kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/dropbear/Makefile

61 lines
1.7 KiB
Makefile
Raw Normal View History

Use the xauth builtin.mk to find the location on the target system. Just use the security/libtomcrypt/buildlink3.mk now the BUILDLINK_API_DEPENDS has been updated.
2014-03-14 23:40:17 +01:00
# $NetBSD: Makefile,v 1.31 2014/03/14 22:40:17 agc Exp $
Initial import of dropbear-0.36 into the NetBSD Packages Collection. The search for a small Secure Shell server to fit on a laptop with 4 megs ram and no hard disk was fruitless, so Matt Johnston decided to write his own, and Dropbear is the result. It implements various features of the SSH 2 protocol, including X11 and Authentication Agent forwarding. Dropbear is Open Source software, distributed under a MIT-style license. Features * A small memory footprint - Dropbear can compile to a 110kB statically linked binary with uClibc (and only minimal options selected). * Implements X11 forwarding, and authentication-agent forwarding for OpenSSH clients * Compatible with OpenSSH ~/.ssh/authorized_keys public key authentication * Features can easily be disabled when compiling to save space. * Preliminary TCP forwarding support (-L style only)
2003-08-19 17:46:44 +02:00
update to 2013.62 changes: -ECC (elliptic curve) support -curve25519-sha256@libssh.org support -misc fixes and improvements approved by The Maintainer
2014-01-27 20:53:06 +01:00
DISTNAME= dropbear-2013.62
Initial import of dropbear-0.36 into the NetBSD Packages Collection. The search for a small Secure Shell server to fit on a laptop with 4 megs ram and no hard disk was fruitless, so Matt Johnston decided to write his own, and Dropbear is the result. It implements various features of the SSH 2 protocol, including X11 and Authentication Agent forwarding. Dropbear is Open Source software, distributed under a MIT-style license. Features * A small memory footprint - Dropbear can compile to a 110kB statically linked binary with uClibc (and only minimal options selected). * Implements X11 forwarding, and authentication-agent forwarding for OpenSSH clients * Compatible with OpenSSH ~/.ssh/authorized_keys public key authentication * Features can easily be disabled when compiling to save space. * Preliminary TCP forwarding support (-L style only)
2003-08-19 17:46:44 +02:00
CATEGORIES= security
Upgrade to 0.38. This closes PR pkg/22984 by Matt Jhonston. Changes: 0.38 - Sat Oct 11 2003 16:28:13 +0800 o Default hostkey path changed to /etc/dropbear/dropbear_{rsa,dss}_host_key rather than /etc/dropbear_{rsa,dss}_host_key o Added SMALL and MULTI text files which have info on compiling for multiple binaries or small binaries o Allow for commandline definition of some options.h settings (without warnings) o Be more careful handling EINTR o More fixes for channel closing o Added multi-binary support o Improved logging of IPs, now get logged in all cases o Don't chew cpu when waiting for version identification string, also make sure that we kick off people if they don't auth within 5 minutes. o Various small fixes, warnings etc o sftp support works (relies on OpenSSH sftp binary or similar) o Added --disable-shadow option (requested by the floppyfw guys) 0.37 - Wed Sept 24 2003 19:42:12 +0800 o Various portability fixes, fixes for Solaris 9, Tru64 5.1, Mac OS X 10.2, AIX, BSDs o Updated LibTomMath to 0.27 and LibTomCrypt to 0.90 o Renamed util.{c,h} to dbutil.{c,h} to avoid conflicts with system util.h o Added some small changes so it'll work with AIX (plus Linux Affinity). Thanks to Shig for them. More bugfixes, etc.
