notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
This referral link gives you 10% off a Fastmail.com account and gives me a discount on my Fastmail account.

Get notified when packages are built

A new feature has been added. FreshPorts already tracks package built by the FreeBSD project. This information is displayed on each port page. You can now get an email when FreshPorts notices a new package is available for something on one of your watch lists. However, you must opt into that. Click on Report Subscriptions on the right, and New Package Notification box, and click on Update.

Finally, under Watch Lists, click on ABI Package Subscriptions to select your ABI (e.g. FreeBSD:14:amd64) & package set (latest/quarterly) combination for a given watch list. This is what FreshPorts will look for.

non port: security/openssh-portable/Makefile

Number of commits found: 344 (showing only 100 on this page)

«  1 | 2 | 3 | 4  »  

Wednesday, 11 Nov 2015
18:04 bdrewery search for other commits by this committer
Update advice to disable ChallengeResponseAuthentication for key usage.

PR:		204475
Reported by:	Mark.Martinec@ijs.si
Original commitRevision:401289 
Thursday, 15 Oct 2015
14:55 mat search for other commits by this committer
Drop 8 support.

With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3694
Original commitRevision:399346 
Thursday, 24 Sep 2015
21:54 bdrewery search for other commits by this committer
Stop trying to create the RSA protocol 1 key from the rc.d file.  It is no
longer supported by default since 7.0. [1]

I do plan to make this configurable based on PR 202169 [2] soon.

PR:		202792 [1]
PR:		202169 [2]
Submitted by:	chrysalis@chrysalisnet.org [1]
Original commitRevision:397771 
Tuesday, 25 Aug 2015
03:59 bdrewery search for other commits by this committer
Fix patch from r395182 on head. The patch(1) command works fine on 8.4
and 9.3 but not head with this patch.
Original commitRevision:395214 
Monday, 24 Aug 2015
18:51 bdrewery search for other commits by this committer
Apply upstream fix for 'HostkeyAlgorithms +' support.
Original commitRevision:395182 
Friday, 21 Aug 2015
21:51 bdrewery search for other commits by this committer
Update to 7.1p1

Changes: http://www.openssh.com/txt/release-7.1
Original commitRevision:394995 
Tuesday, 18 Aug 2015
15:42 bdrewery search for other commits by this committer
- Update to OpenSSH 7.0p1
- Update X509 patch to 8.5

Changes: http://www.openssh.com/txt/release-7.0
Original commitRevision:394608 
Monday, 27 Jul 2015
18:47 bdrewery search for other commits by this committer
Add upstream fix to address CVE-2015-5600 for MaxAuthTries bypass.

Security:	5b74a5bc-348f-11e5-ba05-c80aa9043978
Original commitRevision:393004 
18:41 bdrewery search for other commits by this committer
Fix accidental revert of PermitRootLogin default to NO.

This was due to the patch not being needed in the snapshot version
which I based the 6.9 update off of. The default is changed in
the upcoming 7.0 release
Original commitRevision:393002 
18:30 bdrewery search for other commits by this committer
- Update to 6.9p1
- Update X509 patch to 8.4

Changes:	http://www.openssh.com/txt/release-6.9
Original commitRevision:392998 
Friday, 24 Jul 2015
17:01 bdrewery search for other commits by this committer
Use new USES=libedit
Original commitRevision:392830 
Wednesday, 24 Jun 2015
19:35 bdrewery search for other commits by this committer
Support changed ETCDIR in pkg-plist
Original commitRevision:390514 
18:38 bdrewery search for other commits by this committer
Allow user overriding ETCDIR
Original commitRevision:390512 
Tuesday, 2 Jun 2015
15:00 bdrewery search for other commits by this committer
Add openssh-portable-devel which is based on the upstream snapshots for staging
and testing.

Its initial version is 20150602 which is nearly the upcoming 6.9 version.
Original commitRevision:388363 
Saturday, 16 May 2015
16:28 bdrewery search for other commits by this committer
Avoid a potential read overflow. This was not deemed a security issue by
upstream; it was fixed upstream comprehensively a few weeks ago in
77199d6ec8986d470487e66f8ea8f4cf43d2e20c.

