| Port details |
- py-ssh-audit SSH server auditing
- 2.5.0 security
 =0      Version of this port present on the latest quarterly branch. - Maintainer: pkubaj@FreeBSD.org
- Port Added: 2017-11-24 21:32:13
- Last Update: 2021-08-27 15:00:39
- Commit Hash: edc1905
- License: MIT
- Description:
- ssh-audit is a tool for ssh server & client configuration auditing.
Features:
* SSH1 and SSH2 protocol server support;
* analyze SSH client configuration;
* grab banner, recognize device or software and operating system,
detect compression;
* gather key-exchange, host-key, encryption and
message authentication code algorithms;
* output algorithm information
(available since, removed/disabled, unsafe/weak/legacy, etc);
* output algorithm recommendations
(append or remove based on recognized software version);
* output security information (related issues, assigned CVE list, etc);
* analyze SSH version compatibility based on algorithm information;
* historical information from OpenSSH, Dropbear SSH and libssh;
* no dependencies, compatible with Python 2.6+, Python 3.x and PyPy.
WWW: https://github.com/jtesta/ssh-audit
- SVNWeb : git : Homepage
- pkg-plist: as obtained via:
make generate-plist - There is no configure plist information for this port.
- Dependency lines:
-
- ${PYTHON_PKGNAMEPREFIX}ssh-audit>0:security/py-ssh-audit@${PY_FLAVOR}
- To install the port:
- cd /usr/ports/security/py-ssh-audit/ && make install clean
- To add the package, run one of these commands:
- pkg install security/py-ssh-audit
- pkg install py38-ssh-audit
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.NOTE: This is a Python port. Instead of py38-ssh-audit listed in the above command, you can pick from the names under the Packages section.- PKGNAME: py38-ssh-audit
- Package flavors (<flavor>: <package>)
- distinfo:
- TIMESTAMP = 1630074553
SHA256 (jtesta-ssh-audit-v2.5.0_GH0.tar.gz) = 43a1679ba1bd829b0f871bb9ab0e5d861c3e074b73f1e9cb66d687adce94a462
SIZE (jtesta-ssh-audit-v2.5.0_GH0.tar.gz) = 125991
- Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- py38-setuptools>0 : devel/py-setuptools@py38
- python3.8 : lang/python38
- Runtime dependencies:
-
- py38-setuptools>0 : devel/py-setuptools@py38
- python3.8 : lang/python38
- There are no ports dependent upon this port
- Configuration Options:
- No options to configure
- Options name:
- security_py-ssh-audit
- USES:
- python:3.6+
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
| Commit History - (may be incomplete: see SVNWeb link above for full details) |
| Date | By | Description |
|---|
27 Aug 2021 15:00:39
  2.5.0 |
Piotr Kubaj (pkubaj) |
security/py-ssh-audit: update to 2.5.0
Changelog:
* Fixed crash when running host key tests.
* Handles server connection failures more gracefully.
* Now prints JSON with indents when -jj is used (useful for debugging).
* Added MD5 fingerprints to verbose output.
* Added -d/--debug option for getting debugging output; credit Adam Russell.
* Updated JSON output to include MD5 fingerprints. Note that this results in a
breaking change in the 'fingerprints' dictionary format.
* Updated OpenSSH 8.1 (and earlier) policies to include rsa-sha2-512 and
rsa-sha2-256.
* Added OpenSSH v8.6 & v8.7 policies.
* Added 3 new key exchanges: gss-gex-sha1-eipGX3TCiQSrx573bT1o1Q==,
gss-group1-sha1-eipGX3TCiQSrx573bT1o1Q==, and
gss-group14-sha1-eipGX3TCiQSrx573bT1o1Q==.
* Added 3 new MACs: hmac-ripemd160-96, AEAD_AES_128_GCM, and AEAD_AES_256_GCM. |
07 Apr 2021 08:09:01
2.4.0 |
Mathieu Arnold (mat) |
One more small cleanup, forgotten yesterday.
Reported by: lwhsu |
06 Apr 2021 14:31:07
2.4.0 |
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
24 Feb 2021 02:34:02
  2.4.0 |
pkubaj |
security/py-ssh-audit: update to 2.4.0
Changelog:
- Added multi-threaded scanning support.
- Added built-in Windows manual page (see `-m`/`--manual`); credit [Adam
Russell](https://github.com/thecliguy).
- Added version check for OpenSSH user enumeration (CVE-2018-15473).
- Added deprecation note to host key types based on SHA-1.
- Added extra warnings for SSHv1.
- Added built-in hardened OpenSSH v8.5 policy.
- Upgraded warnings to failures for host key types based on SHA-1.
- Fixed crash when receiving unexpected response during host key test.
- Fixed hang against older Cisco devices during host key test & gex test.
- Fixed improper termination while scanning multiple targets when one target
returns an error.
- Dropped support for Python 3.5 (which reached EOL in Sept. 2020).
- Added 1 new key exchange: `sntrup761x25519-sha512@openssh.com`. |
28 Dec 2020 23:02:15
2.3.1_1 |
antoine |
Drop python 2.7 support from a few ports
With hat: portmgr |
11 Nov 2020 14:18:41
|
pkubaj |
security/py-ssh-audit: more fixes |
11 Nov 2020 13:48:34
2.3.1_1 |
pkubaj |
security/py-ssh-audit: fix run-time
Traceback (most recent call last):
File "/usr/local/bin/ssh-audit", line 10, in <module>
from ssh_audit.ssh_audit import main # noqa: E402
ModuleNotFoundError: No module named 'ssh_audit' |
30 Oct 2020 11:56:09
2.3.1 |
pkubaj |
security/py-ssh-audit: update to 2.3.1
Changelog:
- Now parses public key sizes for rsa-sha2-256-cert-v01@openssh.com and
rsa-sha2-512-cert-v01@openssh.com host key types.
- Flag ssh-rsa-cert-v01@openssh.com as a failure due to SHA-1 hash.
- Fixed bug in recommendation output which suppressed some algorithms
inappropriately.
- Built-in policies now include CA key requirements (if certificates are in
use).
- Lookup function (--lookup) now performs case-insensitive lookups of similar
algorithms; credit Adam Russell.
- Migrated pre-made policies from external files to internal database.
- Split single 3,500 line script into many files (by class).
- Added setup.py support; credit Ganden Schaffner.
- Added 1 new cipher: des-cbc@ssh.com. |
28 Sep 2020 22:02:10
2.3.0 |
pkubaj |
security/py-ssh-audit: update to 2.3.0
Changelog:
https://github.com/jtesta/ssh-audit/releases/tag/v2.3.0 |
05 Jun 2020 12:00:04
2.2.0 |
pkubaj |
security/py-ssh-audit: fix pkg-descr
Move website to the fork that we use, add descriptions of new features from
README.md. |
12 Mar 2020 08:39:59
2.2.0 |
pkubaj |
security/py-ssh-audit: update to 2.2.0 |
06 Jan 2020 12:49:49
2.1.1 |
pkubaj |
security/py-ssh-audit: while here, update maintainer to my @FreeBSD.org address |
06 Jan 2020 12:49:09
2.1.1 |
pkubaj |
security/py-ssh-audit: update to 2.1.1, switch to a fork
The original author went MIA, there are many improvements in the fork.
PR: 242408
Submitted by: ehaupt |
24 Nov 2017 21:32:05
1.7.0 |
yuri |
New port: security/py-ssh-audit: SSH server auditing
PR: 223810
Submitted by: Piotr Kubaj <pkubaj@anongoth.pl>
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D13207 |
As an Amazon Associate I earn from qualifying purchases.