16:43 amdmi3 

- Remove BROKEN on 8.x WITH_KERBEROS case. Builds fine on 8.0 and 9.0, i386 and
amd64
- While here, fix minor plist issue for WITH_X509 case

PR:             141679
Submitted by:   Denis Barov <dindin@dindin.ru> (maintainer)

08:08 lioux 

- Under OSVERSION >= 800000, only mark BROKEN if WITH_KERBEROS.
- The port links fine otherwise.

21:09 pav 

- Mark BROKEN on 8.X with Kerberos - does not link

Reported by:    pointyhat

18:44 pav 

- Revert USE_RC_SUBR change from last commit, it breaks OVERWRITE_BASE
- Add a hint to pkg-message about running this together with base sshd

PR:             ports/138943
Submitted by:   Denis Barov <dindin@yandex-team.ru> (maintainer)
Feature safe:   yes

14:05 pav 

- Unbreak KERBEROS option
- Add option for OpenBSD support
- Fix crash in sftp listing

PR:             ports/138409 (cumulative patch)
Submitted by:   Denis Barov <dindin@dindin.ru> (maintainer)
Feature safe:   yes

07:13 pav 

- Mark BROKEN on 8.X: does not link

Reported by:    pointyhat

14:52 nork 

Fix build error WITH_HPN.

PR:                     ports/135407
Submitted by:           maintainer implicit (already submitted)
Pointy hat to:          pgollucci

17:15 pgollucci 

- Fix the previous commit
  The patch file names for LPK were not updated completely in the Makefile

PR:             ports/135968
Submitted by:   Konstantin Kukushkin <dark@rambler-co.ru>
Approved by:    maintainer (implicit, shouyld have been in previous patch)

10:13 osa 

Fix build with WITH_LPK support for amd64 by change extra patches order.
Do not bump PORTREVISION.

Submitted by:   Fedor Dikarev aka fe at rambler dash co dot ru
Spotted by:     maxim
Approved by:    maintainer unavailable, i.e.
                $ whois dindin.ru | grep ^state
                state:      REGISTERED, NOT DELEGATED
PR:             amd64/134706

03:00 nork 

Fix HPN crash issue by using aes128-ctr, aes192-ctr and aes256-ctr.

Approved by:    pav

11:00 pav 

- Update to 5.2p1
- Assign maintainership to the submitter

PR:             ports/134160
Submitted by:   Denis Barov <dindin@dindin.ru>

06:01 sumikawa 

Fix several problems with OPENSSH_OVERWRITE_BASE=1.
- Empty dir handling
- rc.d installation
- prefix modification in manuals

From:           Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
PR:             ports/133412

17:41 pav 

- Reset long-term inactive maintainer

17:41 pav 

- Integrate x509 certificate patch (optional, default off) from
http://www.roumenpetrov.info/openssh/

PR:             ports/121438
Submitted by:   Dirk-Willem van Gulik <dirkx@webweaving.org>
Approved by:    maintainer timeout (mnag; 1 year)

17:33 pav 

- Add vendor patch for lpk patch that fixes runtime on amd64

PR:             ports/129092
Submitted by:   Jui-Nan Lin <jnlin@csie.nctu.edu.tw>
Approved by:    maintainer timeout (mnag; 4 months)

17:26 pav 

- Update to 5.1p1

PR:             ports/128679
Submitted by:   Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
Approved by:    maintainer timeout (mnag; 4 months)

13:03 skv 

Fix rootless build.