PR:		200241
Patch by:	Hanno Bock <hanno@hboeck.de>
Obtained from:	http://www.openwall.com/lists/oss-security/2015/05/16/3
Original commitRevision:386554 
Thursday, 14 May 2015
10:15 mat search for other commits by this committer
MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight
Original commitRevision:386312 
Wednesday, 6 May 2015
18:39 bdrewery search for other commits by this committer
Fix clients getting 'Bad packet length' and 'Disconnecting: Packet corrupt'
when the NONECIPHER option is selected but not the HPN option.  The server
banner was improperly sending a NULL byte after the newline causing confusion
on the client.  This was an error in my own modifications to the HPN patch
in r383231.

This may have occurred with stale builds as well, such as running
'make configure' then 'portsnap update' and then 'make build'.

Pointyhat to:	bdrewery
Reported by:	many
PR:		199352
Original commitRevision:385541 
Tuesday, 14 Apr 2015
16:42 bdrewery search for other commits by this committer
Replace the TTSH patch from r383618 with the one that upstream took.

Obtained from upstream d8f391caef623
Original commitRevision:384006 
Thursday, 9 Apr 2015
20:57 bdrewery search for other commits by this committer
Cleanup some unneeded patches.

1. There's no need to patch the xauth(1) location as the OpenSSH build already
   does so based on the --with-xauth path provided. It also updates manpages.
2. Don't modify manpage for shosts location as it was wrong. The proper
   LOCALBASE path is now used due to OpenSSH's build already handling it
   properly.
3. Remove confusing UsePrivilegeSeparation change in sshd_config. The default
   upstream is to have it disabled by default. The sshd_config line is in
   upstream to enable it by default in new installations. We always enable
   it though. So remove the sshd_config change which makes it look like
   we don't use it; it was not a needed difference with upstream.

From discussion with:	TJ <tj@mrsk.me>
Original commitRevision:383678 
20:19 bdrewery search for other commits by this committer
Limit the TTSSH bug fix in r383618 to only versions that have it.

Submitted by:	IWAMOTO Kouichi <sue@iwmt.org>
Original commitRevision:383675 
02:33 bdrewery search for other commits by this committer
Fix TTSSH (Tera Type/Term) client crash:

  Unexpected SSH2 message(80) on current stage(6)

This patch was submitted upstream. The client has fixed it in their SVN [1][2]
but not yet released a fixed build.

[1] http://en.sourceforge.jp/ticket/browse.php?group_id=1412&tid=35010
[2] http://en.sourceforge.jp/projects/ttssh2/scm/svn/commits/5829
Original commitRevision:383618 
01:49 bdrewery search for other commits by this committer
Remove debugging leftover in release.

  error: mm_request_receive: socket closed

Obtained from:	Upstream c7fe79ed7db427f1474e72b9f8b465901d61d3f6
Original commitRevision:383616 
Saturday, 4 Apr 2015
17:16 bdrewery search for other commits by this committer
- Update to 6.8p1
- Fix 'make test'
- HPN:
  - NONECIPHER is no longer default. This is not default in base and should not
    be default here as it introduces security holes.
  - HPN: I've audited the patch and included it in the port directory for
    transparency. I identified several bugs and submitted them to the new
    upstream: https://github.com/rapier1/openssh-portable/pull/2
  - HPN: The entire patch is now ifdef'd to ensure various bits are properly
    removed depending on the OPTIONS selected.
  - AES_THREADED is removed. It has questionable benefit on modern HW and is not
    stable.
  - The "enhanced logging" was removed from the patch as it is too
    intrusive and difficult to maintain in the port.
  - The progress meter "peak throughput" patch was removed.
  - Fixed HPN version showing in client/server version string when HPN
    was disabled in the config.
- KERB_GSSAPI is currently BROKEN as it does not apply.
- Update X509 to 8.3

Changelog: http://www.openssh.com/txt/release-6.8
Original commitRevision:383231 
Thursday, 2 Apr 2015
02:22 bdrewery search for other commits by this committer
Remove unused variable PRECIOUS
Original commitRevision:382980 
Wednesday, 1 Apr 2015
01:04 bdrewery search for other commits by this committer
Make the check added in 2013 in r330200 for a bad ECDSA key actually work.
Original commitRevision:382887 
Tuesday, 31 Mar 2015
19:07 bdrewery search for other commits by this committer
Remove useless IGNORE for TCP_WRAPPERS and PAM.

