Commit graph

181 commits

Author SHA1 Message Date
Munechika SUMIKAWA
6e0bfd0c33 Make IPv6-enable ssh works on socks environment.
Submitted by:	Masahide -mac- NODA <mac@clave.gr.jp>
Reviewed by:	shin, Robert Muir <rmuir@looksharp.net>
		Toshihiko Kodama <kodama@ayame.mfd.cs.fujitsu.co.jp>
Approved by:	torstenb
2000-02-24 08:27:36 +00:00
Munechika SUMIKAWA
7b2ffcdb39 Make buildable on IPv4-only kernel.
Specified by:	ache
Reviewed by:	torstenb
2000-02-20 17:30:54 +00:00
Andrey A. Chernov
5ce5ad59b1 Disable ipv6 until it will be fixed by someone.
With latest -current configure fails:
checking getaddrinfo bug... buggy
Fatal: You must get working getaddrinfo() function.
       or you can specify "--disable-ipv6".
2000-02-14 21:52:05 +00:00
Munechika SUMIKAWA
7f1c13ce26 Add 'ipv6' on CATEGORIES.
Approved by:	torstenb
2000-02-14 12:29:16 +00:00
Torsten Blum
62e8b86072 Checfor OSVERSION _or_ USE_INET6 when deciding if IPv6 support should
be added. This is done to support the build on pre 4.0 machines with
the KAME IPv6 stack installed. It has been verified to build+work
with both 4.0 and 3.4+kame.

Org. patch Submitted By: Munechika SUMIKAWA <sumikawa@ebina.hitachi.co.jp>
2000-02-12 19:27:40 +00:00
Torsten Blum
eb66565459 Add IPv6 support to ssh.
The IPv6 patch was obtained from the kame repository and has been
been writen by KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>

Due to the whole mess with different patches it was necessary to include
both the IPv6 patch and patch-ssh-1.2.27-bsd.tty.chown in ${PATCHDIR}.
Since both patches modify the configure script it was also necessary
to rebuild it via autoconf from configure.in. I've decided to use
USE_AUTOCONF instead of including the re-build configure script in
${FILESDIR}

Obtained from:	KAME/WIDE
2000-01-14 19:37:39 +00:00
Chris Piazza
37014e3b5d Patches are now available from www.ssh.org/patches
Submitted by:	Issei Suzuki <issei@jp.freebsd.org>
1999-11-25 21:26:03 +00:00
Warner Losh
ab96a24696 Default to not allowing root logins. This makes it consistant with
OpenSSH.  Users desiring the old functionality can edit their
sshd-config files by hand for new installs.
1999-11-20 19:54:31 +00:00
Chris Piazza
603bf4c4de Use a different PATCH_SITE so we don't keep getting people telling us
that the port is broken.

Thanks to Charles "spork" <spork@super-g.com>
1999-11-18 01:34:59 +00:00
Warner Losh
272f7058db Don't overflow rsa bits. As seen on bugtraq and elsewhere.
Submitted by: drow@false.org
Reviewed by: ache
PR: 14749
1999-11-16 07:21:36 +00:00
Brian Feldman
fb16378220 Spelling error correction. 1999-11-08 05:52:40 +00:00
Eivind Eklund
0447a53637 Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite
some time ago).
1999-11-06 19:43:18 +00:00
Torsten Blum
4bc02dcc5e Turn Root Login on again.
It has been changed in rev. 1.4 of this file, but the committer forgot to
mention it on the log.
1999-09-10 21:01:55 +00:00
Chris Piazza
a8438b23fe Path for problem with tty ownership with chflags and chown in BSD 4.4
variants.  Fixes a security bug in tty allocation.

PR:		13515
PR:		13536
Submitted by: 	Issei Suzuki <issei@jp.FreeBSD.org> (ssh2 maintainer)
1999-09-02 17:08:38 +00:00
Michael Haro
65ab34a667 FreeBSD.ORG -> FreeBSD.org
Prompted by PR:  13476, 13477
Submitted by:  KATO Tsuguru
1999-08-31 06:53:31 +00:00
Peter Wemm
a53421230c $Id$ -> $FreeBSD$ 1999-08-31 01:53:22 +00:00
Michael Haro
5281212be3 chmod -> ${CHMOD}
chown -> ${CHOWN}
1999-08-22 19:01:07 +00:00
Mark Murray
cdb4ca853a SUID ssh breaks kerberos; disable in the kerberized case. I even
like the idea of breaking SUID bit permanently, but I'll leave this
up to the maintainer.
1999-08-09 17:12:44 +00:00
Michael Haro
fc3bcccc53 Remove manpages from PLIST and use MLINKS instead of a bunch of ${LN} calls. 1999-07-16 06:09:43 +00:00
Masafumi Max NAKANE
85400e7624 Update the master site. 1999-07-07 15:36:40 +00:00
Tim Vanderhoek
a84b5b5f94 #4/4 enforcing Caps, no period
[Has anyone figured-out what makes the number 393 so interesting to PW, now?]

