Commit graph

204 commits

Author SHA1 Message Date
Bryan Drewery
ac9ad08ef2 - Update to 6.2p2
- The LPK patch has been updated but is obsolete, deprecated and
  untested. It has been replaced by AuthorizedKeysCommand
- The upstream HPN's last update was for 6.1 and is mostly
  abandoned. The patch has had bugs since 5.9. I have reworked
  it and split into into HPN and AES_THREADED options. The
  debugging/logging part of the patch is incomplete. I may
  change the patch to more closely match our base version
  eventually.
- The KERB_GSSAPI option has been removed as the patch has not
  been updated by upstream since 5.7
- sshd VersionAddendum is currently not working as intended;
  it will be fixed later to allow removing the port/pkg version.
- Update our patchset to match latest base version
- Bring in ssh-agent -x support from base
- I incrementally updated the port from 5.8 up to 6.2p2 along
  with patches. You can find all of the versions at
  https://github.com/bdrewery/openssh

Changes:
    http://www.openssh.com/txt/release-5.9
    http://www.openssh.org/txt/release-6.0
    http://www.openssh.org/txt/release-6.1
    http://www.openssh.org/txt/release-6.2
    http://www.openssh.org/txt/release-6.2p2
2013-05-17 19:47:35 +00:00
Bryan Drewery
c56d4773a5 - Bring in r199804 and r206397 from base to avoid killing sshd in
high-pressure swapping environments
2013-05-17 14:36:34 +00:00
Bryan Drewery
86f302336e - Remove copyright as it was a base customization that was removed in
base r213250
2013-05-17 14:16:10 +00:00
Bryan Drewery
b3a7b6b7c2 - Remove CHROOT option and patch. ChrootDirectory was added in 5.0
to achieve the same thing.
2013-05-17 13:56:29 +00:00
Bryan Drewery
f2ec55247e Fix xauth and ssh-askpass still being expected in /usr/X11R6
This was fixed in base in 2007 in r169966
2013-05-02 02:03:09 +00:00
Bryan Drewery
34c529eb2e - Add support for base and port Heimdal for Kerberos
PR:		ports/167554
Requested by:	Volodymyr Kostyrko <c.kworr@gmail.com>
2013-04-30 13:13:49 +00:00
Bryan Drewery
553e0f5788 - Remove compatibiliy for FreeBSD <4.x
* /var/empty has been in hier(7) since 4.x
  * User sshd has been in base since 4.x
  * Simplify a patch for realhostname_sa(3) usage
- Remove SUID_SSH - It was removed from ssh in 2002
- Fix 'make test'
- Add some hints into the patches on where they came from
- Mirror all patches
- Move LPK patch out of files/
- Remove the need for 2 patches
  * Removal of 'host-key check-config' in install phase
  * Adding -lutil
- Add SCTP support [1]
- Remove FILECONTROL as it has not been supported since the 5.8
  update
- Replace tab with space pkg-descr
- Remove default WRKSRC
- Add 'configtest' command to rc script
- Mark X509 broken with other patches due to PATCH_DIST_STRIP=-p1

PR:		ports/174570 [1]
Submitted by:	oleg <proler@gmail.com> [1]
Obtained from:	https://bugzilla.mindrot.org/show_bug.cgi?id=2016 (upstream) [1]
Feature safe:	yes
2013-04-17 00:35:31 +00:00
Bryan Drewery
237fa6c0d4 - Fix runtime crash on CURRENT due to import of NetBSD strnvis() [1]
which differs in prototype from OpenBSD strnvis() [2]

[1] http://lists.freebsd.org/pipermail/freebsd-stable/2013-January/071703.html
[2] http://gnats.netbsd.org/44977

Submitted by:	dim
2013-02-08 00:03:18 +00:00
Alex Kozlov
05a9235c98 - Fix all cases of 'No newline at end of file' in ports tree
Approved by: portmgr (bapt)
2013-02-01 15:04:00 +00:00
Bryan Drewery
cf84cfcb04 - Update mirror site for HPN patch
Feature safe:	yes
2012-12-05 22:32:29 +00:00
Bryan Drewery
9c27afcde5 - Take maintainership
Feature safe:	yes
2012-10-29 15:08:30 +00:00
Eitan Adler
b66d828585 Convert to OptionsNG
Trim Headers

PR:	ports/172429
Submitted by:	Michael Gmelin <freebsd@grem.de>
Feature safe:	yes
2012-10-13 17:13:33 +00:00
Doug Barton
47b836bfe5 When installing in the base, USE_RCORDER does the right thing without
all the gymnastics
2012-08-05 23:05:24 +00:00
Doug Barton
399881097f Add KEYWORD: shutdown
Simplify some code
Fix an error message
2012-06-24 22:49:52 +00:00
Sunpoet Po-Chuan Hsieh
2de4b06af2 - Fix ECDSA key generation in openssh rc.d script
- Bump PORTREVISION for package change