TCP_WRAPPERS: /usr/include/tcpd.h is always installed by the base system.
              It is only libwrap.so that is conditional on WITH_TCP_WRAPPERS.

PAM:          /usr/include/security/pam_modules.h is always installed.

This fixes FreshPorts claiming this port is ignored.
Original commitRevision:382859 
Sunday, 29 Mar 2015
04:17 bdrewery search for other commits by this committer
Make the VersionAddendum fix use the proper default.

Once I ran into the X509 issue previously I failed to retest that the patch
worked.

PR:		193127
Original commitRevision:382566 
Wednesday, 25 Mar 2015
08:30 marino search for other commits by this committer
security category: Remove $PTHREAD_LIBS

approved by:	PTHREAD blanket
Original commitRevision:382200 
Monday, 23 Mar 2015
04:23 bdrewery search for other commits by this committer
Stop forcing the port version string into the server banner.

The port now uses VersionAddendum in the sshd_config to allow overriding
this value. Using "none" allows disabling the default of the port
version string. The default is kept to show the port version string to
remain close to the base version.

Support for the client VersionAddendum may be added soon as well to better
match base and not give surprises when switching from base to the port.

PR:		193127
Requested by:	many, including myself when this was broken years ago.
Original commitRevision:381981 
Saturday, 21 Mar 2015
19:28 bdrewery search for other commits by this committer
Fix incorrect reference to ETCSSH from r381709
Original commitRevision:381823 
Friday, 20 Mar 2015
07:07 bdrewery search for other commits by this committer
Set proper ETCDIR. Mistake in r381709
Original commitRevision:381712 
02:43 bdrewery search for other commits by this committer
Remove remnants of OVERWRITE_BASE which was removed in r376306
Original commitRevision:381709 
Monday, 5 Jan 2015
23:21 bdrewery search for other commits by this committer
Fix application of GSSAPI patch when using HPN. It applies fine if done after
HPN.

Reported by:	gwollman
Original commitRevision:376373 
16:13 bdrewery search for other commits by this committer
Mark OVERWRITE_BASE as IGNORE.

Keep it as an option as otherwise the user won't be notified that
their configuration is wrong and it will just install to PREFIX
instead, which would be surprising.
Original commitRevision:376306 
Wednesday, 17 Dec 2014
02:34 bdrewery search for other commits by this committer
- Fix HPN patches for 6.7p1
- Add back HPN and NONECIPHER for the default options and bump PORTREVISION
  due to this.
Original commitRevision:374833 
Tuesday, 16 Dec 2014
21:44 bdrewery search for other commits by this committer
- Unbreak KERB_GSSAPI option by using Debian's patch.

  I am serving the patch exactly as-is from their site. Obtained from:
 
http://sources.debian.net/data/main/o/openssh/1:6.7p1-3/debian/patches/gssapi.patch
Original commitRevision:374825 
21:29 bdrewery search for other commits by this committer
Unmark X509 option as BROKEN after fixed in r374821
Original commitRevision:374823 
20:14 bdrewery search for other commits by this committer
- Update X509 patch to 8.2 which now supports OpenSSH 6.7p1
  No PORTREVISION bump since it was BROKEN before with X509.
Original commitRevision:374821 
Monday, 17 Nov 2014
18:08 bdrewery search for other commits by this committer
- Update to 6.7p1.

  Several patches do not currently apply. Use security/openssh-portable66 for:
  HPN, NONECIPHER, KERB_GSSAPI, X509.