I wonder what was going through Jordan's head during his infamous
$Id$-smashing commit.

Before I forget....

Thanks to naddy@mips.rhein-neckar.de (Christian Weisgerber) for prompting
this commit.  See msg-id: 7geokh$tje$1@mips.rhein-neckar.de
1999-06-26 19:22:14 +00:00
Brian Somers
2170922420 Only use trimdomain() if __FreeBSD_version > 320000
It was available in 3.0 & 3.1 but would truncate at UT_HOSTSIZE-1
1999-06-18 11:37:30 +00:00
SADA Kenji
48500b76a6 PR: ports/12037
Submitted by:	Issei Suzuki <issei@jp.FreeBSD.ORG>
Upgrade to 1.2.27.
# I'm not maintainer but it seems that torstenb is too busy to
# look the PR and many people want new version ssh port.
1999-06-15 20:14:04 +00:00
Brian Somers
ec05f7b3ba Always use trimdomain(), not just #if __FreeBSD_version >= 400004
The port maintainer must be away....
1999-05-07 15:41:49 +00:00
Brian Somers
efca57d6d3 Reduce the copy of the DISPLAY variable using
trimdomain() so that ``ssh machine.domain xterm''
comes out with a machine name of (say) ``machine:10.0''.
Reviewed by: torstenb@
1999-04-11 09:10:34 +00:00
Brian Somers
f58bba4d52 Call trimdomain() to reduce the size of the ut_host
field before reveting to storing an IP number.
Reviewed by: torstenb@
1999-04-11 09:08:31 +00:00
Andrey A. Chernov
13b379da07 detect/use -current libwrap 1999-04-03 03:35:50 +00:00
Bill Fumerola
c42cc3ec22 (1) Add a new MASTER_SITE
(2) Reorganize MASTER_SITEs
(3) Remove reference to Phil Karn's ssh speedups, it is now distributed
    as a full source package, and not a patch kit. If we want to use it,
    we will have to make a new port for it.
(4) Use ${ECHO} instead of echo, ${RM} instead of rm, ${LN} instead of ln
(5) Use ${FALSE} instead of false
(6) Remove multiple blank lines in Makefile
(7) Remove trailing blank lines in pkg/DESCR

Submitted by:	 Alex Perel <veers@disturbed.net> (1, 2, 4, 6)
		 Bill Fumerola <billf@FreeBSD.org> (3, 5, 7)
1999-03-13 18:51:11 +00:00
Satoshi Asami
4b07f0329b Change *_DEPENDS on lang/perl5 to USE_PERL5 so we won't have any
dependencies to perl5 in -current.  This might cause some unwanted
perl5 installations on -stable (if it was originally RUN_DEPENDS,
perl5 will now be installed during build too, etc.), but its lifetime
is limited anyway.
1999-01-02 00:12:21 +00:00
Andrey A. Chernov
f5f3107e73 add official kerberos patch 1998-11-10 13:20:21 +00:00
David E. O'Brien
3c1a7c6ce8 configure with "--without-x" if X11BASE/bin/xauth is missing.
Requested by:	Studded@gorean.org
1998-10-30 06:15:18 +00:00
Satoshi Asami
5ae4f4e88c Um, be careful when you copy stuff around -- change the second
CONFIGURE_ARGS defintion to use "+=" so it won't override the first.