Submitted by:	J. Hellenthal <jhellenthal@dataix.net>
2012-06-24 17:51:21 +00:00
Eitan Adler
f10427bf15 Change HPN patch mirror location to one that works
PR:		ports/168306
Submitted by:	"Bryan Drewery" <bryan@shatow.net>
2012-06-13 03:02:04 +00:00
Sunpoet Po-Chuan Hsieh
36cd8ba256 - Reset maintainership
PR:		ports/167423
Submitted by:	Grzegorz Blach <magik@roorback.net> (maintainer)
2012-05-01 09:56:31 +00:00
Michael Scheidell
30d069e579 - Perl only needed to build, not needed to run. remove PERL5_RUN from Makefile
- Bump PORTREVISION

PR:		ports/166413
Submitted by:	Gleb Smirnoff <glebius@cell.glebius.int.ru>
Approved by:	Grzegorz Blach <magik@roorback.net> (maintainer)
Feature safe:	yes
2012-03-28 18:04:42 +00:00
Doug Barton
83eb2c3700 In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
2012-01-14 08:57:23 +00:00
Michael Scheidell
ffb8909855 - Add USE_PERL5_BUILD
PR:		ports/163414
Submitted by:	portmgr (pav)
Approved by:	gabor (mentor)
2011-12-23 12:52:28 +00:00
Michael Scheidell
746a25f1ed - openssh-portable needs perl to build (reported by Gleb Smirnoff via mail)
- add ssh_engine.5 man page when openssh-portable WITH_X509 is turned on (reported by John Hein via mail)

PR:		ports/163414
Submitted by:	Grzegorz Blach <magik@roorback.net>
Approved by:	gabor (mentor)
2011-12-23 12:24:23 +00:00
Florian Smeets
9b3fe7c2f4 - update to 5.8p2 [1]
- fix Kerberos knob [2]
- fix build on 9.0 [3]
- fix deinstall with various knobs [4]
- fix LPK knob [5]

PR:		ports/161818 [1], ports/144597 [2], ports/160389 [3]
		ports/150493, ports/156926 [4], ports/155456 [5]

Submitted by:	"Grzegorz Blach" <magik@roorback.net> [1], [2], [4], [5]
		pluknet [3]
Reported by:	Jonathan <lordsith49@hotmail.com> [2]
		Kevin Thompson <antiduh@csh.rit.edu> [4]
		Alexey Remizov <alexey@remizov.org> [5]
2011-10-21 16:18:56 +00:00
Stephen Montgomery-Smith
d411c5c227 - Maintainer to magik@roorback.net
Approved by:	maho (mentor) and magik@roorback.net
2011-07-19 02:05:33 +00:00
Stephen Montgomery-Smith
0c145731fc - Add VersionAddendum support.
- Bump portrevision.

PR:		ports/142824
Submitted by:	Scot Hetzel <swhetzel@gmail.com>
Approved by:	gabor (mentor)
2011-07-13 21:47:05 +00:00
Olli Hauer
87931c6875 -remove MD5 2011-07-03 14:03:52 +00:00
Sergey Skvortsov
5c96a91930 Unbreak build with LPK option (broken after commit 1.674 in bsd.port.mk). 2011-03-11 17:11:08 +00:00
Alex Dupre
2c07ef369c Remove OpenSC support. This port should be updated to support PKCS#11. 2010-12-27 09:58:51 +00:00
Rene Ladan
2e5b524b0c - Fix optional dependency on security/heimdal
- Bump PORTREVISION
PR:		ports/152029
Submitted by:	Joerg Pulz [Joerg.Pulz frm2.tum.de]
Approved by:	Ryan Steinmetz <rpsfa@rit.edu> (maintainer of net/freeradius*)
		girgen (maintainer of databases/postgresql*-server,
		        14 day timeout)
2010-11-21 23:48:49 +00:00
Philip M. Gollucci
4e2a10c5ee Add the sftpfilecontrol patch as an OPTION (WITH_FILECONTROL)
See http://sftpfilecontrol.sourceforge.net/  for details.

PR:             ports/146338
Submitted by:   Steve Wills <steve@mouf.net>
2010-08-31 02:46:44 +00:00
Mark Linimon
df9e790904 Reset dindin@dindin.ru due to maintainer-timeout and no response to email.
Hat:		portmgr
2010-08-22 23:20:17 +00:00
Pav Lucistnik
831c9f1680 - Annotate the combination of X509 and KERB_GSSAPI patches as broken
PR:		ports/142819
Submitted by:	Scot Hetzel <swhetzel@gmail.com>
Approved by:	maintainer timeout (1 month)
2010-05-04 09:14:22 +00:00
Erwin Lansing
7b64080d4c Mark BROKEN on 9.x: does not build 2010-04-18 21:46:39 +00:00
Doug Barton
86922094aa RC_SUBR_SUFFIX has not been needed for a long time now, all supported
versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh
appended to the script name.
2010-03-27 06:14:03 +00:00
Doug Barton
1d6b4b3f91 Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr#
2010-03-27 00:15:24 +00:00
Dmitry Marakasov
5fc3786e03 - Remove BROKEN on 8.x WITH_KERBEROS case. Builds fine on 8.0 and 9.0, i386 and amd64
- While here, fix minor plist issue for WITH_X509 case