- Add a TCP_WRAPPER patch to re-enable support after it was removed upstream.
Original commitRevision:372676 
Monday, 20 Oct 2014
10:09 marino search for other commits by this committer
Add USES=alias to several ports

Alias is a new USES tool that allows DragonFly to masquerade as FreeBSD
by setting CFLAGS+= -D__FreeBSD__.  For some ports, this fixes the build
without the need for additional patches.

Approved by:	portmgr (bapt, blanket)
Original commitRevision:371252 
Tuesday, 7 Oct 2014
00:48 bdrewery search for other commits by this committer
Note my intentions with OVERWRITE_BASE
Original commitRevision:370264 
Friday, 3 Oct 2014
19:31 bdrewery search for other commits by this committer
- Mark OVERWRITE_BASE and security/openssh-portable-base as DEPRECATED.
  These will be removed on January 1 2015.

  Really ports should not be touching the base system at all.

  This option is a big foot-shoot problem:

  1. Recent versions of FreeBSD such as 9.3, 10.0, 10.1+, now remove all ssh
     files from /usr if you 'make delete-old' with WITHOUT_SSH. This results in
     removing the overwrite base files.
  2. Uninstalling the package leaves the system with no ssh.
  3. Running installworld without WITHOUT_SSH results in overwriting the
     package, or giving false-positive 'pkg check -s' errors.
  4. The port fails to pass QA checks because it removes system files.
Original commitRevision:369933 
19:23 bdrewery search for other commits by this committer
Support multiple ListenAddress ports

Reported by:	rustamabd@gmail.com
Original commitRevision:369931 
Thursday, 24 Jul 2014
18:34 tijl search for other commits by this committer
net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
Original commitRevision:362835 
Thursday, 24 Apr 2014
01:54 bdrewery search for other commits by this committer
- Update to "6.6.1" [1]
- Switch to using @sample keyword, fixing orphans.

Upstream note on "6.6.1" [1]:

  OpenSSH 6.5 and 6.6 sometimes encode a value used in the curve25519
  key exchange incorrectly, causing connection failures about 0.2% of
  the time when this method is used against a peer that implements
  the method properly.

  Fix the problem and disable the curve25519 KEX when speaking to
  OpenSSH 6.5 or 6.6. This version will identify itself as 6.6.1
  to enable the compatability code.

[1] https://lists.mindrot.org/pipermail/openssh-unix-dev/2014-April/032494.html
Original commitRevision:351982 
01:04 bdrewery search for other commits by this committer
Fix minor plist issues from check-plist
Original commitRevision:351981 
Friday, 11 Apr 2014
03:38 bdrewery search for other commits by this committer
- Update GSS API Key Exchange patch with working version.

PR:		ports/183006
Submitted by:	Garrett Wollman (via email)
Tested by:	Garrett Wollman
Original commitRevision:350880 
Sunday, 16 Mar 2014
17:35 bdrewery search for other commits by this committer
- Update to 6.6
- Capsicum patch no longer needed
- Update X509 patch to 7.9

Changelog: http://www.openssh.org/txt/release-6.6
Original commitRevision:348420 
Sunday, 2 Mar 2014
08:43 bdrewery search for other commits by this committer
- Fix build with HEIMBAL_BASE

PR:		ports/186830
Reported by:	Robert Simmons <rsimmons0@gmail.com>
Original commitRevision:346742 
Wednesday, 5 Feb 2014
03:06 bdrewery search for other commits by this committer
- Fix RC script

Pointyhat to:	bdrewery
Reported by:	Kenta S. <kentas@hush.com>
Original commitRevision:342628 
01:40 bdrewery search for other commits by this committer
- Update to 6.5
  ChangeLog: http://www.openssh.org/txt/release-6.5

- Update X509 patch to 7.8
- Update LIB_DEPENDS to new format
- Revert r328706 and re-enable privilege separation sandboxing by default
  as the issue causing crashes has been fixed upstream
- capsicum(4) is now enabled upstream. A local patch is added to fix an issue
  with it [1]
- KERB_GSSAPI is marked BROKEN. It does not build.
  This patch lacks an upstream and I have no way to test it. It needs
  a non-trivial amount of refactoring for 6.5 as the key handling API
  has changed quite a bit.