PR:             ports/126164
Submitted by:   skv
Approved by:    maintainer timeout (> 3 months)

06:18 rafan 

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:             126524 (obsoletes 52917)
Submitted by:   rafan
Tested on:      two pointyhat 7-amd64 exp runs (by pav)
Approved by:    portmgr (pav)

19:26 pav 

- Mark BROKEN after recent kerberos update

13:46 mnag 

- Update to 5.0p1
- Port LPK patch to 5.0p1 and add to files dir
- Remove USE_PERL_BUILD since doesn't need [1]
- Update KERB_GSSAPI to 5.0p1
- Update HPN patch to 5.0p1 13v3
- Respect LOCALBASE on configure_args of LPK [2]
- Change MASTER_SITE of snapshot
- portlint(1)

PR:             121826 [2]
Submitted by:   Andrew Kolchoogin <andrew___rinet.ru> [2]
Reported by:    Björn König <bkoenig___alpha-tierchen.d [1]

13:09 mnag 

- Update HPN patch to hpn12v20
- Bump PORTREVISION

Submitted by:   Ollivier Robert <roberto__keltia.freenix.fr>

12:41 mnag 

- Update gsskex patch to 20070927
- Update HPN patch to hpn12v19 [1]

Notified by:    ale [1]

06:00 edwin 

Remove always-false/true conditions based on OSVERSION 500000

01:18 mnag 

- Update to 4.7p1
- Update HPN patch to 4.7p1-hpn12v18
- Mark as BROKEN WITH_KERB_GSSAPI while developer release a new patch

15:40 mnag 

- Enable ssl-engine
- Update gsskex patch to 4.6p1-gsskex-20070312
- Update lpk patch to 4.6p1-0.3.9
- Update hpn patch to 4.6p1-hpn12v17
- Fix challenge-response issue
- Bump PORTREVISION

Reported by:    Stefan Lambrev [1], ale@ [1]

09:36 rafan 

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
  supports them.  This is determined by running ``configure --help'' in
  do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
  which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
  Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
  PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
  subdirectory detection.

PR:             ports/111470
Approved by:    portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by:      pointyhat exp run

22:13 mnag 

- Update OpenSSH to 4.6p1
- Update GSSKEX patch to 20061220
- Update HPN patch to hpn12v16
- Update LPK patch to 0.3.8

11:49 rafan 

- Use RC_SUBR_SUFFIX

Approved by:    mnag (maintainer)

18:58 ale 

Update HPN patch to v14 for openssh 4.5p1.

Approved by:    mnag

13:11 mnag 

- Update to 4.5p1
- patch-sshd.c unconditionally includes <gssapi.h>. Include "ssh-gss.h" instead.
[1]

PR:             104481 [1]
Submitted by:   Mark Andrews <Mark_Andrews___isc.org> [1]

13:27 mnag 

- Update HPN patch. Patch are renamed, the only content differences are two rows
now enclosed in an "else" block.

Submitted by:   ale
Approved by:    portmgr (erwin)

21:06 mnag 

- Add OPTION to enable Kerberos/GSSAPI patch [1]
- Add OPTION to enable LPK patch (ldap stored public key) [2]

PR:             86384 [1], 103399 [2]
Submitted by:   Garrett Wollman <wollman___khavrinen.csail.mit.edu> [1], Dmitriy
Kirhlarov <dkirhlarov___oilspace.com> [2]

13:53 mnag 

- Fix package creation. [1]
- Update HPN patch and remove IGNORE. [2]
- Bump PORTREVISION

PR:             103961
Submitted by:   Phil Oleson <oz___nixil.net> [1], ale [2]

19:37 mnag 

- Install ssh_config-dist and sshd_config-dist in OVERWRITE_BASE too.

02:15 mnag 

- Update to 4.4p1.
- Disable temporary HPN patch until HPN release new version.
- Fix rc.d script path in sshd.8
- Add FreeBSD-${PKGNAME} in SSH_VERSION and SSH_RELEASE like src does.
- Sync patches with src.

Security:       CVE-2006-4924, CVE-2006-5051

19:47 ale 

Update HPN-12 patch to version 8 (no functional changes,
only documentation changes and a small bug fix on option parsing).

Approved by:    mnag

12:49 simon 

Add optional OpenSC PIN patch which make it possible for OpenSSH to ask
for a PIN when using an OpenSC smartcard.

