fb7f0b4422
- Switch to using @sample keyword, fixing orphans. Upstream note on "6.6.1" [1]: OpenSSH 6.5 and 6.6 sometimes encode a value used in the curve25519 key exchange incorrectly, causing connection failures about 0.2% of the time when this method is used against a peer that implements the method properly. Fix the problem and disable the curve25519 KEX when speaking to OpenSSH 6.5 or 6.6. This version will identify itself as 6.6.1 to enable the compatability code. [1] https://lists.mindrot.org/pipermail/openssh-unix-dev/2014-April/032494.html
40 lines
1.6 KiB
Text
40 lines
1.6 KiB
Text
@comment slogin must be deleted first
|
|
bin/slogin
|
|
bin/scp
|
|
bin/sftp
|
|
bin/ssh
|
|
bin/ssh-add
|
|
bin/ssh-agent
|
|
bin/ssh-keygen
|
|
bin/ssh-keyscan
|
|
%%NOTBASE%%@exec if [ -f %D/etc/ssh_config -a ! -f %D/etc/ssh/ssh_config ]; then ln %D/etc/ssh_config %D/etc/ssh/ssh_config ; fi
|
|
%%NOTBASE%%@exec if [ -f %D/etc/sshd_config -a ! -f %D/etc/ssh/sshd_config ]; then ln %D/etc/sshd_config %D/etc/ssh/sshd_config ; fi
|
|
%%OVERWRITE_BASE%%@cwd /
|
|
%%NOTBASE%%etc/ssh/moduli
|
|
@sample etc/ssh/ssh_config.sample
|
|
@sample etc/ssh/sshd_config.sample
|
|
%%OVERWRITE_BASE%%@cwd %%BASEPREFIX%%
|
|
%%NOTBASE%%%%X509%%@dirrmtry etc/ssh/ca
|
|
%%NOTBASE%%@dirrmtry etc/ssh
|
|
@exec if [ -f %D/etc/ssh_host_ecdsa_key ] && grep -q DSA %D/etc/ssh_host_ecdsa_key; then echo; echo "\!/ Warning \!/"; echo; echo "Your %D/etc/ssh_host_ecdsa_key is not a valid ECDSA key. It is incorrectly"; echo "a DSA key due to a bug fixed in 2012 in the security/openssh-portable port."; echo; echo "Regenerate a proper one with: rm -f %D/etc/ssh_host_ecdsa_key*; service openssh restart"; echo; echo "Clients should not see any key change warning since the ECDSA was not valid and was not actually"; echo "used by the server."; echo; echo "\!/ Warning \!/"; fi
|
|
sbin/sshd
|
|
libexec/sftp-server
|
|
libexec/ssh-keysign
|
|
libexec/ssh-pkcs11-helper
|
|
@cwd %%MANPREFIX%%
|
|
man/man1/sftp.1.gz
|
|
man/man1/ssh-add.1.gz
|
|
man/man1/ssh-agent.1.gz
|
|
man/man1/ssh-keygen.1.gz
|
|
man/man1/ssh-keyscan.1.gz
|
|
man/man1/scp.1.gz
|
|
man/man1/ssh.1.gz
|
|
man/man1/slogin.1.gz
|
|
man/man5/moduli.5.gz
|
|
man/man5/ssh_config.5.gz
|
|
man/man5/sshd_config.5.gz
|
|
%%X509%%man/man5/ssh_engine.5.gz
|
|
man/man8/sftp-server.8.gz
|
|
man/man8/sshd.8.gz
|
|
man/man8/ssh-keysign.8.gz
|
|
man/man8/ssh-pkcs11-helper.8.gz
|