12:52 scheidell 

- Add USE_PERL5_BUILD

PR:             ports/163414
Submitted by:   portmgr (pav)
Approved by:    gabor (mentor)

12:24 scheidell 

- openssh-portable needs perl to build (reported by Gleb Smirnoff via mail)
- add ssh_engine.5 man page when openssh-portable WITH_X509 is turned on
(reported by John Hein via mail)

PR:             ports/163414
Submitted by:   Grzegorz Blach <magik@roorback.net>
Approved by:    gabor (mentor)

16:18 flo 

- update to 5.8p2 [1]
- fix Kerberos knob [2]
- fix build on 9.0 [3]
- fix deinstall with various knobs [4]
- fix LPK knob [5]

PR:             ports/161818 [1], ports/144597 [2], ports/160389 [3]
                ports/150493, ports/156926 [4], ports/155456 [5]

Submitted by:   "Grzegorz Blach" <magik@roorback.net> [1], [2], [4], [5]
                pluknet [3]
Reported by:    Jonathan <lordsith49@hotmail.com> [2]
                Kevin Thompson <antiduh@csh.rit.edu> [4]
                Alexey Remizov <alexey@remizov.org> [5]

02:05 stephen 

- Maintainer to magik@roorback.net

Approved by:    maho (mentor) and magik@roorback.net

21:47 stephen 

- Add VersionAddendum support.
- Bump portrevision.

PR:             ports/142824
Submitted by:   Scot Hetzel <swhetzel@gmail.com>
Approved by:    gabor (mentor)

17:11 skv 

Unbreak build with LPK option (broken after commit 1.674 in bsd.port.mk).

09:58 ale 

Remove OpenSC support. This port should be updated to support PKCS#11.

23:48 rene 

- Fix optional dependency on security/heimdal
- Bump PORTREVISION
PR:             ports/152029
Submitted by:   Joerg Pulz [Joerg.Pulz frm2.tum.de]
Approved by:    Ryan Steinmetz <rpsfa@rit.edu> (maintainer of net/freeradius*)
                girgen (maintainer of databases/postgresql*-server,
                        14 day timeout)

02:46 pgollucci 

Add the sftpfilecontrol patch as an OPTION (WITH_FILECONTROL)
See http://sftpfilecontrol.sourceforge.net/  for details.

PR:             ports/146338
Submitted by:   Steve Wills <steve@mouf.net>

23:20 linimon 

Reset dindin@dindin.ru due to maintainer-timeout and no response to email.

Hat:            portmgr

09:14 pav 

- Annotate the combination of X509 and KERB_GSSAPI patches as broken

PR:             ports/142819
Submitted by:   Scot Hetzel <swhetzel@gmail.com>
Approved by:    maintainer timeout (1 month)

21:40 erwin 

Mark BROKEN on 9.x: does not build

06:14 dougb 

RC_SUBR_SUFFIX has not been needed for a long time now, all supported
versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh
appended to the script name.

16:43 amdmi3 

- Remove BROKEN on 8.x WITH_KERBEROS case. Builds fine on 8.0 and 9.0, i386 and
amd64
- While here, fix minor plist issue for WITH_X509 case

PR:             141679
Submitted by:   Denis Barov <dindin@dindin.ru> (maintainer)

08:08 lioux 

- Under OSVERSION >= 800000, only mark BROKEN if WITH_KERBEROS.
- The port links fine otherwise.

21:09 pav 

- Mark BROKEN on 8.X with Kerberos - does not link

Reported by:    pointyhat

18:44 pav 

- Revert USE_RC_SUBR change from last commit, it breaks OVERWRITE_BASE
- Add a hint to pkg-message about running this together with base sshd

PR:             ports/138943
Submitted by:   Denis Barov <dindin@yandex-team.ru> (maintainer)
Feature safe:   yes

14:05 pav 

- Unbreak KERBEROS option
- Add option for OpenBSD support
- Fix crash in sftp listing

PR:             ports/138409 (cumulative patch)
Submitted by:   Denis Barov <dindin@dindin.ru> (maintainer)
Feature safe:   yes

07:13 pav 

- Mark BROKEN on 8.X: does not link

Reported by:    pointyhat

14:52 nork 

Fix build error WITH_HPN.