While I'm here, GNU_CONFIGURE implies --prefix=${PREFIX} so take it out.
1998-10-08 13:11:52 +00:00
Jordan K. Hubbard
b05e6687f6 Better depends.
Also Suggested by:	asami
1998-10-08 06:17:56 +00:00
Jordan K. Hubbard
efa62cf97c Clean this file up a bit.
Suggested by:	asami
1998-10-08 06:16:18 +00:00
Jordan K. Hubbard
564a72f782 Properly reference the rsaref sources, which are required during the build
of ssh now.  If anyone knows of a way of making the build dependency here
less gross, I'm listening! :)
1998-10-08 03:42:23 +00:00
Jordan K. Hubbard
37df81f735 Depend on ports collection rsaref, since we have it now already
available "broken out."
1998-10-07 23:03:44 +00:00
Dima Ruban
43f2f84d94 Make RSA stuff work on alpha (or on any other 64bit architecture) 1998-09-26 04:42:09 +00:00
Satoshi Asami
6470b4dc9c tcp_wrapper is now converted to ELF. While I'm here, fix smail Makefile:
libwrap is a shared library so it should be LIB_DEPENDS, and delete
some spaces and tab-only lines.
1998-09-17 10:53:31 +00:00
Satoshi Asami
668e0f51f4 Use ${PERL5} wherever appropriate. Largely untested; hope my eyeball
checks haven't missed anything.

Submitted by:	dima
1998-09-15 21:31:59 +00:00
Chuck Robey
62728f8f6f Repair a linkage problem, whereis the ssh port was trying to
specify the location of system libs.
Reviewed by:	Mark Murray, David O'Brien
1998-09-13 20:38:06 +00:00
Tim Vanderhoek
5d6505ebbb The pkg_create(1) handles symlinks correctly. Delist manpages. 1998-08-19 19:51:10 +00:00
Vanilla I. Shu
70905e2b13 Use ${PERL_VERSION} on perl version.
Reminded by: asami
1998-08-17 12:12:34 +00:00
Vanilla I. Shu
3793a4b6da Change perl version to 5.00502. 1998-08-17 10:42:38 +00:00
Dima Ruban
3412dccd60 If KRB5_HOME is defined, compile ssh with krb5 support. 1998-08-01 22:24:55 +00:00
Satoshi Asami
8e9ae80248 Fix up slogin1.1 -> ssh1.1 symlink too. 1998-07-25 19:46:37 +00:00
Warner Losh
a68fb80d7f upgrade to 1.2.26 for security improvements 1998-07-11 23:10:54 +00:00
Andrey A. Chernov
5e0fb7b766 Do not install slogin1.1 manpage, no such program 1998-06-12 11:39:32 +00:00
Andrey A. Chernov
9f6ee49977 Fix all *1 links 1998-06-12 11:38:41 +00:00
Dima Ruban
64e630d83b 1.2.22 -> 1.2.25
Somebody needs to go through patch-af to check it, since I'm not sure
about some of the stuff.

This version fixes a security flaw in previous version.
1998-06-12 07:55:14 +00:00
David E. O'Brien
ca174e8825 Two "/usr/local" --> ${PREFIX} 1998-05-23 08:53:38 +00:00
Matthew Hunt
3f8b97a1c3 Allow use of Phil Karn's patchkit that implements DES/DES3 in
fast assembly code.  Patchfile must be manually placed in DISTDIR,
as described in the Makefile.

PR:		6446
Submitted by:	Jonathan Hanna <pangolin@rogers.wave.ca>
1998-05-22 06:05:44 +00:00
Jordan K. Hubbard
a4854ffdf8 Further adjustments to english. 1998-03-10 13:58:16 +00:00
Jordan K. Hubbard
753501db5d Clean up and clarify some english user prompts in the Makefile which
have been bugging me for many months. :)
1998-03-10 13:56:14 +00:00
Andrey A. Chernov
810624b0c8 Fix rare DES empty passwords bug 1998-02-13 22:02:39 +00:00
Andrey A. Chernov
07199742b4 Don't print "No mail" for FreeBSD , just print nothing 1998-01-22 13:37:55 +00:00
Andrey A. Chernov
8cff771ce2 Fix .hushlogin support
Remove FreeBSD mail check, now done elsewhere in the code
Use bsdi code to warn about expired/changed passwords
Move misplaced login_close up
1998-01-22 12:04:15 +00:00
Warner Losh
935e28b3a2 Upgrade to ssh 1.2.22. Please send problems with the upgrade to me.
1.2.22 fixes a security hole with ssh-agent, so users are encouraged
to upgrade.

