Commit graph

95 commits

Author SHA1 Message Date
Dirk Meyer
4695aeb326 Let PREFIX/libdata exists, even as it had been created by the port,
Logs on beton complaining about it.
2001-10-12 08:46:52 +00:00
Dirk Meyer
bf0a21e0d5 - Update to OpenSSH 2.9.9
- convert portname into lowercase
- PREFIX support for default sshd_config
- security-patch for cookie files obsolete
2001-10-03 13:15:16 +00:00
Dirk Meyer
0ebfc963fb - Extend patches in submakefiles, to build under 3.5 STABLE
PR:		28921
Submitted by:	aito@sets.ne.jp
2001-07-22 03:47:11 +00:00
Dirk Meyer
817e1df8d4 This adds two environment variables into environment of user: LANG & MM_CHARSET,
when used standard login via telnet or console

However when used openssh, then sshd does not setup LANG & MM_CHARSET into envir
onment for user in russian class

Code for this operation did not exists in openssh port !

PR:		21146
Submitted by:	odip@bionet.nsc.ru
2001-06-25 06:28:48 +00:00
Dirk Meyer
385c248462 change MAINTAINER to FreeBSD.org address 2001-06-24 04:28:57 +00:00
Dirk Meyer
e5d76b6f3d - Drop modifier L in makefile, all options have to be set
in lowercase "yes"
- Tested build with FreeBSD 4.1
  openssl-0.9.6a needs to be installed form ports.
	"FORBIDDEN" must be removed by hand.
2001-06-12 07:49:52 +00:00
Dirk Meyer
7a5330284c - Don't generate keys if BATCH is defined,
they will be generated when the package is installed.
- Update MAN1, MAN8
2001-06-11 20:14:15 +00:00
Dirk Meyer
3934d71996 - Fix FreeBSD specific patch, exit now if change of password fails.
Forwarded by dwcjr

Submitted by:	Udo.Schweigert@cert.siemens.de
2001-06-10 20:01:52 +00:00
Dirk Meyer
b65c113e04 Fix spelling and make portline happy (training spaces) 2001-06-10 11:15:04 +00:00
Dirk Meyer
66795bb241 - Switch to the user's uid before attempting to unlink the auth forwarding
file, nullifying the effects of a race.
- Bump PORTREVISION

Submitted by:	green@FreeBSD.org
2001-06-09 04:59:10 +00:00
Dirk Meyer
152bebfc5c - Update from OpenSSH 2.2.0 to OpenSSH 2.9
- Features:
  Possible use of sftp/sftp-server with older FreeBSD releases.
  Use a newer version independently from the Base system.
  Easier to test and fix possible security bugs.
- Bugs:
  build of pam_ssm.so isn't be supported any more
  Any file named "cookie" can be deleted by this and any older "sshd"
  with X11 Forwarding.
2001-06-08 08:03:26 +00:00
Michael Haro
efec8b8ef2 make openssh comply with section 4.4.9 (MAN vars in Makefile, not plist)
PR:		18711
Submitted by:	    Trevor Johnson <trevor@jpj.net>
2001-04-02 10:28:59 +00:00
Brian Feldman
6321589e72 Move the maintainer to ports. I don't have the capacity to continue
to support very old systems myself.
2001-02-21 04:45:25 +00:00
Kris Kennaway
06572d0f8f Add patch to prevent Bleichenbacher attack on SSH1 server. Bump
PORTREVISION.
2001-02-12 08:06:56 +00:00
Kris Kennaway
b2e36fd5b7 Bump PORTREVISION due to security fix. 2001-02-09 22:45:16 +00:00
Kris Kennaway
2ec13ccae9 Add patch to deal with possible remote root exploit found by
Michal Zalewski of the Bindview RAZOR Team, and some patches to hopefully
deal with compilation on older versions of FreeBSD.

Submitted by:	alfred
2001-02-09 22:37:50 +00:00
Kris Kennaway
41d5ec3b8e Mark FORBIDDEN: several problems including possible remote root
compromise. OpenSSH 2.3.0 included in 4.2-STABLE is not vulnerable.
2001-02-09 04:58:24 +00:00
Brian Feldman
287b0cc0f0 Add the security fix for inability to actually deny ssh-agent or X11
forwarding requests.
2000-11-14 04:51:10 +00:00
Brian Feldman
c512ae8ac9 Update to OpenSSH 2.2.0. This is an end-of-life update for the
ports-based OpenSSH.  OpenSSH has been in the base system for more
than long enough to justify not having to maintain two separate
FreeBSD versions of OpenSSH.
2000-11-04 23:04:25 +00:00
Satoshi Asami
7acef1cd7a Change PKGDIR from pkg/ to . Also fix places where ${PKGDIR} is
spelled out (many of which are ${PKGDIR}/MESSAGE -> ${PKGMESSAGE} type
fixes that shouldn't have been necessary) and the string "/pkg/"
appear.
2000-10-08 10:23:48 +00:00
Kris Kennaway
e088a4f458 Update all ports using OpenSSL and RSA to work without rsaref since
it is no longer required. Apologies to the various maintainers whom I
did not yet hear back from, but the ports freeze is coming up in a few
hours and I will be verifying all of these ports on a 4.1 machine
myself to catch any problems.
2000-09-22 01:59:06 +00:00
Brian Feldman
562b1a452e Fix Kerberos 4 support.
Mostly submitted by:	Mark A Gebert <geeb@thugsrus.org>
2000-07-30 19:14:17 +00:00
Brian Feldman
64e68af6e2 Update to OpenSSH 2.1.1 and fix SSHv2 serving (passwd botch). 2000-06-27 21:30:39 +00:00
Will Andrews
1dbf0287c0 Remove redundant/inappropriate CATEGORIES. People need to start reading
the Porter's Handbook.  :-)
2000-06-02 03:18:54 +00:00
Brian Feldman
fb5ef7a539 Also generate the DSA key from a package install.
Submitted by:	Dmitry Grigorovich <odip@bionet.nsc.ru>
2000-05-30 20:43:29 +00:00
Brian Feldman
c58d074b48 Fix this for OpenSSL versions <= 0.9.4. It seems that the OpenSSH people
think that it's good to immediately switch to the newest API, despite
the old API call being left deliberately compatible so that that wouldn't
have to happen.   OpenSSL_add_all_algorithms() is now, again,
SSLeay_add_all_algorithms.
2000-05-20 05:09:04 +00:00
Brian Feldman
108d8c4e59 Using login and executing a specific "command" are mutually exclusive,
so turn off use_login if there's a command.

Submitted by:	Vadim Vygonets <vadik@cs.huji.ac.il>
2000-05-13 19:52:35 +00:00
Brian Feldman
d14f2efe51 Oops, put the I back in INSTALL_SCRIPT. 2000-05-13 19:50:57 +00:00
Brian Feldman
1078626db3 Fix a mistake with pwcopy-related patches. 2000-05-13 19:25:57 +00:00
Brian Feldman
361c7337a3 Update to OpenSSH 2.1.0. They _FINALLY_ have distfiles, so now the CVS is
not needed for the port.

Big thanks to Issei-san for doing the majority of the work necessary for
this upgrade!

Submitted by:	Issei Suzuki <issei@jp.FreeBSD.org>
2000-05-13 17:11:01 +00:00
Brian Feldman
1083bcdc4f Upgrade to version 1.2.3 with a CVS of a few hours ago. New stuff in
this release is mostly the support for lots of ssh2.  Note that SSH2 is
not fully supported here yet, but it's mostly there; see README.openssh2.
2000-04-20 22:24:19 +00:00
Munechika SUMIKAWA
7fbdf514d9 update compatible libraries to -current. 2000-04-17 22:20:24 +00:00
Chris Piazza
3df86a88a9 Update with the new PORTNAME/PORTVERSION variables 2000-04-09 18:34:06 +00:00
Bill Fenner
b144d742c6 Fix socklen_t for FreeBSD 3.
PR:		ports/17491
2000-03-20 04:51:02 +00:00
Brian Feldman
672ba2f225 Update this to a CVS_DATE of a few minutes ago. 2000-03-03 06:10:10 +00:00
Brian Somers
b29a09511f Allow manual PORTS_CVS_SERVER and CVS_SITES settings.
Approved by:	maintainer
2000-03-02 06:43:18 +00:00
Yoshinobu Inoue
f24b58ff79 Woops fix my previous incorrect patch.
For green's honor, the patch I sent him for review was correct.
But because it is one line fix, I hand merged it into my
cvs committing environment, and then mistake happend.

This time, I applied correct fix which should have been aplied
at last commit.
2000-02-27 20:07:10 +00:00
Brian Feldman
50cae6391f Fix a coredump-y bug that crept in recently. 2000-02-25 05:35:33 +00:00
Brian Feldman
81d4a6cdbd Change install -C usage to install -c usage, fixing the install for older
install(1)s.

Submitted by:	Jim Archuleta <JimArchuleta@usa.net>
2000-02-23 11:30:04 +00:00
Yoshinobu Inoue
5b8db68630 Use 'IPv4or6' instead of AF_UNSPEC for 1st getaddrinfo() ai_family.
Without this fix, still query to AAAA recored happens even if
  -4 options is specified.

Reviewed by: green
2000-02-19 16:50:55 +00:00
Brian Feldman
ca2a43f884 Change a MAKE_ENV= to MAKE_ENV+=. This may fix problems people on
-STABLE are reporting.
2000-02-16 04:52:59 +00:00
Munechika SUMIKAWA
abcd350dae When IPv4-only client connected to a server which have IPv4 and IPv6
addresses, the client couldn't connect to the server via IPv4 because
the client gave up on first rresevport_af().
2000-02-15 13:09:45 +00:00
Brian Feldman
df4e9a1d72 Clean things up by using the new knob for OpenSSL usage.
Submitted by:	kris
2000-02-12 23:55:48 +00:00
Brian Feldman
145cf70f67 Tell the user that they're doing something wrong when USA_RESIDENT is
not set.
2000-02-10 12:23:49 +00:00
Munechika SUMIKAWA
442343e099 Simplify IPv6 checking.
Suggested by:	green
2000-02-09 03:28:48 +00:00
Munechika SUMIKAWA
ff51f86e8c the condition for USE_INET6 setting was opposite. 2000-02-01 17:04:02 +00:00
Brian Feldman
168595c023 Fix a "USET" -> "USE" again. IPv6 should work for this port. Again.
Go to a much more convenient scheme for distfiles/ignorefiles.  There
will be a lot less change from now on... the release name not being
embedded in them helps a lot.

Fix an unquoted "${CVS_DATE}" so cvs update isn't always run when
we're in one of the first 9 days of a month in CVS_DATE.

Update to OpenSSH-1.2.2, which doesn't really mean anything since there
are no source releases anyway...

The port has been verified to work with pdksh 5.2.14 as /bin/sh, and
about 7 times faster.
2000-02-01 08:12:06 +00:00
Brian Feldman
d9da1a8a4c Take off RESTRICTED, since this has been a proper package for some
time now, and is not a legal problem (see Bruce Schneier's latest
Crypto-Gram).  Basically, since it's unencumbered, it is alright.
2000-01-27 21:19:20 +00:00
Satoshi Asami
c34477283d List CVS files in IGNOREFILES so they will be properly deleted by "distclean".
Approved by:	green (well, I thought he was going to *do* it, but anyway....)
2000-01-26 11:34:28 +00:00
Munechika SUMIKAWA
857a522865 Use ${OSVERSION} instead of ${USE_INET6}. 2000-01-25 22:12:09 +00:00