PR:                     ports/135407
Submitted by:           maintainer implicit (already submitted)
Pointy hat to:          pgollucci

17:15 pgollucci 

- Fix the previous commit
  The patch file names for LPK were not updated completely in the Makefile

PR:             ports/135968
Submitted by:   Konstantin Kukushkin <dark@rambler-co.ru>
Approved by:    maintainer (implicit, shouyld have been in previous patch)

10:13 osa 

Fix build with WITH_LPK support for amd64 by change extra patches order.
Do not bump PORTREVISION.

Submitted by:   Fedor Dikarev aka fe at rambler dash co dot ru
Spotted by:     maxim
Approved by:    maintainer unavailable, i.e.
                $ whois dindin.ru | grep ^state
                state:      REGISTERED, NOT DELEGATED
PR:             amd64/134706

03:00 nork 

Fix HPN crash issue by using aes128-ctr, aes192-ctr and aes256-ctr.

Approved by:    pav

11:00 pav 

- Update to 5.2p1
- Assign maintainership to the submitter

PR:             ports/134160
Submitted by:   Denis Barov <dindin@dindin.ru>

06:01 sumikawa 

Fix several problems with OPENSSH_OVERWRITE_BASE=1.
- Empty dir handling
- rc.d installation
- prefix modification in manuals

From:           Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
PR:             ports/133412

17:41 pav 

- Reset long-term inactive maintainer

17:41 pav 

- Integrate x509 certificate patch (optional, default off) from
http://www.roumenpetrov.info/openssh/

PR:             ports/121438
Submitted by:   Dirk-Willem van Gulik <dirkx@webweaving.org>
Approved by:    maintainer timeout (mnag; 1 year)

17:33 pav 

- Add vendor patch for lpk patch that fixes runtime on amd64

PR:             ports/129092
Submitted by:   Jui-Nan Lin <jnlin@csie.nctu.edu.tw>
Approved by:    maintainer timeout (mnag; 4 months)

17:26 pav 

- Update to 5.1p1

PR:             ports/128679
Submitted by:   Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
Approved by:    maintainer timeout (mnag; 4 months)

13:03 skv 

Fix rootless build.

PR:             ports/126164
Submitted by:   skv
Approved by:    maintainer timeout (> 3 months)

06:18 rafan 

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:             126524 (obsoletes 52917)
Submitted by:   rafan
Tested on:      two pointyhat 7-amd64 exp runs (by pav)
Approved by:    portmgr (pav)

19:26 pav 

- Mark BROKEN after recent kerberos update

13:46 mnag 

- Update to 5.0p1
- Port LPK patch to 5.0p1 and add to files dir
- Remove USE_PERL_BUILD since doesn't need [1]
- Update KERB_GSSAPI to 5.0p1
- Update HPN patch to 5.0p1 13v3
- Respect LOCALBASE on configure_args of LPK [2]
- Change MASTER_SITE of snapshot
- portlint(1)

PR:             121826 [2]
Submitted by:   Andrew Kolchoogin <andrew___rinet.ru> [2]
Reported by:    Björn König <bkoenig___alpha-tierchen.d [1]

13:09 mnag 

- Update HPN patch to hpn12v20
- Bump PORTREVISION

Submitted by:   Ollivier Robert <roberto__keltia.freenix.fr>

12:41 mnag 

- Update gsskex patch to 20070927
- Update HPN patch to hpn12v19 [1]

Notified by:    ale [1]

06:00 edwin 

Remove always-false/true conditions based on OSVERSION 500000

01:18 mnag 

- Update to 4.7p1
- Update HPN patch to 4.7p1-hpn12v18
- Mark as BROKEN WITH_KERB_GSSAPI while developer release a new patch

15:40 mnag 

- Enable ssl-engine
- Update gsskex patch to 4.6p1-gsskex-20070312
- Update lpk patch to 4.6p1-0.3.9
- Update hpn patch to 4.6p1-hpn12v17
- Fix challenge-response issue
- Bump PORTREVISION

Reported by:    Stefan Lambrev [1], ale@ [1]

09:36 rafan 

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
  supports them.  This is determined by running ``configure --help'' in
  do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
  which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
  Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
  PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
  subdirectory detection.