2003-10-31 00:22:32 +01:00
MASTER_SITES= http://matt.ucc.asn.au/dropbear/releases/
First part of minor dropbear package cleanup - this part lets the package build as a normal user + don't refer to MAKEFLAGS outside of pkgsrc/mk + add comments to patch files + use BSD_INSTALL_* definitions in the build Makefile + re-order some parts of the pkgsrc Makefile + use pkgsrc definitions for CFLAGS.${OPSYS} rather than conditionals XXX - TO DO - fix the xauth issue here
2014-01-31 18:32:19 +01:00
EXTRACT_SUFX= .tar.bz2
Initial import of dropbear-0.36 into the NetBSD Packages Collection. The search for a small Secure Shell server to fit on a laptop with 4 megs ram and no hard disk was fruitless, so Matt Johnston decided to write his own, and Dropbear is the result. It implements various features of the SSH 2 protocol, including X11 and Authentication Agent forwarding. Dropbear is Open Source software, distributed under a MIT-style license. Features * A small memory footprint - Dropbear can compile to a 110kB statically linked binary with uClibc (and only minimal options selected). * Implements X11 forwarding, and authentication-agent forwarding for OpenSSH clients * Compatible with OpenSSH ~/.ssh/authorized_keys public key authentication * Features can easily be disabled when compiling to save space. * Preliminary TCP forwarding support (-L style only)
2003-08-19 17:46:44 +02:00
Update dropbear to 0.52. Build an scp binary and call it dbscp so it doesn't conflict with openssh. Changes since 0.50: 0.52 - Wed 12 November 2008 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel standard input/output to a TCP port-forwarded remote host. - Add "proxy command" support to dbclient, to allow using a spawned process for IO rather than a direct TCP connection. eg dbclient remotehost is equivalent to dbclient -J 'nc remotehost 22' remotehost (the hostname is still provided purely for looking up saved host keys) - Combine netcat-alike and proxy support to allow "multihop" connections, with comma-separated host syntax. Allows running dbclient user1@host1,user2@host2,user3@host3 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit like onion-routing. All connections are established from the local machine. The comma-separated syntax can also be used for scp/rsync, eg rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ to bounce through a few hosts. - Add -I "idle timeout" option (contributed by Farrell Aultman) - Allow restrictions on authorized_keys logins such as restricting commands to be run etc. This is a subset of those allowed by OpenSSH, doesn't yet allow restricting source host. - Use vfork() for scp on uClinux - Default to PATH=/usr/bin:/bin for shells. - Report errors if -R forwarding fails - Add counter mode cipher support, which avoids some security problems with the standard CBC mode. - Support zlib@openssh.com delayed compression for client/server. It can be required for the Dropbear server with the '-Z' option. This is useful for security as it avoids exposing the server to attacks on zlib by unauthenticated remote users, though requires client side support. - options.h has been split into options.h (user-changable) and sysoptions.h (less commonly changed) - Support "dbclient -s sftp" to specify a subsystem - Fix a bug in replies to channel requests that could be triggered by recent versions of PuTTY 0.51 - Thu 27 March 2008 - Make a copy of password fields rather erroneously relying on getwpnam() to be safe to call multiple times - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is as well) always use that program, ignoring isatty() and $DISPLAY - Wait until a process exits before the server closes a connection, so that an exit code can be sent. This fixes problems with exit codes not being returned, which could cause scp to fail.
2009-08-26 23:10:11 +02:00
MAINTAINER= snj@NetBSD.org
Initial import of dropbear-0.36 into the NetBSD Packages Collection. The search for a small Secure Shell server to fit on a laptop with 4 megs ram and no hard disk was fruitless, so Matt Johnston decided to write his own, and Dropbear is the result. It implements various features of the SSH 2 protocol, including X11 and Authentication Agent forwarding. Dropbear is Open Source software, distributed under a MIT-style license. Features * A small memory footprint - Dropbear can compile to a 110kB statically linked binary with uClibc (and only minimal options selected). * Implements X11 forwarding, and authentication-agent forwarding for OpenSSH clients * Compatible with OpenSSH ~/.ssh/authorized_keys public key authentication * Features can easily be disabled when compiling to save space. * Preliminary TCP forwarding support (-L style only)
2003-08-19 17:46:44 +02:00
HOMEPAGE= http://matt.ucc.asn.au/dropbear/dropbear.html
