| Port details |
- py-ssh-audit SSH server auditing
- 2.4.0 security
 =0      2.4.0Version of this port present on the latest quarterly branch. - Maintainer: pkubaj@FreeBSD.org
- Port Added: 2017-11-24 21:32:13
- Last Update: 2021-04-07 08:09:01
- Commit Hash: cf118cc
- License: MIT
- Description:
- ssh-audit is a tool for ssh server & client configuration auditing.
Features:
* SSH1 and SSH2 protocol server support;
* analyze SSH client configuration;
* grab banner, recognize device or software and operating system,
detect compression;
* gather key-exchange, host-key, encryption and
message authentication code algorithms;
* output algorithm information
(available since, removed/disabled, unsafe/weak/legacy, etc);
* output algorithm recommendations
(append or remove based on recognized software version);
* output security information (related issues, assigned CVE list, etc);
* analyze SSH version compatibility based on algorithm information;
* historical information from OpenSSH, Dropbear SSH and libssh;
* no dependencies, compatible with Python 2.6+, Python 3.x and PyPy.
WWW: https://github.com/jtesta/ssh-audit
- SVNWeb : git : Homepage
- pkg-plist: as obtained via:
make generate-plist - There is no configure plist information for this port.
- Dependency lines:
-
- ${PYTHON_PKGNAMEPREFIX}ssh-audit>0:security/py-ssh-audit@${PY_FLAVOR}
- To install the port: cd /usr/ports/security/py-ssh-audit/ && make install clean
- To add the package, run one of these commands:
- pkg install security/py-ssh-audit
- pkg install py37-ssh-audit
NOTE: This is a Python port. Instead of py37-ssh-audit listed in the above command, you can pick from the names under the Packages section.- PKGNAME: py37-ssh-audit
- Package flavors (<flavor>: <package>)
- distinfo:
- TIMESTAMP = 1614133932
SHA256 (jtesta-ssh-audit-v2.4.0_GH0.tar.gz) = 87c634171d3e0c69297fceeb98dead9a816d5d56c8dcd138f8411fdf58085b6f
SIZE (jtesta-ssh-audit-v2.4.0_GH0.tar.gz) = 124133
- Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- py37-setuptools>0 : devel/py-setuptools@py37
- python3.7 : lang/python37
- Runtime dependencies:
-
- py37-setuptools>0 : devel/py-setuptools@py37
- python3.7 : lang/python37
- There are no ports dependent upon this port
- Configuration Options:
- No options to configure
- Options name:
- security_py-ssh-audit
- USES:
- python:3.6+
- Master Sites:
|
| Commit History - (may be incomplete: see SVNWeb link above for full details) |
| Date | By | Description |
|---|
07 Apr 2021 08:09:01
  2.4.0
|
mat |
One more small cleanup, forgotten yesterday.
Reported by: lwhsu |
06 Apr 2021 14:31:07
2.4.0
|
mat |
Remove # $FreeBSD$ from Makefiles. |
24 Feb 2021 02:34:02
  2.4.0
|
pkubaj |
security/py-ssh-audit: update to 2.4.0
Changelog:
- Added multi-threaded scanning support.
- Added built-in Windows manual page (see `-m`/`--manual`); credit [Adam
Russell](https://github.com/thecliguy).
- Added version check for OpenSSH user enumeration (CVE-2018-15473).
- Added deprecation note to host key types based on SHA-1.
- Added extra warnings for SSHv1.
- Added built-in hardened OpenSSH v8.5 policy.
- Upgraded warnings to failures for host key types based on SHA-1.
- Fixed crash when receiving unexpected response during host key test.
- Fixed hang against older Cisco devices during host key test & gex test.
- Fixed improper termination while scanning multiple targets when one target
returns an error.
- Dropped support for Python 3.5 (which reached EOL in Sept. 2020).
- Added 1 new key exchange: `sntrup761x25519-sha512@openssh.com`. |
28 Dec 2020 23:02:15
2.3.1_1
|
antoine |
Drop python 2.7 support from a few ports
With hat: portmgr |
11 Nov 2020 14:18:41
|
pkubaj |
security/py-ssh-audit: more fixes |
11 Nov 2020 13:48:34
2.3.1_1
|
pkubaj |
security/py-ssh-audit: fix run-time
Traceback (most recent call last):
File "/usr/local/bin/ssh-audit", line 10, in <module>
from ssh_audit.ssh_audit import main # noqa: E402
ModuleNotFoundError: No module named 'ssh_audit' |
30 Oct 2020 11:56:09
2.3.1
|
pkubaj |
security/py-ssh-audit: update to 2.3.1
Changelog:
- Now parses public key sizes for rsa-sha2-256-cert-v01@openssh.com and
rsa-sha2-512-cert-v01@openssh.com host key types.
- Flag ssh-rsa-cert-v01@openssh.com as a failure due to SHA-1 hash.
- Fixed bug in recommendation output which suppressed some algorithms
inappropriately.
- Built-in policies now include CA key requirements (if certificates are in
use).
- Lookup function (--lookup) now performs case-insensitive lookups of similar
algorithms; credit Adam Russell.
- Migrated pre-made policies from external files to internal database.
- Split single 3,500 line script into many files (by class).
- Added setup.py support; credit Ganden Schaffner.
- Added 1 new cipher: des-cbc@ssh.com. |
28 Sep 2020 22:02:10
2.3.0
|
pkubaj |
security/py-ssh-audit: update to 2.3.0
Changelog:
https://github.com/jtesta/ssh-audit/releases/tag/v2.3.0 |
05 Jun 2020 12:00:04
2.2.0
|
pkubaj |
security/py-ssh-audit: fix pkg-descr
Move website to the fork that we use, add descriptions of new features from
README.md. |
12 Mar 2020 08:39:59
2.2.0
|
pkubaj |
security/py-ssh-audit: update to 2.2.0 |
06 Jan 2020 12:49:49
2.1.1
|
pkubaj |
security/py-ssh-audit: while here, update maintainer to my @FreeBSD.org address |
06 Jan 2020 12:49:09
2.1.1
|
pkubaj |
security/py-ssh-audit: update to 2.1.1, switch to a fork
The original author went MIA, there are many improvements in the fork.
PR: 242408
Submitted by: ehaupt |
24 Nov 2017 21:32:05
1.7.0
|
yuri |
New port: security/py-ssh-audit: SSH server auditing
PR: 223810
Submitted by: Piotr Kubaj <pkubaj@anongoth.pl>
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D13207 |
As an Amazon Associate I earn from qualifying purchases.