Submitted by:	pjd@ [1]
Original commitRevision:342618 
Sunday, 2 Feb 2014
15:47 bdrewery search for other commits by this committer
- License is all of BSD2,BSD3,MIT,public domain,BSD-Style,BEER-WARE,
  "any purpose with notice intact",ISC-Style. The framework does not
  support such a case easily.
  See http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/LICENCE?rev=HEAD
Original commitRevision:342318 
Tuesday, 12 Nov 2013
15:35 bdrewery search for other commits by this committer
- Fix packaging when not using HPN patches

PR:		ports/183895
Reported by:	mat
Original commitRevision:333580 
Friday, 8 Nov 2013
12:41 bdrewery search for other commits by this committer
- Update to 6.4p1

This release fixes a security bug:

 * sshd(8): fix a memory corruption problem triggered during rekeying
   when an AES-GCM cipher is selected. Full details of the vulnerability
   are available at: http://www.openssh.com/txt/gcmrekey.adv

Security:	http://www.openssh.com/txt/gcmrekey.adv
Original commitRevision:333215 
Sunday, 13 Oct 2013
02:20 bdrewery search for other commits by this committer
- Update to 6.3p1
  Changelog: http://www.openssh.org/txt/release-6.3
- Use options helpers where possible
- Use upstream patch mirror for x509 and HPN
- Update HPN patch to v14 and use upstream version
- Add option NONECIPHER to allow disabling NONE in HPN patch
- Update x509 patch from 7.4.1 to 7.6
- Add support for LDNS and enable by it and VerifyHostKeyDNS/SSHFP by default.
  See
http://lists.freebsd.org/pipermail/freebsd-security/2013-September/007180.html
  which describes this change, but is supported on releases before 10 as well
  with LDNS option.
- Update SCTP to patchlevel 2329
- Update recommendation on secure usage of SSH
- Add pkg-message warning about ECDSA key possibly being incorrect due to
  previously being written as DSA by the rc script and fixed in r299902 in
  2012
Original commitRevision:330200 
Monday, 7 Oct 2013
10:41 bdrewery search for other commits by this committer
- Now that :DEFAULT can be used in PATCH_SITES (fixed in 329679),
  depend on the upstream mirror for the x509 patch and my mirror
  as a fallback
Original commitRevision:329681 
Sunday, 6 Oct 2013
17:24 bdrewery search for other commits by this committer
Remove useless -c flag
Original commitRevision:329605 
Thursday, 3 Oct 2013
23:45 bdrewery search for other commits by this committer
Perl has not been needed as a direct dependency since 6.0
Original commitRevision:329250 
22:38 bdrewery search for other commits by this committer
- Fix KERB_GSSAPI incorrectly using a predictable cache file.
  This was due to a mistake in r319062 when porting the patch from 5.8 to 6.2

  There is no active upstream for this patch. For reference here are the
  changes made in the patch:

  --- -	2013-10-03 11:07:21.262913573 -0500
  +++ /tmp/zdiff.XXXXXXXXXX.STScEeSI	2013-10-03 11:07:21.000000000 -0500
  @@ -183,7 +183,7 @@
	  if (ret < 0 || (size_t)ret >= sizeof(ccname))
		  return ENOMEM;

  -+#ifdef USE_CCAPI
  ++#ifndef USE_CCAPI
	  old_umask = umask(0177);
	  tmpfd = mkstemp(ccname + strlen("FILE:"));
	  oerrno = errno;

PR:		ports/180419
Reported by:	Garrett Wollman <wollman@khavrinen.csail.mit.edu>
Original commitRevision:329246 
13:36 bdrewery search for other commits by this committer
Mark IGNORE if KERB_GSSAPI incorrectly selected
Original commitRevision:329189 
12:57 bdrewery search for other commits by this committer
Update descriptions to match current conventions
Original commitRevision:329176 
Sunday, 29 Sep 2013
15:07 bdrewery search for other commits by this committer
- Copy base r251088 over (which removes a patch) and disable default sandbox
  privilege separation as it causes crashes when using AES crypto devices.
  This now uses 'yes' for UsePrivilegeSeparation instead of 'sandbox' by
  default