Update dropbear to 0.52. Build an scp binary and call it dbscp so it doesn't conflict with openssh. Changes since 0.50: 0.52 - Wed 12 November 2008 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel standard input/output to a TCP port-forwarded remote host. - Add "proxy command" support to dbclient, to allow using a spawned process for IO rather than a direct TCP connection. eg dbclient remotehost is equivalent to dbclient -J 'nc remotehost 22' remotehost (the hostname is still provided purely for looking up saved host keys) - Combine netcat-alike and proxy support to allow "multihop" connections, with comma-separated host syntax. Allows running dbclient user1@host1,user2@host2,user3@host3 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit like onion-routing. All connections are established from the local machine. The comma-separated syntax can also be used for scp/rsync, eg rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ to bounce through a few hosts. - Add -I "idle timeout" option (contributed by Farrell Aultman) - Allow restrictions on authorized_keys logins such as restricting commands to be run etc. This is a subset of those allowed by OpenSSH, doesn't yet allow restricting source host. - Use vfork() for scp on uClinux - Default to PATH=/usr/bin:/bin for shells. - Report errors if -R forwarding fails - Add counter mode cipher support, which avoids some security problems with the standard CBC mode. - Support zlib@openssh.com delayed compression for client/server. It can be required for the Dropbear server with the '-Z' option. This is useful for security as it avoids exposing the server to attacks on zlib by unauthenticated remote users, though requires client side support. - options.h has been split into options.h (user-changable) and sysoptions.h (less commonly changed) - Support "dbclient -s sftp" to specify a subsystem - Fix a bug in replies to channel requests that could be triggered by recent versions of PuTTY 0.51 - Thu 27 March 2008 - Make a copy of password fields rather erroneously relying on getwpnam() to be safe to call multiple times - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is as well) always use that program, ignoring isatty() and $DISPLAY - Wait until a process exits before the server closes a connection, so that an exit code can be sent. This fixes problems with exit codes not being returned, which could cause scp to fail.
2009-08-26 23:10:11 +02:00
COMMENT= Small SSH2 server and client, aimed at embedded market
First part of minor dropbear package cleanup - this part lets the package build as a normal user + don't refer to MAKEFLAGS outside of pkgsrc/mk + add comments to patch files + use BSD_INSTALL_* definitions in the build Makefile + re-order some parts of the pkgsrc Makefile + use pkgsrc definitions for CFLAGS.${OPSYS} rather than conditionals XXX - TO DO - fix the xauth issue here
2014-01-31 18:32:19 +01:00
LICENSE= modified-bsd
Initial import of dropbear-0.36 into the NetBSD Packages Collection. The search for a small Secure Shell server to fit on a laptop with 4 megs ram and no hard disk was fruitless, so Matt Johnston decided to write his own, and Dropbear is the result. It implements various features of the SSH 2 protocol, including X11 and Authentication Agent forwarding. Dropbear is Open Source software, distributed under a MIT-style license. Features * A small memory footprint - Dropbear can compile to a 110kB statically linked binary with uClibc (and only minimal options selected). * Implements X11 forwarding, and authentication-agent forwarding for OpenSSH clients * Compatible with OpenSSH ~/.ssh/authorized_keys public key authentication * Features can easily be disabled when compiling to save space. * Preliminary TCP forwarding support (-L style only)
2003-08-19 17:46:44 +02:00
First part of minor dropbear package cleanup - this part lets the package build as a normal user + don't refer to MAKEFLAGS outside of pkgsrc/mk + add comments to patch files + use BSD_INSTALL_* definitions in the build Makefile + re-order some parts of the pkgsrc Makefile + use pkgsrc definitions for CFLAGS.${OPSYS} rather than conditionals XXX - TO DO - fix the xauth issue here
2014-01-31 18:32:19 +01:00
GNU_CONFIGURE= yes
Honor PKG_SYSCONFDIR. The default host keys for dropbear are now found in ${PKG_SYSCONFDIR}/dropbear. Bump the PKGREVISION to 2.
2007-09-06 21:15:10 +02:00
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR:Q}
First part of minor dropbear package cleanup - this part lets the package build as a normal user + don't refer to MAKEFLAGS outside of pkgsrc/mk + add comments to patch files + use BSD_INSTALL_* definitions in the build Makefile + re-order some parts of the pkgsrc Makefile + use pkgsrc definitions for CFLAGS.${OPSYS} rather than conditionals XXX - TO DO - fix the xauth issue here
2014-01-31 18:32:19 +01:00
USE_TOOLS+= gmake
Honor PKG_SYSCONFDIR. The default host keys for dropbear are now found in ${PKG_SYSCONFDIR}/dropbear. Bump the PKGREVISION to 2.
