21:21 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: update to 3.2.0

Also switch to static pkg-plist.

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v3.2.0

    21bd441

22:01 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: update to 3.1.0

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v3.1.0

    2a93e8e

13:41 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: update to 3.0.0

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v3.0.0

    17be6f8

09:15 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: update to 2.9.0

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v2.9.0

    b7aa703

15:00 Piotr Kubaj (pkubaj) 

security/py-ssh-audit: update to 2.5.0

Changelog:
* Fixed crash when running host key tests.
* Handles server connection failures more gracefully.
* Now prints JSON with indents when -jj is used (useful for debugging).
* Added MD5 fingerprints to verbose output.
* Added -d/--debug option for getting debugging output; credit Adam Russell.
* Updated JSON output to include MD5 fingerprints. Note that this results in a
breaking change in the 'fingerprints' dictionary format.
* Updated OpenSSH 8.1 (and earlier) policies to include rsa-sha2-512 and
rsa-sha2-256.
* Added OpenSSH v8.6 & v8.7 policies.
* Added 3 new key exchanges: gss-gex-sha1-eipGX3TCiQSrx573bT1o1Q==,
gss-group1-sha1-eipGX3TCiQSrx573bT1o1Q==, and
gss-group14-sha1-eipGX3TCiQSrx573bT1o1Q==.
* Added 3 new MACs: hmac-ripemd160-96, AEAD_AES_128_GCM, and AEAD_AES_256_GCM.

    edc1905

02:34 pkubaj 

security/py-ssh-audit: update to 2.4.0

Changelog:
 - Added multi-threaded scanning support.
 - Added built-in Windows manual page (see `-m`/`--manual`); credit [Adam
Russell](https://github.com/thecliguy).
 - Added version check for OpenSSH user enumeration (CVE-2018-15473).
 - Added deprecation note to host key types based on SHA-1.
 - Added extra warnings for SSHv1.
 - Added built-in hardened OpenSSH v8.5 policy.
 - Upgraded warnings to failures for host key types based on SHA-1.
 - Fixed crash when receiving unexpected response during host key test.
 - Fixed hang against older Cisco devices during host key test & gex test.
 - Fixed improper termination while scanning multiple targets when one target
returns an error.
 - Dropped support for Python 3.5 (which reached EOL in Sept. 2020).
 - Added 1 new key exchange: `sntrup761x25519-sha512@openssh.com`.

 

11:56 pkubaj 

security/py-ssh-audit: update to 2.3.1

Changelog:
- Now parses public key sizes for rsa-sha2-256-cert-v01@openssh.com and
rsa-sha2-512-cert-v01@openssh.com host key types.
- Flag ssh-rsa-cert-v01@openssh.com as a failure due to SHA-1 hash.
- Fixed bug in recommendation output which suppressed some algorithms
inappropriately.
- Built-in policies now include CA key requirements (if certificates are in
use).
- Lookup function (--lookup) now performs case-insensitive lookups of similar
algorithms; credit Adam Russell.
- Migrated pre-made policies from external files to internal database.
- Split single 3,500 line script into many files (by class).
- Added setup.py support; credit Ganden Schaffner.
- Added 1 new cipher: des-cbc@ssh.com.

 

22:02 pkubaj 

security/py-ssh-audit: update to 2.3.0

Changelog:
https://github.com/jtesta/ssh-audit/releases/tag/v2.3.0

 

08:39 pkubaj 

security/py-ssh-audit: update to 2.2.0

 

12:49 pkubaj 

security/py-ssh-audit: update to 2.1.1, switch to a fork

The original author went MIA, there are many improvements in the fork.

PR:		242408
Submitted by:	ehaupt

 

21:32 yuri 

New port: security/py-ssh-audit: SSH server auditing

PR:		223810
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D13207