Reminded by:	Garrett Wollman
Original commitRevision:328706 
14:54 bdrewery search for other commits by this committer
Fix sshd.8 referring to LOCALBASE with OVERWRITE_BASE
Original commitRevision:328704 
14:53 bdrewery search for other commits by this committer
Don't extract mtree with OVERWRITE_BASE
Original commitRevision:328703 
14:51 bdrewery search for other commits by this committer
Convert to stagedir
Original commitRevision:328701 
Friday, 20 Sep 2013
15:58 bdrewery search for other commits by this committer
- Add NO_STAGE until validated to be safe for upcoming staging support
Original commitRevision:327710 
Tuesday, 20 Aug 2013
11:43 az search for other commits by this committer
- Convert to new perl5 framework

Approved by:	bdrewery@ (maintainer)
Original commitRevision:325040 
Friday, 5 Jul 2013
18:27 bdrewery search for other commits by this committer
Add an openssh-portable-base slave port to install with OVERWRITE_BASE
Original commitRevision:322345 
12:46 bdrewery search for other commits by this committer
Add LICENSE
Original commitRevision:322321 
Saturday, 22 Jun 2013
15:11 bdrewery search for other commits by this committer
- In rc script, be consistent in reload and check for and generate keys
  if needed, as well as checking for port collision with base sshd.

Reported by:	delphij
Original commitRevision:321578 
Saturday, 25 May 2013
16:44 bdrewery search for other commits by this committer
- Update and re-add KERB_GSSAPI gsskex patch.
  I did very minor porting of the upstream patch to make
  it apply.
  Note that this currently does not build with base heimdal, but
  does build with port MIT or port HEIMDAL.
- Bump PORTREVISION in case someone built the update, expecting
  this option to work and now have a broken ssh.

PR:		ports/178885
Reported by:	Garrett Wollman <wollman@csail.mit.edu>
Original commitRevision:319062 
Thursday, 23 May 2013
00:30 bdrewery search for other commits by this committer
- Fix sshd crash when not using HPN
  This was due to not including the canohost.h header for our
  base customization to respect class login restrictions. I had
  missed this as I was only tested with the default (HPN enabled)
  which already was including this header.

Reported by:	runelind in ##freenode
Tested by:	runelind, myself
Reported by:	Krzysztof Stryjek
Original commitRevision:318808 
Tuesday, 21 May 2013
22:29 bdrewery search for other commits by this committer
Mark BROKEN as I have received 2 separate reports
of crashing.
Original commitRevision:318727 
Friday, 17 May 2013
19:47 bdrewery search for other commits by this committer
- Update to 6.2p2

- The LPK patch has been updated but is obsolete, deprecated and
  untested. It has been replaced by AuthorizedKeysCommand
- The upstream HPN's last update was for 6.1 and is mostly
  abandoned. The patch has had bugs since 5.9. I have reworked
  it and split into into HPN and AES_THREADED options. The
  debugging/logging part of the patch is incomplete. I may
  change the patch to more closely match our base version
  eventually.
- The KERB_GSSAPI option has been removed as the patch has not
  been updated by upstream since 5.7
- sshd VersionAddendum is currently not working as intended;
  it will be fixed later to allow removing the port/pkg version.
- Update our patchset to match latest base version
- Bring in ssh-agent -x support from base
- I incrementally updated the port from 5.8 up to 6.2p2 along
  with patches. You can find all of the versions at
  https://github.com/bdrewery/openssh

Changes:
    http://www.openssh.com/txt/release-5.9
    http://www.openssh.org/txt/release-6.0
    http://www.openssh.org/txt/release-6.1
    http://www.openssh.org/txt/release-6.2
    http://www.openssh.org/txt/release-6.2p2
Original commitRevision:318400 
13:56 bdrewery search for other commits by this committer
- Remove CHROOT option and patch. ChrootDirectory was added in 5.0
  to achieve the same thing.
Original commitRevision:318386 
Thursday, 2 May 2013
02:03 bdrewery search for other commits by this committer
Fix xauth and ssh-askpass still being expected in /usr/X11R6