2007-09-06 21:15:10 +02:00
add a "pam" pkg option and make it work with NetBSD's openpam if enabled
2005-08-09 19:31:06 +02:00
PKG_OPTIONS_VAR= PKG_OPTIONS.dropbear
PKG_SUPPORTED_OPTIONS= pam
First part of minor dropbear package cleanup - this part lets the package build as a normal user + don't refer to MAKEFLAGS outside of pkgsrc/mk + add comments to patch files + use BSD_INSTALL_* definitions in the build Makefile + re-order some parts of the pkgsrc Makefile + use pkgsrc definitions for CFLAGS.${OPSYS} rather than conditionals XXX - TO DO - fix the xauth issue here
2014-01-31 18:32:19 +01:00
.include "../../mk/bsd.prefs.mk"
add a "pam" pkg option and make it work with NetBSD's openpam if enabled
2005-08-09 19:31:06 +02:00
.include "../../mk/bsd.options.mk"
.if !empty(PKG_OPTIONS:Mpam)
For the "pam" package option, one needs to include pam.buildlink3.mk.
2007-09-06 17:55:06 +02:00
. include "../../mk/pam.buildlink3.mk"
add a "pam" pkg option and make it work with NetBSD's openpam if enabled
2005-08-09 19:31:06 +02:00
CONFIGURE_ARGS+= --enable-pam
Update dropbear to 0.52. Build an scp binary and call it dbscp so it doesn't conflict with openssh. Changes since 0.50: 0.52 - Wed 12 November 2008 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel standard input/output to a TCP port-forwarded remote host. - Add "proxy command" support to dbclient, to allow using a spawned process for IO rather than a direct TCP connection. eg dbclient remotehost is equivalent to dbclient -J 'nc remotehost 22' remotehost (the hostname is still provided purely for looking up saved host keys) - Combine netcat-alike and proxy support to allow "multihop" connections, with comma-separated host syntax. Allows running dbclient user1@host1,user2@host2,user3@host3 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit like onion-routing. All connections are established from the local machine. The comma-separated syntax can also be used for scp/rsync, eg rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ to bounce through a few hosts. - Add -I "idle timeout" option (contributed by Farrell Aultman) - Allow restrictions on authorized_keys logins such as restricting commands to be run etc. This is a subset of those allowed by OpenSSH, doesn't yet allow restricting source host. - Use vfork() for scp on uClinux - Default to PATH=/usr/bin:/bin for shells. - Report errors if -R forwarding fails - Add counter mode cipher support, which avoids some security problems with the standard CBC mode. - Support zlib@openssh.com delayed compression for client/server. It can be required for the Dropbear server with the '-Z' option. This is useful for security as it avoids exposing the server to attacks on zlib by unauthenticated remote users, though requires client side support. - options.h has been split into options.h (user-changable) and sysoptions.h (less commonly changed) - Support "dbclient -s sftp" to specify a subsystem - Fix a bug in replies to channel requests that could be triggered by recent versions of PuTTY 0.51 - Thu 27 March 2008 - Make a copy of password fields rather erroneously relying on getwpnam() to be safe to call multiple times - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is as well) always use that program, ignoring isatty() and $DISPLAY - Wait until a process exits before the server closes a connection, so that an exit code can be sent. This fixes problems with exit codes not being returned, which could cause scp to fail.