Approved by:            mnag (maintainer)
Patch obtained from:    http://bugzilla.mindrot.org/show_bug.cgi?id=608

20:10 mnag 

- Remove unecessary ?= in PKGNAMESUFFIX [1]
- Update HPN patch to hpn12. Now none cipher are configured in run time. [2]

Notified by:    Peter Losher <plosher___plosh.net> [1], Scott Larson
<stl___iowainteractive.com> [2]

16:56 ale 

Add support for smart cards.

Approved by:    maintainer

19:28 mnag 

- Fix order in rc.d script. Because of pidfile are empty, reload [2] and restart
[1]
  commands kill all connections.
- Separate keygen part and create keygen command.
- Bump PORTREVISION

PR:             93228 [1]
Reported by:    DanGer on #bsdports [2]

23:59 mnag 

Forget to add HPN patches.

23:55 mnag 

- Update to 4.3p2

20:07 mnag 

- Update to 4.3p1
- Use DISTVERSION
- Add most configuration in OPTIONS
- Enable support to libedit in sftp [1]
- Add OPTIONS to HPN patches [2]
- Add new rc.d script [3]
- New rc.d script are responsible to check configuration and create host keys
- Using USE_RC_SUBR
- Modify pkg-message to reflect new rc.d script
- Fix pkg-plist

Reviewd by:     dougb [3]
Submitted by:   vs [1], brooks [2]
Tested by:      me, John E Hein

20:04 mnag 

- Reorganize Makefile in preparation to update to 4.3p1
- Add one http in MASTER_SITES
- Update WWW

17:58 mnag 

Update my email

Approved by: pav (mentor)

12:36 garga 

- Pass maintainership to submitter, since he sent the last patch.

PR:             ports/85775
Submitted by:   Marcus Alves Grando <marcus@corp.grupos.com.br>

19:24 garga 

- Update to 4.2p1

PR:             ports/85578
Submitted by:   Marcus Grando <marcus@corp.grupos.com.br>

19:09 pav 

- Update to 4.1p1

PR:             ports/81948
Submitted by:   Daniel Gerzo <danger@rulez.sk>

21:31 pav 

- Don't specify --with-ssl-dir when using the system's OpenSSL

PR:             ports/79355
Submitted by:   Mark Andrews <Mark_Andrews@isc.org>

01:00 ahze 

- Update to 4.0p1

PR:             ports/79029
Submitted by:   Dimitry Andric <dimitry@andric.com>

05:26 dinoex 

- drop maintainership

04:43 dinoex 

- new option WITH_OPENSSH_CHROOT
Submitted by:   KANAI Makoto

11:35 dinoex 

- update to 3.9p1

set PORTVERSION 3.9.0.1 to avoid another
bump of PORTEPOCH if 3.9.1p1 come out.

- new option OPENSSH_SNAPSHOT

03:48 dinoex 

- bump PORTEPOCH
Reported by kriS

03:04 dinoex 

- update to 3.8.1p1

05:18 dinoex 

- force kerberos by option WITH_GSSAPI

19:56 dinoex 

- make PKGNAMESUFFIX more flexible

05:47 dinoex 

- add SIZE

12:32 dinoex 

- update to 3.8p1

10:45 dinoex 

- new option WITHOUT_KERBEROS

PR:             58156
Submitted by:   matt@peterson.org

14:16 dinoex 

- fix build with kerberos5 from base and missing libdes
- get rid of autoconf dependency

04:05 dinoex 

- fix spelling of gssapi

11:53 dinoex 

- add CONFLICTS
Submitted by:   eikemeier@fillmore-labs.com

03:52 dinoex 

- GSSAPI patch improved for kerbers5 and hemidal

Submitted by:   bg@sics.se

18:41 dinoex 

- cleanup GSSAPI option

18:13 dinoex 

- update to 3.7.1p2
more regressions tests successfull

02:42 dinoex 

- Security Fix in PAM handling
Obtained from:  des

17:08 dinoex 

- mark FORBIDDEN until fixed.