This was fixed in base in 2007 in r169966
Original commitRevision:317070 
Tuesday, 30 Apr 2013
13:13 bdrewery search for other commits by this committer
- Add support for base and port Heimdal for Kerberos

PR:		ports/167554
Requested by:	Volodymyr Kostyrko <c.kworr@gmail.com>
Original commitRevision:316929 
Wednesday, 17 Apr 2013
00:35 bdrewery search for other commits by this committer
- Remove compatibiliy for FreeBSD <4.x
  * /var/empty has been in hier(7) since 4.x
  * User sshd has been in base since 4.x
  * Simplify a patch for realhostname_sa(3) usage
- Remove SUID_SSH - It was removed from ssh in 2002
- Fix 'make test'
- Add some hints into the patches on where they came from
- Mirror all patches
- Move LPK patch out of files/
- Remove the need for 2 patches
  * Removal of 'host-key check-config' in install phase
  * Adding -lutil
- Add SCTP support [1]
- Remove FILECONTROL as it has not been supported since the 5.8
  update
- Replace tab with space pkg-descr
- Remove default WRKSRC
- Add 'configtest' command to rc script
- Mark X509 broken with other patches due to PATCH_DIST_STRIP=-p1

PR:		ports/174570 [1]
Submitted by:	oleg <proler@gmail.com> [1]
Obtained from:	https://bugzilla.mindrot.org/show_bug.cgi?id=2016 (upstream) [1]
Feature safe:	yes
Original commitRevision:315920 
Friday, 8 Feb 2013
00:03 bdrewery search for other commits by this committer
- Fix runtime crash on CURRENT due to import of NetBSD strnvis() [1]
  which differs in prototype from OpenBSD strnvis() [2]

[1] http://lists.freebsd.org/pipermail/freebsd-stable/2013-January/071703.html
[2] http://gnats.netbsd.org/44977

Submitted by:	dim
Original commitRevision:311891 
Wednesday, 5 Dec 2012
22:32 bdrewery search for other commits by this committer
- Update mirror site for HPN patch

Feature safe:	yes
Original commitRevision:308352 
Monday, 29 Oct 2012
15:08 bdrewery search for other commits by this committer
- Take maintainership

Feature safe:	yes
Original commitRevision:306620 
Saturday, 13 Oct 2012
17:13 eadler search for other commits by this committer
Convert to OptionsNG
Trim Headers

PR:	ports/172429
Submitted by:	Michael Gmelin <freebsd@grem.de>
Feature safe:	yes
Original commitRevision:305839 
Sunday, 5 Aug 2012
23:05 dougb search for other commits by this committer
When installing in the base, USE_RCORDER does the right thing without
all the gymnastics
Original commit
Sunday, 24 Jun 2012
17:51 sunpoet search for other commits by this committer
- Fix ECDSA key generation in openssh rc.d script
- Bump PORTREVISION for package change

Submitted by:   J. Hellenthal <jhellenthal@dataix.net>
Original commit
Wednesday, 13 Jun 2012
03:02 eadler search for other commits by this committer
Change HPN patch mirror location to one that works

PR:             ports/168306
Submitted by:   "Bryan Drewery" <bryan@shatow.net>
Original commit
Tuesday, 1 May 2012
09:56 sunpoet search for other commits by this committer
- Reset maintainership

PR:             ports/167423
Submitted by:   Grzegorz Blach <magik@roorback.net> (maintainer)
Original commit
Wednesday, 28 Mar 2012
18:04 scheidell search for other commits by this committer
- Perl only needed to build, not needed to run. remove PERL5_RUN from Makefile
- Bump PORTREVISION

