbase ncurses pkgconfig ssl libedit
- pkg-message:
- For install:
- To enable this port, add openssh_enable="YES" in your rc.conf. To
prevent conflict with openssh in the base system add sshd_enable="NO"
in your rc.conf. Also you can configure openssh at another TCP port (via
sshd_config 'Port' and 'Listen' options or via 'openssh_flags'
variable in rc.conf) and run it in same time with base sshd.
'PermitRootLogin no' is the default for the OpenSSH port.
This now matches the PermitRootLogin configuration of OpenSSH in
the base system. Please be aware of this when upgrading your
OpenSSH port, and if truly necessary, re-enable remote root login
by readjusting this option in your sshd_config.
Users are encouraged to create single-purpose users with ssh keys, disable
Password authentication by setting 'PasswordAuthentication no' and
'ChallengeResponseAuthentication no', and to define very narrow sudo
privileges instead of using root for automated tasks.
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
10.0.p1_3,1
07 Oct 2025 19:20:32
 |
Bryan Drewery (bdrewery) |
security/openssh-portable: GC missed skip_dsa var.
(cherry picked from commit e2ea6753b2aee566d35bc911ebfac4af4e22e445)
(cherry picked from commit 848d7cf44c1e9950aba31231c6f0ef59a6ae32d6) |
10.0.p1_2,1
07 Oct 2025 19:20:30
|
Bryan Drewery (bdrewery) |
security/openssh-portable: Stop trying to generate DSA key.
DSA key support was removed in 10.0.
(cherry picked from commit 8a5ad92ecc597e3ec730f60f5f28df43e91604ba)
(cherry picked from commit 33e58a9f49f752cca72b73765cf9b525710fce5b) |
10.0.p1_2,1
06 Oct 2025 15:56:24
|
Bryan Drewery (bdrewery) |
security/openssh-portable: Fix gssapi build.
Debian updated their patches. Also mirror the patch while here.
(cherry picked from commit 8f4607278deeb9e12b2f444a478a488ac733af65) |
As an Amazon Associate I earn from qualifying purchases.