OK'd by: Torsten Blum (torstenb@freebsd.org)
1998-01-20 23:50:15 +00:00
Warner Losh
957ddb3bd6 Merge in change requested by theo:
OpenBSD and FreeBSD now both use rresvport.  This is a nop for
	FreeBSD, but for OpenBSD this picks random port numbers.
Submitted by:	deraadt@cvs.openbsd.org
1997-12-24 18:48:46 +00:00
Warner Losh
944d8022fd Make the SOCKS support from USE_SOCKS play nicely with the socks5 port. 1997-12-24 18:46:11 +00:00
Mark Murray
39e2a4dd90 Change to use perl5.004_04 1997-11-21 15:31:33 +00:00
Dima Ruban
2f35303014 ftp.dsi.unimi.it -> idea.sec.dsi.unimi.it 1997-11-10 22:04:42 +00:00
Ralf S. Engelschall
cd7cd16736 fixed little typo. 1997-10-10 14:29:12 +00:00
Torsten Blum
c2119976db Upgrade to 1.2.21 1997-09-16 00:13:25 +00:00
Masafumi Max NAKANE
30e38e5731 mv -> ${MV}. 1997-09-11 18:31:52 +00:00
John Polstra
4b40e7aa2b Prevent this server error message:
fatal: Local: Agent socket bind failed: Address already in use

It would happen when the server tried to create the Unix domain
socket "/tmp/ssh-username/agent-socket-123", if the file already
existed.  It could already exist if it happened to be left over from
a system crash.  This patch unlinks the file before attempting the
bind operation.

I will send this patch to ssh-bugs@cs.hut.fi too.
1997-07-19 19:28:35 +00:00
Satoshi Asami
dc5ea736c7 Update name of perl executable in dependencies to "perl5.00401".
Use USE_PERL5 when appropriate (i.e., defined in both BUILD_DEPENDS
and RUN_DEPENDS).
1997-07-18 05:04:20 +00:00
Adam David
3ee1d3f448 typo in comment 1997-07-01 02:39:26 +00:00
Andrey A. Chernov
e8c4d489b5 Handle expired and changed password timeouts now 1997-06-11 11:09:00 +00:00
John Polstra
c7621bb9af Don't remove the host key on pkg_delete. It is irreplaceable. 1997-06-02 04:28:48 +00:00
James FitzGibbon
67f2b0e5df Upgrade all ports requiring perl5.003 to perl5.004
Remove p5-CGI.pm and p5-ExtUtils-Embed; they are now part of the perl5.004 distribution.
1997-05-24 13:17:16 +00:00
David Nugent
9c41c4452d login_getclass() -> login_getpwclass(). 1997-05-10 19:03:09 +00:00
Andrey A. Chernov
e2101afed1 Fix 3 error with login.conf
1) pw->pw_class was always zero since not copied
2) login_getuserclass() used instead of login_getclass(), so
default class always returned
3) env pointer can be redefined at the moment of setusercontext() call
1997-05-02 20:20:49 +00:00
Peter Wemm
25c2756dd9 Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just
regenerated them to fix the line numbers.  Also, I added two commented out
options in Makefile, one to tell sshd that a group writeable homedir
is OK because all users are in their own group, and the other is to allow
an unencrypted connection (which is dangerous since it can lead to
compromise of keys), but on a secure network it's damn useful for backups
etc.
1997-04-25 05:01:06 +00:00
Wolfram Schneider
df8f6f276f Add virtual category 'perl5'. 1997-04-20 13:53:29 +00:00
Andrey A. Chernov
62128c83d1 Disable extended LOGIN_CAP $MAIL processing until it will be fixed
properly. In old variant /var/mail/root was always checked instead of
/var/mail/<user>
1997-04-16 21:07:36 +00:00
Andrey A. Chernov
29fe1065ad Upgrade to 1.2.19 1997-04-16 19:48:30 +00:00
Paul Traina
d7a878f85c Back out previous patch, I got confused by an old sshd.conf file 1997-04-01 05:52:30 +00:00
Andrey A. Chernov
f742a35be3 Fix argument parsing loop in ssh-agent (original 1.2.18 bug) 1997-04-01 04:17:21 +00:00
Paul Traina
37bbce243a Generate host key in /etc to match the port 1997-04-01 03:34:25 +00:00
Andrey A. Chernov
797920ff49 Upgrade to 1.2.18 1997-03-28 23:30:39 +00:00
Andrey A. Chernov
96a7483d0d Add LOGIN_CAP abilities
Submitted by: davidn
1997-02-27 00:44:35 +00:00
Peter Wemm
67faab29d6 Make one of our changes for -current work on 2.1. In -current, rresvport()
ignores it's argument (it's meaningless, the kernel keeps the state), but
2.1.x use it.  ssh was effectively giving a random port to 2.1.