PR:             ports/166413
Submitted by:   Gleb Smirnoff <glebius@cell.glebius.int.ru>
Approved by:    Grzegorz Blach <magik@roorback.net> (maintainer)
Feature safe:   yes
Original commit
Friday, 23 Dec 2011
12:52 scheidell search for other commits by this committer
- Add USE_PERL5_BUILD

PR:             ports/163414
Submitted by:   portmgr (pav)
Approved by:    gabor (mentor)
Original commit
12:24 scheidell search for other commits by this committer
- openssh-portable needs perl to build (reported by Gleb Smirnoff via mail)
- add ssh_engine.5 man page when openssh-portable WITH_X509 is turned on
(reported by John Hein via mail)

PR:             ports/163414
Submitted by:   Grzegorz Blach <magik@roorback.net>
Approved by:    gabor (mentor)
Original commit
Friday, 21 Oct 2011
16:18 flo search for other commits by this committer
- update to 5.8p2 [1]
- fix Kerberos knob [2]
- fix build on 9.0 [3]
- fix deinstall with various knobs [4]
- fix LPK knob [5]

PR:             ports/161818 [1], ports/144597 [2], ports/160389 [3]
                ports/150493, ports/156926 [4], ports/155456 [5]

Submitted by:   "Grzegorz Blach" <magik@roorback.net> [1], [2], [4], [5]
                pluknet [3]
Reported by:    Jonathan <lordsith49@hotmail.com> [2]
                Kevin Thompson <antiduh@csh.rit.edu> [4]
                Alexey Remizov <alexey@remizov.org> [5]
Original commit
Tuesday, 19 Jul 2011
02:05 stephen search for other commits by this committer
- Maintainer to magik@roorback.net

Approved by:    maho (mentor) and magik@roorback.net
Original commit
Wednesday, 13 Jul 2011
21:47 stephen search for other commits by this committer
- Add VersionAddendum support.
- Bump portrevision.

PR:             ports/142824
Submitted by:   Scot Hetzel <swhetzel@gmail.com>
Approved by:    gabor (mentor)
Original commit
Friday, 11 Mar 2011
17:11 skv search for other commits by this committer
Unbreak build with LPK option (broken after commit 1.674 in bsd.port.mk).
Original commit
Monday, 27 Dec 2010
09:58 ale search for other commits by this committer
Remove OpenSC support. This port should be updated to support PKCS#11.
Original commit
Sunday, 21 Nov 2010
23:48 rene search for other commits by this committer
- Fix optional dependency on security/heimdal
- Bump PORTREVISION
PR:             ports/152029
Submitted by:   Joerg Pulz [Joerg.Pulz frm2.tum.de]
Approved by:    Ryan Steinmetz <rpsfa@rit.edu> (maintainer of net/freeradius*)
                girgen (maintainer of databases/postgresql*-server,
                        14 day timeout)
Original commit
Tuesday, 31 Aug 2010
02:46 pgollucci search for other commits by this committer
Add the sftpfilecontrol patch as an OPTION (WITH_FILECONTROL)
See http://sftpfilecontrol.sourceforge.net/  for details.

PR:             ports/146338
Submitted by:   Steve Wills <steve@mouf.net>
Original commit
Sunday, 22 Aug 2010
23:20 linimon search for other commits by this committer
Reset dindin@dindin.ru due to maintainer-timeout and no response to email.

Hat:            portmgr
Original commit
Tuesday, 4 May 2010
09:14 pav search for other commits by this committer
- Annotate the combination of X509 and KERB_GSSAPI patches as broken

PR:             ports/142819
Submitted by:   Scot Hetzel <swhetzel@gmail.com>
Approved by:    maintainer timeout (1 month)
Original commit
Sunday, 18 Apr 2010
21:40 erwin search for other commits by this committer
Mark BROKEN on 9.x: does not build
Original commit
Saturday, 27 Mar 2010
06:14 dougb search for other commits by this committer
RC_SUBR_SUFFIX has not been needed for a long time now, all supported
versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh
appended to the script name.
Original commit

Number of commits found: 344 (showing only 100 on this page)

«  1 | 2 | 3 | 4  »