PR:		141679
Submitted by:	Denis Barov <dindin@dindin.ru> (maintainer)
2009-12-16 16:43:21 +00:00
Mario Sergio Fujikawa Ferreira
5eab958e66 - Under OSVERSION >= 800000, only mark BROKEN if WITH_KERBEROS.
- The port links fine otherwise.
2009-11-02 08:08:45 +00:00
Pav Lucistnik
0c0f9abca5 - Mark BROKEN on 8.X with Kerberos - does not link
Reported by:	pointyhat
2009-09-30 21:09:06 +00:00
Pav Lucistnik
980f7d51da - Revert USE_RC_SUBR change from last commit, it breaks OVERWRITE_BASE
- Add a hint to pkg-message about running this together with base sshd

PR:		ports/138943
Submitted by:	Denis Barov <dindin@yandex-team.ru> (maintainer)
Feature safe:	yes
2009-09-23 18:44:47 +00:00
Pav Lucistnik
adcf823bcf - Unbreak KERBEROS option
- Add option for OpenBSD support
- Fix crash in sftp listing

PR:		ports/138409 (cumulative patch)
Submitted by:	Denis Barov <dindin@dindin.ru> (maintainer)
Feature safe:	yes
2009-09-18 14:05:52 +00:00
Pav Lucistnik
97ab5b2d30 - Mark BROKEN on 8.X: does not link
Reported by:	pointyhat
2009-08-08 07:13:49 +00:00
Norikatsu Shigemura
9a85a84dd2 Fix build error WITH_HPN.
PR:			ports/135407
Submitted by:		maintainer implicit (already submitted)
Pointy hat to:		pgollucci
2009-06-27 14:52:57 +00:00
Philip M. Gollucci
c8f0f76d7d - Fix the previous commit
The patch file names for LPK were not updated completely in the Makefile

PR:             ports/135968
Submitted by:   Konstantin Kukushkin <dark@rambler-co.ru>
Approved by:    maintainer (implicit, shouyld have been in previous patch)
2009-06-23 17:15:33 +00:00
Philip M. Gollucci
cb484f5f5e - security/openssh-portable: update HPN and LPK patches to newer versions
- still broken on -CURRENT

PR:             ports/135407
Submitted by:   Denis Barov <dindin@dindin.ru> (maintainer)
2009-06-21 20:36:15 +00:00
Sergey A. Osokin
2a56663170 Fix build with WITH_LPK support for amd64 by change extra patches order.
Do not bump PORTREVISION.

Submitted by:	Fedor Dikarev aka fe at rambler dash co dot ru
Spotted by:	maxim
Approved by:	maintainer unavailable, i.e.
		$ whois dindin.ru | grep ^state
		state:      REGISTERED, NOT DELEGATED
PR:		amd64/134706
2009-05-19 10:13:28 +00:00
Norikatsu Shigemura
4de2c64b49 Fix HPN crash issue by using aes128-ctr, aes192-ctr and aes256-ctr.
Approved by:	pav
2009-05-17 03:00:11 +00:00
Pav Lucistnik
73a15551c8 - Update to 5.2p1
- Assign maintainership to the submitter

PR:		ports/134160
Submitted by:	Denis Barov <dindin@dindin.ru>
2009-05-15 11:00:27 +00:00
Munechika SUMIKAWA
ecec028843 Fix several problems with OPENSSH_OVERWRITE_BASE=1.
- Empty dir handling
- rc.d installation
- prefix modification in manuals

From:		Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
PR:		ports/133412
2009-04-22 06:01:39 +00:00
Pav Lucistnik
82e35ad7ad - Reset long-term inactive maintainer 2009-03-24 17:41:44 +00:00
Pav Lucistnik
8d8b5e57c5 - Integrate x509 certificate patch (optional, default off) from http://www.roumenpetrov.info/openssh/
PR:		ports/121438
Submitted by:	Dirk-Willem van Gulik <dirkx@webweaving.org>
Approved by:	maintainer timeout (mnag; 1 year)
2009-03-24 17:41:06 +00:00
Pav Lucistnik
47c045b38c - Add vendor patch for lpk patch that fixes runtime on amd64
PR:		ports/129092
Submitted by:	Jui-Nan Lin <jnlin@csie.nctu.edu.tw>
Approved by:	maintainer timeout (mnag; 4 months)
2009-03-24 17:33:41 +00:00