2009-08-26 23:10:11 +02:00
SUBST_CLASSES+= pam
SUBST_MESSAGE.pam= Enabling PAM in options.h
SUBST_STAGE.pam= post-patch
SUBST_FILES.pam= options.h
SUBST_SED.pam= -e "s/ENABLE_SVR_PASSWORD_AUTH/ENABLE_SVR_PAM_AUTH/"
add a "pam" pkg option and make it work with NetBSD's openpam if enabled
2005-08-09 19:31:06 +02:00
.endif
Update dropbear to 0.52. Build an scp binary and call it dbscp so it doesn't conflict with openssh. Changes since 0.50: 0.52 - Wed 12 November 2008 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel standard input/output to a TCP port-forwarded remote host. - Add "proxy command" support to dbclient, to allow using a spawned process for IO rather than a direct TCP connection. eg dbclient remotehost is equivalent to dbclient -J 'nc remotehost 22' remotehost (the hostname is still provided purely for looking up saved host keys) - Combine netcat-alike and proxy support to allow "multihop" connections, with comma-separated host syntax. Allows running dbclient user1@host1,user2@host2,user3@host3 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit like onion-routing. All connections are established from the local machine. The comma-separated syntax can also be used for scp/rsync, eg rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ to bounce through a few hosts. - Add -I "idle timeout" option (contributed by Farrell Aultman) - Allow restrictions on authorized_keys logins such as restricting commands to be run etc. This is a subset of those allowed by OpenSSH, doesn't yet allow restricting source host. - Use vfork() for scp on uClinux - Default to PATH=/usr/bin:/bin for shells. - Report errors if -R forwarding fails - Add counter mode cipher support, which avoids some security problems with the standard CBC mode. - Support zlib@openssh.com delayed compression for client/server. It can be required for the Dropbear server with the '-Z' option. This is useful for security as it avoids exposing the server to attacks on zlib by unauthenticated remote users, though requires client side support. - options.h has been split into options.h (user-changable) and sysoptions.h (less commonly changed) - Support "dbclient -s sftp" to specify a subsystem - Fix a bug in replies to channel requests that could be triggered by recent versions of PuTTY 0.51 - Thu 27 March 2008 - Make a copy of password fields rather erroneously relying on getwpnam() to be safe to call multiple times - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is as well) always use that program, ignoring isatty() and $DISPLAY - Wait until a process exits before the server closes a connection, so that an exit code can be sent. This fixes problems with exit codes not being returned, which could cause scp to fail.
2009-08-26 23:10:11 +02:00
OWN_DIRS+= ${PKG_SYSCONFDIR}/dropbear
Honor PKG_SYSCONFDIR. The default host keys for dropbear are now found in ${PKG_SYSCONFDIR}/dropbear. Bump the PKGREVISION to 2.
2007-09-06 21:15:10 +02:00
SUBST_CLASSES+= config
SUBST_MESSAGE.config= Fixing path to config directory.
SUBST_STAGE.config= post-build
update to 2013.62 changes: -ECC (elliptic curve) support -curve25519-sha256@libssh.org support -misc fixes and improvements approved by The Maintainer
2014-01-27 20:53:06 +01:00
SUBST_FILES.config= dropbear.8 dropbearkey.1
Honor PKG_SYSCONFDIR. The default host keys for dropbear are now found in ${PKG_SYSCONFDIR}/dropbear. Bump the PKGREVISION to 2.
2007-09-06 21:15:10 +02:00
SUBST_SED.config= -e "s,/etc/dropbear/,"${PKG_SYSCONFDIR:Q}"/dropbear/,g"
Update dropbear to 0.52. Build an scp binary and call it dbscp so it doesn't conflict with openssh. Changes since 0.50: 0.52 - Wed 12 November 2008 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel standard input/output to a TCP port-forwarded remote host. - Add "proxy command" support to dbclient, to allow using a spawned process for IO rather than a direct TCP connection. eg dbclient remotehost is equivalent to dbclient -J 'nc remotehost 22' remotehost (the hostname is still provided purely for looking up saved host keys) - Combine netcat-alike and proxy support to allow "multihop" connections, with comma-separated host syntax. Allows running dbclient user1@host1,user2@host2,user3@host3 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit like onion-routing. All connections are established from the local machine. The comma-separated syntax can also be used for scp/rsync, eg rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ to bounce through a few hosts. - Add -I "idle timeout" option (contributed by Farrell Aultman) - Allow restrictions on authorized_keys logins such as restricting commands to be run etc. This is a subset of those allowed by OpenSSH, doesn't yet allow restricting source host. - Use vfork() for scp on uClinux - Default to PATH=/usr/bin:/bin for shells. - Report errors if -R forwarding fails - Add counter mode cipher support, which avoids some security problems with the standard CBC mode. - Support zlib@openssh.com delayed compression for client/server. It can be required for the Dropbear server with the '-Z' option. This is useful for security as it avoids exposing the server to attacks on zlib by unauthenticated remote users, though requires client side support. - options.h has been split into options.h (user-changable) and sysoptions.h (less commonly changed) - Support "dbclient -s sftp" to specify a subsystem - Fix a bug in replies to channel requests that could be triggered by recent versions of PuTTY 0.51 - Thu 27 March 2008 - Make a copy of password fields rather erroneously relying on getwpnam() to be safe to call multiple times - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is as well) always use that program, ignoring isatty() and $DISPLAY - Wait until a process exits before the server closes a connection, so that an exit code can be sent. This fixes problems with exit codes not being returned, which could cause scp to fail.