PR:             ports/111470
Approved by:    portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by:      pointyhat exp run

22:13 mnag 

- Update OpenSSH to 4.6p1
- Update GSSKEX patch to 20061220
- Update HPN patch to hpn12v16
- Update LPK patch to 0.3.8

11:49 rafan 

- Use RC_SUBR_SUFFIX

Approved by:    mnag (maintainer)

18:58 ale 

Update HPN patch to v14 for openssh 4.5p1.

Approved by:    mnag

13:11 mnag 

- Update to 4.5p1
- patch-sshd.c unconditionally includes <gssapi.h>. Include "ssh-gss.h" instead.
[1]

PR:             104481 [1]
Submitted by:   Mark Andrews <Mark_Andrews___isc.org> [1]

13:27 mnag 

- Update HPN patch. Patch are renamed, the only content differences are two rows
now enclosed in an "else" block.

Submitted by:   ale
Approved by:    portmgr (erwin)

21:06 mnag 

- Add OPTION to enable Kerberos/GSSAPI patch [1]
- Add OPTION to enable LPK patch (ldap stored public key) [2]

PR:             86384 [1], 103399 [2]
Submitted by:   Garrett Wollman <wollman___khavrinen.csail.mit.edu> [1], Dmitriy
Kirhlarov <dkirhlarov___oilspace.com> [2]

13:53 mnag 

- Fix package creation. [1]
- Update HPN patch and remove IGNORE. [2]
- Bump PORTREVISION

PR:             103961
Submitted by:   Phil Oleson <oz___nixil.net> [1], ale [2]

19:37 mnag 

- Install ssh_config-dist and sshd_config-dist in OVERWRITE_BASE too.

02:15 mnag 

- Update to 4.4p1.
- Disable temporary HPN patch until HPN release new version.
- Fix rc.d script path in sshd.8
- Add FreeBSD-${PKGNAME} in SSH_VERSION and SSH_RELEASE like src does.
- Sync patches with src.

Security:       CVE-2006-4924, CVE-2006-5051

19:47 ale 

Update HPN-12 patch to version 8 (no functional changes,
only documentation changes and a small bug fix on option parsing).

Approved by:    mnag

12:49 simon 

Add optional OpenSC PIN patch which make it possible for OpenSSH to ask
for a PIN when using an OpenSC smartcard.

Approved by:            mnag (maintainer)
Patch obtained from:    http://bugzilla.mindrot.org/show_bug.cgi?id=608

20:10 mnag 

- Remove unecessary ?= in PKGNAMESUFFIX [1]
- Update HPN patch to hpn12. Now none cipher are configured in run time. [2]

Notified by:    Peter Losher <plosher___plosh.net> [1], Scott Larson
<stl___iowainteractive.com> [2]

16:56 ale 

Add support for smart cards.

Approved by:    maintainer

19:28 mnag 

- Fix order in rc.d script. Because of pidfile are empty, reload [2] and restart
[1]
  commands kill all connections.
- Separate keygen part and create keygen command.
- Bump PORTREVISION

PR:             93228 [1]
Reported by:    DanGer on #bsdports [2]

23:59 mnag 

Forget to add HPN patches.

23:55 mnag 

- Update to 4.3p2

20:07 mnag 

- Update to 4.3p1
- Use DISTVERSION
- Add most configuration in OPTIONS
- Enable support to libedit in sftp [1]
- Add OPTIONS to HPN patches [2]
- Add new rc.d script [3]
- New rc.d script are responsible to check configuration and create host keys
- Using USE_RC_SUBR
- Modify pkg-message to reflect new rc.d script
- Fix pkg-plist

Reviewd by:     dougb [3]
Submitted by:   vs [1], brooks [2]
Tested by:      me, John E Hein

20:04 mnag 

- Reorganize Makefile in preparation to update to 4.3p1
- Add one http in MASTER_SITES
- Update WWW

17:58 mnag 

Update my email

Approved by: pav (mentor)

12:36 garga 

- Pass maintainership to submitter, since he sent the last patch.