Originally noticed by: John Polstra <jdp@polstra.com>
1996-12-27 08:42:41 +00:00
Adam David
80926da9e8 1.2.16 --> 1.2.17
(new agent forwarding protocol that is said to work this time)
1996-11-20 12:45:59 +00:00
Satoshi Asami
300c45cf2e Use MAN? macros. CATEGORIES+= -> CATEGORIES. 1996-11-18 11:44:27 +00:00
Andrey A. Chernov
d67a4ad9e9 Remove my ptys patch, because this code is unused, openpty is used instead
Mimic login more closely now:
1) Put usual Copyright line
2) You have mail
1996-11-12 01:47:39 +00:00
Andrey A. Chernov
a13d148e44 Use BSD naming convention for pty names, it fixes two problems:
1) Too many false open syscalls on pty allocation
2) (more serious) ssh not use about half of available ptys
1996-11-12 00:13:38 +00:00
Andrey A. Chernov
4a2478071f Change syslog facility from DAEMON to AUTH 1996-11-02 00:18:49 +00:00
Andrey A. Chernov
d6d04d104d Use system shared libgmp now 1996-10-24 23:46:15 +00:00
Andrey A. Chernov
3c3ae1773e It fixes a really annoying error
reporting bug which happens if the remote end uses tcp_wrappers to control
sshd access (it says something like "read: no such file or directory" or
"read: permission denied" instead of "connection closed").  I already sent it
in to the ssh mailing list.
Submitted by: fenner
1996-10-17 23:00:41 +00:00
Andrey A. Chernov
dfd4904911 Upgrade to official 1.2.16
Fix PLIST
1996-10-16 04:56:12 +00:00
Satoshi Asami
95137d2010 Oh my goodness! Satoshi is finally fed up and decided to "clean up"
all the COMMENTs!  No package names, no version numbers, no "this is
absolutix-3.1.2" type comments that have zero information contents.

Now, without any bad examples to follow, nobody has an excuse to import
a port with those kind of comments. :)

Phew!  238 ports modified!
1996-10-10 05:05:35 +00:00
Satoshi Asami
7a4662e170 Remove LIB_DEPENDS on libz, it's in /usr/src now. 1996-08-19 10:31:04 +00:00
Peter Wemm
4f8ec254e4 Have ssh use rresvport() to get a privileged socket instead of doing it
itself.  This means it obeys the portrange sysctl's.
1996-08-12 14:17:53 +00:00
Peter Wemm
702bf4b966 Several fixes/improvements :-
- protect the secret RSA etc/ssh_host_key.  It is now generated on install
   (either by pkg_add or make install) if not already present and is not
   ever added to a package since it's your host's credentials.  It should
   not be removed on pkg_delete, since you are in big trouble if you did
   this (for example) pkg_delete ssh-1.2.14; pkg_add ssh-1.2.15.tgz.
 - fix the broken manpage symlink when compressing man pages (slogin.1
   has been causing /etc/weekly to generate cron messages)
 - zlib 1.0.4 is now "blessed" again, the ssh working sources now use this
   instead of v0.95. The decompression problem was fixed in either 1.0.3
   or 1.0.4.  Also, the current version of cvs uses zlib 1.0.4 as well..
 - perl5.002 -> perl5.003

Reviewed by: torstenb
1996-08-08 13:57:02 +00:00
Jordan K. Hubbard
f97e248437 The checksum for the ssh tarball was out of date - fix it. 1996-07-29 02:33:33 +00:00
Paul Traina
98eae442a0 If using socks, make sure you find socks library 1996-07-22 23:06:08 +00:00
Torsten Blum
e1b1692d10 Back out andrews change - 1.2.14.1 is not an official ssh release. 1996-07-18 11:33:47 +00:00
Andrey A. Chernov
c48be169c3 Use += for USA_RESIDENT MASTER_SITES 1996-07-17 19:19:10 +00:00
Andrey A. Chernov
e66e7030c0 Upgrade to 1.2.14.1
Misc bugfixes
1996-07-16 00:33:19 +00:00
Satoshi Asami
0457b095e5 Add back checksum for rsaref2, used only while building in the US.
People, if you do a "make makesum" on a non-US machine, don't forget
to add this line back before commiting it:

MD5 (rsaref2.tar.gz) = 0b474c97bf1f1c0d27e5a95f1239c08d
1996-07-05 10:50:31 +00:00