2009-08-26 23:10:11 +02:00
# used by dbscp
CPPFLAGS+= -D_PATH_SSH_PROGRAM="\"${PREFIX}/bin/dbclient\""
Use the xauth builtin.mk to find the location on the target system. Just use the security/libtomcrypt/buildlink3.mk now the BUILDLINK_API_DEPENDS has been updated.
2014-03-14 23:40:17 +01:00
.include "../../x11/xauth/builtin.mk"
CPPFLAGS+= -DXAUTH_COMMAND="\"${XAUTHBASE}/bin/xauth\""
Update dropbear to 0.52. Build an scp binary and call it dbscp so it doesn't conflict with openssh. Changes since 0.50: 0.52 - Wed 12 November 2008 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel standard input/output to a TCP port-forwarded remote host. - Add "proxy command" support to dbclient, to allow using a spawned process for IO rather than a direct TCP connection. eg dbclient remotehost is equivalent to dbclient -J 'nc remotehost 22' remotehost (the hostname is still provided purely for looking up saved host keys) - Combine netcat-alike and proxy support to allow "multihop" connections, with comma-separated host syntax. Allows running dbclient user1@host1,user2@host2,user3@host3 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit like onion-routing. All connections are established from the local machine. The comma-separated syntax can also be used for scp/rsync, eg rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ to bounce through a few hosts. - Add -I "idle timeout" option (contributed by Farrell Aultman) - Allow restrictions on authorized_keys logins such as restricting commands to be run etc. This is a subset of those allowed by OpenSSH, doesn't yet allow restricting source host. - Use vfork() for scp on uClinux - Default to PATH=/usr/bin:/bin for shells. - Report errors if -R forwarding fails - Add counter mode cipher support, which avoids some security problems with the standard CBC mode. - Support zlib@openssh.com delayed compression for client/server. It can be required for the Dropbear server with the '-Z' option. This is useful for security as it avoids exposing the server to attacks on zlib by unauthenticated remote users, though requires client side support. - options.h has been split into options.h (user-changable) and sysoptions.h (less commonly changed) - Support "dbclient -s sftp" to specify a subsystem - Fix a bug in replies to channel requests that could be triggered by recent versions of PuTTY 0.51 - Thu 27 March 2008 - Make a copy of password fields rather erroneously relying on getwpnam() to be safe to call multiple times - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is as well) always use that program, ignoring isatty() and $DISPLAY - Wait until a process exits before the server closes a connection, so that an exit code can be sent. This fixes problems with exit codes not being returned, which could cause scp to fail.