19:16 dinoex 

- Security Fix obtained from OpenBSD
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/buffer.c.diff?r1=1.18&r2=1.19

Submitted by:   ash@lab.poc.net

16:07 nectar 

Add Solar Designer's additional fixes to buffer management.

12:03 dinoex 

- Securitry Fix revision 2
http://www.openssh.com/txt/buffer.adv
Approved by:    lioux (portmgr)

12:43 nectar 

Do not record expanded size before attempting to reallocate associated
memory.

Obtained from:  OpenBSD

08:02 dinoex 

- use OPENSSLRPATH from bsd.openssl.mk
- strip CONFIGURE_ENV, LDFLAGS is set in bsd.openssl.mk

15:38 dinoex 

- use hook for bsd.openssl.mk

20:04 dinoex 

- Update to gssapi-20030430
Submitted by:   wollman@lcs.mit.edu

05:44 dinoex 

- Update to 3.6.1p2

18:50 dinoex 

- honor any given LDFLAGS

11:47 dinoex 

- Change all USE_OPENSSL_* to WITH_OPENSSL_*

19:35 dinoex 

- use bsd.openssl.mk

04:26 dinoex 

- Update to 3.6.1p1

04:10 dinoex 

- extend regression tests

03:02 dinoex 

- Update to 3.6p1

04:48 dinoex 

- add USE_PERL5_BUILD

18:26 dinoex 

- add COMMENT

04:21 dinoex 

- openssh-3.5p1 doesn't log utmp for IPv6 connection correctly
Submitted by:   ume

22:00 dinoex 

openssh-gssapi-3.5p1 is marked as broken

16:02 dinoex 

remove an disfuntional MASTER_SITE

04:40 dinoex 

Update to 3.5p1

19:31 dinoex 

add bugfix from CURRENT

06:20 dinoex 

Fix resolver problem with privilege-separation.
PR:             39953

20:47 dinoex 

- add pam_cleanup from CURRENT
- Fix build problems < 4.0
PR:             40576

05:28 dinoex 

Add bits for regression tests
Fix build for /var/empty is schg and have open permissions.

20:08 dinoex 

- Fix Problem with HAVE_HOST_IN_UTMP
- update monitor.c

PR:             40576
Submitted by:   lxv@a-send-pr.sink.omut.org

18:55 dinoex 

merge PAM buffer management from current.

18:29 dinoex 

'PermitRootLogin no' is the new default for the OpenSSH port.
This now matches the PermitRootLogin configuration of OpenSSH in
the base system.  Please be aware of this when upgrading your
OpenSSH port, and if truly necessary, re-enable remote root login
by readjusting this option in your sshd_config.

Users are encouraged to create single-purpose users with ssh keys
and very narrowly defined sudo privileges instead of using root
for automated tasks.

- PKGNAMESUFFIX for GSSAPI set.
- Merged some patches from current to improve PAM.
- Fix BATCH=yes for bento.

19:31 dinoex 

give Enviroment from login.conf priority over all others,
problem found by drs@rucus.ru.ac.za.

06:18 dinoex 

Update gssapi patch

05:28 dinoex 

Defaults changed: (Gregory Sutter)
 ChallengeResponseAuthentication no
 UseLogin no

patch for configure, to detect MAP_ANON submitted by:
Christophe Labouisse,Michael Handler,Gert Doering,Phil Oleson,Dave Baker

fix missing includes for "canohost.h"

17:32 dinoex 

Update to openssh-3.4
Update to openssh-3.4p1

15:21 dinoex 

Security FIX, Please update to this Version.

Options for both:
USE_OPENSSL_BASE=yes
        uses an older opensssl in the base system.

Options for portable:
OPENSSH_OVERWRITE_BASE=yes
        includes USE_OPENSSL_BASE=yes
        installls in the paths of the base system