Commit graph

157 commits

Author SHA1 Message Date
Mario Sergio Fujikawa Ferreira
d124027c46 typo clean up police: \s -> \t 2001-02-14 20:19:44 +00:00
Kris Kennaway
bd89fe016e Remove some commented out makefile cruft. 2001-02-09 23:07:20 +00:00
Kris Kennaway
ccd8c2a771 Sigh, the patch released by ssh.com was wrong (kill() had the arguments
in the wrong order). Fix this, and bump PORTREVISION again. The window
was only a few minutes, but this won't disrupt things, and someone may
have updated in that window given the prominence of the problem.

Obtained from:	Matt Power <mhpower@BOS.BINDVIEW.COM> via Bugtraq
2001-02-09 23:06:50 +00:00
Kris Kennaway
d6bcba7837 Commit fixes for the two recent security problems found by BINDVIEW
and Core-SDI, and bump PORTREVISION.
2001-02-09 22:56:39 +00:00
Kris Kennaway
41d5ec3b8e Mark FORBIDDEN: several problems including possible remote root
compromise. OpenSSH 2.3.0 included in 4.2-STABLE is not vulnerable.
2001-02-09 04:58:24 +00:00
Kris Kennaway
5bb0ef2e28 Oops, meant to mark FORBIDDEN, not BROKEN, to prevent package builds. 2001-02-06 02:38:43 +00:00
Kris Kennaway
65e7b33330 Note the reason why this port is still at 1.2.27 (1.2.30 is under
the more restrictive SSH2 license), deprecate this port in favour of
OpenSSH as a parting shot (still allow people to build by setting an
environment variable) and remove myself as maintainer since I don't
have any interest in maintaining it.

About the only thing this port does which OpenSSH can't do well is
Kerberized logins..once that is working properly in OpenSSH I'm planning
to nuke the port.
2001-02-06 01:22:25 +00:00
Satoshi Asami
a0b090ea7f Rename PLIST.X11 to pkg-plist.x11. 2000-10-08 06:03:48 +00:00
Kris Kennaway
36de6efd90 Fennerize MASTER_SITES and replace with a fresh set which a) actually carry
the distfile and b) are probably better sorted networkologically for the
majority of users. Trim DESCR down to a sane length.
2000-09-21 23:37:29 +00:00
Kris Kennaway
1d852620cb Remove dependency on rsaref, comment out RESTRICTED line (but leave it
there for reference in case we replace these with a CRYPTO variable), and
bump PORTREVISION.
2000-09-17 08:45:12 +00:00
Kris Kennaway
b57e6c0761 Don't install the startup script if ssh is being run out of inetd.conf
PR:		15691
Submitted by:	Roger Marquis <marquis@roble.com>
2000-08-23 09:57:05 +00:00
Will Andrews
1dbf0287c0 Remove redundant/inappropriate CATEGORIES. People need to start reading
the Porter's Handbook.  :-)
2000-06-02 03:18:54 +00:00
Kris Kennaway
e41b97add2 Freshen MASTER_SITEs 2000-04-24 08:19:36 +00:00
Kris Kennaway
fbe0989ef0 Style cleanup of the makefile.
Add USE_PERL5 by default.
2000-04-24 02:03:30 +00:00
Kris Kennaway
ac6176ea8e Sort PLIST and use ssh-keygen1 for key generation, not ssh-keygen which
may point to the ssh2 port.

PR:		ports/13167
2000-04-24 01:41:47 +00:00
Kris Kennaway
43c4bd620c Take over maintainership of this port since the previous maintainer
is too busy to keep up with it.

Approved by:	asami
2000-04-21 09:19:54 +00:00
Michael Haro
4cf4ab0a2f Correct whitespace introduced during PORTNAME conversion and portlint 2000-04-21 08:19:33 +00:00
Kris Kennaway
db4a1e6d2d Don't make sshd listen on two ports by default (!) - this "feature" was
silently added on 2000/01/14 as part of the IPv6 support. The default sshd
config had sshd listening both on port 22 and port 722 (this was apparently
intended to facilitate traffic-shaping in that different queueing priorities
could be assigned to ssh sessions on the two ports).

Combine two patches into one.

Submitted by:	peter
2000-04-21 06:35:12 +00:00
Kris Kennaway
36e2fdf71b Unbreak Kerberos5 support. 2000-04-21 06:21:46 +00:00
Kris Kennaway
5cbe0e5066 Convert patch to unidiff; no functional changes. 2000-04-21 06:18:48 +00:00
Michael Haro
86bef88226 balance parens 2000-04-17 15:18:40 +00:00
Jeremy Lea
b4455771cc Standardize all user defined options to the booleans WITH_FOO and
WITHOUT_FOO.  Begin the process of reserving these prefixes for user defined
options.

No comment by:	ports
2000-04-17 00:19:02 +00:00
Will Andrews
b0aff2c200 Sorry to everyone, the commits previously broke installing for these ports.
Thanks to those who reported this.

PRs:		17927, 17937
Submitted by:	Keith Davey <redlance@primenet.com>
		maintainer (ssh2)
2000-04-14 15:04:29 +00:00
Chris Piazza
3df86a88a9 Update with the new PORTNAME/PORTVERSION variables 2000-04-09 18:34:06 +00:00
Will Andrews
810b23015a Add better sshd startup scripts; specifically, allow restarting and
stopping the server.

Martti's submission did not include -h, which I added because if I had
added the scripts the way he submitted them, the server wouldn't be
started on startup.

PR:		10196
Submitted by:	Martti Kuparinen <martti.kuparinen@ericsson.com>
Reviewed by:	kris (partially)
No response:	maintainers (PR opened February 22, 1999)
2000-04-05 22:21:44 +00:00
Munechika SUMIKAWA
b734a81d1c - re-enable TCP_NODELAY
Submitted by:	Arjan.deVet@adv.iae.nl (Arjan de Vet)

- do not exit in failure to connect using IPv6 and try to IPv4
  when connecting to dualstack hosts.

Approved by:	torstenb
2000-02-24 14:11:58 +00:00
Munechika SUMIKAWA
6e0bfd0c33 Make IPv6-enable ssh works on socks environment.
Submitted by:	Masahide -mac- NODA <mac@clave.gr.jp>
Reviewed by:	shin, Robert Muir <rmuir@looksharp.net>
		Toshihiko Kodama <kodama@ayame.mfd.cs.fujitsu.co.jp>
Approved by:	torstenb
2000-02-24 08:27:36 +00:00
Munechika SUMIKAWA
7b2ffcdb39 Make buildable on IPv4-only kernel.
Specified by:	ache
Reviewed by:	torstenb
2000-02-20 17:30:54 +00:00
Andrey A. Chernov
5ce5ad59b1 Disable ipv6 until it will be fixed by someone.
With latest -current configure fails:
checking getaddrinfo bug... buggy
Fatal: You must get working getaddrinfo() function.
       or you can specify "--disable-ipv6".
2000-02-14 21:52:05 +00:00
Munechika SUMIKAWA
7f1c13ce26 Add 'ipv6' on CATEGORIES.
Approved by:	torstenb
2000-02-14 12:29:16 +00:00
Torsten Blum
62e8b86072 Checfor OSVERSION _or_ USE_INET6 when deciding if IPv6 support should
be added. This is done to support the build on pre 4.0 machines with
the KAME IPv6 stack installed. It has been verified to build+work
with both 4.0 and 3.4+kame.

Org. patch Submitted By: Munechika SUMIKAWA <sumikawa@ebina.hitachi.co.jp>
2000-02-12 19:27:40 +00:00
Torsten Blum
eb66565459 Add IPv6 support to ssh.
The IPv6 patch was obtained from the kame repository and has been
been writen by KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>

Due to the whole mess with different patches it was necessary to include
both the IPv6 patch and patch-ssh-1.2.27-bsd.tty.chown in ${PATCHDIR}.
Since both patches modify the configure script it was also necessary
to rebuild it via autoconf from configure.in. I've decided to use
USE_AUTOCONF instead of including the re-build configure script in
${FILESDIR}

Obtained from:	KAME/WIDE
2000-01-14 19:37:39 +00:00
Chris Piazza
37014e3b5d Patches are now available from www.ssh.org/patches
Submitted by:	Issei Suzuki <issei@jp.freebsd.org>
1999-11-25 21:26:03 +00:00
Warner Losh
ab96a24696 Default to not allowing root logins. This makes it consistant with
OpenSSH.  Users desiring the old functionality can edit their
sshd-config files by hand for new installs.
1999-11-20 19:54:31 +00:00
Chris Piazza
603bf4c4de Use a different PATCH_SITE so we don't keep getting people telling us
that the port is broken.

Thanks to Charles "spork" <spork@super-g.com>
1999-11-18 01:34:59 +00:00
Warner Losh
272f7058db Don't overflow rsa bits. As seen on bugtraq and elsewhere.
Submitted by: drow@false.org
Reviewed by: ache
PR: 14749
1999-11-16 07:21:36 +00:00
Brian Feldman
fb16378220 Spelling error correction. 1999-11-08 05:52:40 +00:00
Eivind Eklund
0447a53637 Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite
some time ago).
1999-11-06 19:43:18 +00:00
Torsten Blum
4bc02dcc5e Turn Root Login on again.
It has been changed in rev. 1.4 of this file, but the committer forgot to
mention it on the log.
1999-09-10 21:01:55 +00:00
Chris Piazza
a8438b23fe Path for problem with tty ownership with chflags and chown in BSD 4.4
variants.  Fixes a security bug in tty allocation.

PR:		13515
PR:		13536
Submitted by: 	Issei Suzuki <issei@jp.FreeBSD.org> (ssh2 maintainer)
1999-09-02 17:08:38 +00:00
Michael Haro
65ab34a667 FreeBSD.ORG -> FreeBSD.org
Prompted by PR:  13476, 13477
Submitted by:  KATO Tsuguru
1999-08-31 06:53:31 +00:00
Peter Wemm
a53421230c $Id$ -> $FreeBSD$ 1999-08-31 01:53:22 +00:00
Michael Haro
5281212be3 chmod -> ${CHMOD}
chown -> ${CHOWN}
1999-08-22 19:01:07 +00:00
Mark Murray
cdb4ca853a SUID ssh breaks kerberos; disable in the kerberized case. I even
like the idea of breaking SUID bit permanently, but I'll leave this
up to the maintainer.
1999-08-09 17:12:44 +00:00
Michael Haro
fc3bcccc53 Remove manpages from PLIST and use MLINKS instead of a bunch of ${LN} calls. 1999-07-16 06:09:43 +00:00
Masafumi Max NAKANE
85400e7624 Update the master site. 1999-07-07 15:36:40 +00:00
Tim Vanderhoek
a84b5b5f94 #4/4 enforcing Caps, no period
[Has anyone figured-out what makes the number 393 so interesting to PW, now?]

I wonder what was going through Jordan's head during his infamous
$Id$-smashing commit.

Before I forget....

Thanks to naddy@mips.rhein-neckar.de (Christian Weisgerber) for prompting
this commit.  See msg-id: 7geokh$tje$1@mips.rhein-neckar.de
1999-06-26 19:22:14 +00:00
Brian Somers
2170922420 Only use trimdomain() if __FreeBSD_version > 320000
It was available in 3.0 & 3.1 but would truncate at UT_HOSTSIZE-1
1999-06-18 11:37:30 +00:00
SADA Kenji
48500b76a6 PR: ports/12037
Submitted by:	Issei Suzuki <issei@jp.FreeBSD.ORG>
Upgrade to 1.2.27.
# I'm not maintainer but it seems that torstenb is too busy to
# look the PR and many people want new version ssh port.
1999-06-15 20:14:04 +00:00
Brian Somers
ec05f7b3ba Always use trimdomain(), not just #if __FreeBSD_version >= 400004
The port maintainer must be away....
1999-05-07 15:41:49 +00:00