2009-08-26 23:10:11 +02:00
First part of minor dropbear package cleanup - this part lets the package build as a normal user + don't refer to MAKEFLAGS outside of pkgsrc/mk + add comments to patch files + use BSD_INSTALL_* definitions in the build Makefile + re-order some parts of the pkgsrc Makefile + use pkgsrc definitions for CFLAGS.${OPSYS} rather than conditionals XXX - TO DO - fix the xauth issue here
2014-01-31 18:32:19 +01:00
CFLAGS.NetBSD+= -DHAVE_NETINET_IN_SYSTM_H
version bump to latest 2012.55 to 2013.58 also added a netbsd-specific build option (changes) 2013.58 - Thursday 18 April 2013 - Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz - Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder - Reject logins for other users when running as non-root, from Hans Harder - Disable client immediate authentication request by default, it prevents passwordless logins from working 2013.57 - Monday 15 April 2013 - Decreased connection setup time particularly with high latency connections, the number of round trips has been reduced for both client and server. CPU time hasn't been changed. - Client will send an initial key exchange guess to save a round trip. Dropbear implements an extension kexguess2@matt.ucc.asn.au to allow the first packet guess to succeed in wider circumstances than the standard behaviour. When communicating with other implementations the standard behaviour is used. - Client side: when public key or password authentication with $DROPBEAR_PASSWORD is used an initial authentication request will be sent immediately rather than querying the list of available methods. This behaviour is enabled by CLI_IMMEDIATE_AUTH option (on by default), please let the Dropbear author know if it causes any interoperability problems. - Implement client escape characters ~. (terminate session) and ~^Z (background session) - Server will more reliably clean up utmp when connection is closed, reported by Mattias Walstr<C3><B6>m - Don't crash if /dev/urandom isn't writable (RHEL5), thanks to Scott Case - Add "-y -y" client option to skip host key checking, thanks to Hans Harder - scp didn't work properly on systems using vfork(), thanks to Frank Van Uffelen - Added IUTF8 terminal mode support (Linux and Mac OS). Not standardised yet though probably will be soon - Some verbose DROPBEAR_TRACE output is now hidden unless $DROPBEAR_TRACE2 enviroment variable is set - Fix using asymmetric MAC algorithms (broke in ) - Renamed configure.in to configure.ac to quieten autoconf, from Mike Frysinger 2013.56 - Thursday 21 March 2013 - Allow specifying cipher (-c) and MAC (-m) lists for dbclient - Allow using 'none' cipher or MAC (off by default, use options.h). Encryption is used during authentication then disabled, similar to OpenSSH HPN mode - Allow a user in immediately if the account has a blank password and blank passwords are enabled - Include a few extra sources of entropy from /proc on Linux, hash private keys as well. Dropbear will also write gathered entropy back into /dev/urandom - Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h) - Don't sent bad address "localhost" for -R forward connections, reported by Denis Bider - Add "-B" runtime option to allow blank passwords - Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks - A few improvements for Android from Reimar D<C3><B6>ffinger - Fix memory leak for TCP forwarded connections to hosts that timed out, reported by Norbert Bencz<C3><BA>r. Appears to be a very long-standing bug. - Fix "make clean" for out of tree builds - Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset
2013-09-14 05:40:01 +02:00
Update dropbear to 0.52. Build an scp binary and call it dbscp so it doesn't conflict with openssh. Changes since 0.50: 0.52 - Wed 12 November 2008 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel standard input/output to a TCP port-forwarded remote host. - Add "proxy command" support to dbclient, to allow using a spawned process for IO rather than a direct TCP connection. eg dbclient remotehost is equivalent to dbclient -J 'nc remotehost 22' remotehost (the hostname is still provided purely for looking up saved host keys) - Combine netcat-alike and proxy support to allow "multihop" connections, with comma-separated host syntax. Allows running dbclient user1@host1,user2@host2,user3@host3 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit like onion-routing. All connections are established from the local machine. The comma-separated syntax can also be used for scp/rsync, eg rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ to bounce through a few hosts. - Add -I "idle timeout" option (contributed by Farrell Aultman) - Allow restrictions on authorized_keys logins such as restricting commands to be run etc. This is a subset of those allowed by OpenSSH, doesn't yet allow restricting source host. - Use vfork() for scp on uClinux - Default to PATH=/usr/bin:/bin for shells. - Report errors if -R forwarding fails - Add counter mode cipher support, which avoids some security problems with the standard CBC mode. - Support zlib@openssh.com delayed compression for client/server. It can be required for the Dropbear server with the '-Z' option. This is useful for security as it avoids exposing the server to attacks on zlib by unauthenticated remote users, though requires client side support. - options.h has been split into options.h (user-changable) and sysoptions.h (less commonly changed) - Support "dbclient -s sftp" to specify a subsystem - Fix a bug in replies to channel requests that could be triggered by recent versions of PuTTY 0.51 - Thu 27 March 2008 - Make a copy of password fields rather erroneously relying on getwpnam() to be safe to call multiple times - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is as well) always use that program, ignoring isatty() and $DISPLAY - Wait until a process exits before the server closes a connection, so that an exit code can be sent. This fixes problems with exit codes not being returned, which could cause scp to fail.