PR:             ports/85775
Submitted by:   Marcus Alves Grando <marcus@corp.grupos.com.br>

19:24 garga 

- Update to 4.2p1

PR:             ports/85578
Submitted by:   Marcus Grando <marcus@corp.grupos.com.br>

19:09 pav 

- Update to 4.1p1

PR:             ports/81948
Submitted by:   Daniel Gerzo <danger@rulez.sk>

21:31 pav 

- Don't specify --with-ssl-dir when using the system's OpenSSL

PR:             ports/79355
Submitted by:   Mark Andrews <Mark_Andrews@isc.org>

01:00 ahze 

- Update to 4.0p1

PR:             ports/79029
Submitted by:   Dimitry Andric <dimitry@andric.com>

05:26 dinoex 

- drop maintainership

04:43 dinoex 

- new option WITH_OPENSSH_CHROOT
Submitted by:   KANAI Makoto

11:35 dinoex 

- update to 3.9p1

set PORTVERSION 3.9.0.1 to avoid another
bump of PORTEPOCH if 3.9.1p1 come out.

- new option OPENSSH_SNAPSHOT

03:48 dinoex 

- bump PORTEPOCH
Reported by kriS

03:04 dinoex 

- update to 3.8.1p1

05:18 dinoex 

- force kerberos by option WITH_GSSAPI

19:56 dinoex 

- make PKGNAMESUFFIX more flexible

05:47 dinoex 

- add SIZE

12:32 dinoex 

- update to 3.8p1

10:45 dinoex 

- new option WITHOUT_KERBEROS

PR:             58156
Submitted by:   matt@peterson.org

14:16 dinoex 

- fix build with kerberos5 from base and missing libdes
- get rid of autoconf dependency

04:05 dinoex 

- fix spelling of gssapi

11:53 dinoex 

- add CONFLICTS
Submitted by:   eikemeier@fillmore-labs.com

03:52 dinoex 

- GSSAPI patch improved for kerbers5 and hemidal

Submitted by:   bg@sics.se

18:41 dinoex 

- cleanup GSSAPI option

18:13 dinoex 

- update to 3.7.1p2
more regressions tests successfull

02:42 dinoex 

- Security Fix in PAM handling
Obtained from:  des

17:08 dinoex 

- mark FORBIDDEN until fixed.

19:16 dinoex 

- Security Fix obtained from OpenBSD
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/buffer.c.diff?r1=1.18&r2=1.19

Submitted by:   ash@lab.poc.net

16:07 nectar 

Add Solar Designer's additional fixes to buffer management.

12:03 dinoex 

- Securitry Fix revision 2
http://www.openssh.com/txt/buffer.adv
Approved by:    lioux (portmgr)

12:43 nectar 

Do not record expanded size before attempting to reallocate associated
memory.

Obtained from:  OpenBSD

08:02 dinoex 

- use OPENSSLRPATH from bsd.openssl.mk
- strip CONFIGURE_ENV, LDFLAGS is set in bsd.openssl.mk

15:38 dinoex 

- use hook for bsd.openssl.mk

20:04 dinoex 

- Update to gssapi-20030430
Submitted by:   wollman@lcs.mit.edu

05:44 dinoex 

- Update to 3.6.1p2

18:50 dinoex 

- honor any given LDFLAGS

11:47 dinoex 

- Change all USE_OPENSSL_* to WITH_OPENSSL_*

19:35 dinoex 

- use bsd.openssl.mk

04:26 dinoex 

- Update to 3.6.1p1

04:10 dinoex 

- extend regression tests

03:02 dinoex 

- Update to 3.6p1

04:48 dinoex 

- add USE_PERL5_BUILD

18:26 dinoex 

- add COMMENT

04:21 dinoex 

- openssh-3.5p1 doesn't log utmp for IPv6 connection correctly
Submitted by:   ume

22:00 dinoex 

openssh-gssapi-3.5p1 is marked as broken

16:02 dinoex 

remove an disfuntional MASTER_SITE