2009-08-26 23:10:11 +02:00
INSTALLATION_DIRS= share/doc/dropbear ${PKGMANDIR}/man1 ${PKGMANDIR}/man8
BUILD_TARGET= all scp
Install the manual pages for dropbear. Bump the PKGREVISION to 1.
2007-09-06 18:31:55 +02:00
update to 0.44 changes: -IPv6 support -client added -bugfixes XXX dropbear wants to use /dev/random per default now which makes it unusable on systems w/o entropy source. I've patched it back to /dev/urandom. There might be security concerns.
2005-01-18 18:30:59 +01:00
post-install:
Update dropbear to 0.52. Build an scp binary and call it dbscp so it doesn't conflict with openssh. Changes since 0.50: 0.52 - Wed 12 November 2008 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel standard input/output to a TCP port-forwarded remote host. - Add "proxy command" support to dbclient, to allow using a spawned process for IO rather than a direct TCP connection. eg dbclient remotehost is equivalent to dbclient -J 'nc remotehost 22' remotehost (the hostname is still provided purely for looking up saved host keys) - Combine netcat-alike and proxy support to allow "multihop" connections, with comma-separated host syntax. Allows running dbclient user1@host1,user2@host2,user3@host3 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit like onion-routing. All connections are established from the local machine. The comma-separated syntax can also be used for scp/rsync, eg rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ to bounce through a few hosts. - Add -I "idle timeout" option (contributed by Farrell Aultman) - Allow restrictions on authorized_keys logins such as restricting commands to be run etc. This is a subset of those allowed by OpenSSH, doesn't yet allow restricting source host. - Use vfork() for scp on uClinux - Default to PATH=/usr/bin:/bin for shells. - Report errors if -R forwarding fails - Add counter mode cipher support, which avoids some security problems with the standard CBC mode. - Support zlib@openssh.com delayed compression for client/server. It can be required for the Dropbear server with the '-Z' option. This is useful for security as it avoids exposing the server to attacks on zlib by unauthenticated remote users, though requires client side support. - options.h has been split into options.h (user-changable) and sysoptions.h (less commonly changed) - Support "dbclient -s sftp" to specify a subsystem - Fix a bug in replies to channel requests that could be triggered by recent versions of PuTTY 0.51 - Thu 27 March 2008 - Make a copy of password fields rather erroneously relying on getwpnam() to be safe to call multiple times - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is as well) always use that program, ignoring isatty() and $DISPLAY - Wait until a process exits before the server closes a connection, so that an exit code can be sent. This fixes problems with exit codes not being returned, which could cause scp to fail.
2009-08-26 23:10:11 +02:00
${INSTALL_PROGRAM} ${WRKSRC}/scp ${DESTDIR}/${PREFIX}/bin/dbscp
update to 0.44 changes: -IPv6 support -client added -bugfixes XXX dropbear wants to use /dev/random per default now which makes it unusable on systems w/o entropy source. I've patched it back to /dev/urandom. There might be security concerns.
2005-01-18 18:30:59 +01:00
this uses zlib, so use buildlink3 and include zlib/buildlink3.mk.
2004-06-26 21:30:58 +02:00
.include "../../devel/zlib/buildlink3.mk"
update to 0.53.1 changes: -misc fixes and improvements -build against system libtommath/crypt
2011-03-10 11:20:16 +01:00
.include "../../math/ltm/buildlink3.mk"
.include "../../security/libtomcrypt/buildlink3.mk"
Initial import of dropbear-0.36 into the NetBSD Packages Collection. The search for a small Secure Shell server to fit on a laptop with 4 megs ram and no hard disk was fruitless, so Matt Johnston decided to write his own, and Dropbear is the result. It implements various features of the SSH 2 protocol, including X11 and Authentication Agent forwarding. Dropbear is Open Source software, distributed under a MIT-style license. Features * A small memory footprint - Dropbear can compile to a 110kB statically linked binary with uClibc (and only minimal options selected). * Implements X11 forwarding, and authentication-agent forwarding for OpenSSH clients * Compatible with OpenSSH ~/.ssh/authorized_keys public key authentication * Features can easily be disabled when compiling to save space. * Preliminary TCP forwarding support (-L style only)
2003-08-19 17:46:44 +02:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink