Commit graph

125 commits

Author SHA1 Message Date
hubertf
2a82d50a62 At least in 1.4Q, there was a login_cap.h, but it didn't define LOGIN_SETENV.
Make sure that is defined before using it!
2000-10-19 02:02:57 +00:00
jlam
9caae45dc2 The name of the rc.d script has changed. Update message to reflect new
name.
2000-09-28 09:25:15 +00:00
fredb
ab20de453f Set USE_RSAREF2=NO by default. Hopefully, this will discourage people from
actually using rsaref, while we ponder the case for removing it completely.
2000-09-26 19:59:53 +00:00
jlam
a5062d0a73 Install rc.d control script as "sshd" instead of "sshd.sh" to comply with
how NetBSD's rc.d interprets script names.  Also add REQUIRE and PROVIDE
sections to control scripts so they can be used directly in NetBSD's rc.d
system.
2000-09-20 04:49:19 +00:00
fredb
0c6b58570c Reorganize crypto handling, as discussed on tech-pkg. Remove all
RESTRICTED= variables that were predicated on former U.S. export
regulations. Add CRYPTO=, as necessary, so it's still possible to
exclude all crypto packages from a build by setting MKCRYPTO=no
(but "lintpkgsrc -R" will no longer catch them).

Specifically,

- - All packages which set USE_SSL just lose their RESTRICTED
    variable, since MKCRYPTO responds to USE_SSL directly.
- - realplayer7 and ns-flash keep their RESTRICTED, which is based
    on license terms, but also gain the CRYPTO variable.
- - srp-client is now marked broken, since the distfile is evidently
    no longer available. On this, we're no worse off than before.
    [We haven't been mirroring the distfile, or testing the build!]
- - isakmpd gets CRYPTO for RESTRICTED, but remains broken.
- - crack loses all restrictions, as it does not evidently empower
    a user to utilize strong encryption (working definition: ability
    to encode a message that requires a secret key plus big number
    arithmetic to decode).
2000-09-09 19:40:14 +00:00
abs
4f0c7fb98a ssh 1.x ssh-keygen does not have -d for DSA keys - remove section that
tries to crete DSA key if not present and gave error on every startup
2000-08-28 08:52:59 +00:00
hubertf
402899809a Replace MIRROR_DISTFILES and NO_CDROM with the more descriptive and
more fine-grained NO_{BIN,SRC}_ON_{FTP,CDROM} definitions.

MIRROR_DISTFILES and NO_CDROM are now dead.
2000-08-18 22:46:29 +00:00
thorpej
696a9dc9e6 Comment out Kerberos 5 support, for now. 2000-08-10 17:00:39 +00:00
itojun
da46e04308 mention license change issue in 1.2.27 -> 1.2.28. 2000-08-05 21:56:23 +00:00
jlam
d6b3864d13 Make all the installed /usr/pkg/etc/rc.d/sshd.sh files match.
Also default to "start" command if run with no arguments.
2000-07-24 16:44:52 +00:00
veego
27fb1b00ea Add Solaris support. 2000-07-17 11:57:32 +00:00
thorpej
07f3f2be64 Fix a bug where if you were logging in from an account which had not
authorized key and for which there was no kerberos principle, sshd
would segfault.
2000-04-18 19:02:20 +00:00
itojun
41313b3fc5 revise CONFLICTS line. 2000-03-26 14:28:12 +00:00
itojun
394061aa31 split security/ssh and security/ssh6.
security/ssh6: IPv4/v6 ready, socks unavailable, kerberos available (not tested)
security/ssh: IPv4 onlyready, socks available, kerberos available (not tested)

should be integrated into one whenever socks support becomes aware of
getaddrinfo/getnameinfo.  two directories with tons of patches/patch-* is
a maintenance headache.
2000-03-20 02:25:29 +00:00
jlam
f65a67f93e SSH_DONT_USE_IDEA is deprecated, so include USE_IDEA in BUILD_DEFS instead. 2000-03-18 18:32:16 +00:00
tron
4100b13566 Sync with latest changes to "patch-ab" and "patch-aj". 2000-03-18 17:11:58 +00:00
itojun
9e2063e78d mark socksified build broken, this has been unavailable for some time. 2000-03-18 04:36:22 +00:00
itojun
1b1eaab28b address PR9630. compilation chokes on IPv4-only kernel.
this basically is due to synchronization issue between WIDE ssh IPv6 patch
and netbsd repository.
2000-03-18 04:35:23 +00:00
mjl
db5341b7cb Adapt ssh to use our login.conf framework. 2000-03-06 14:34:18 +00:00
itojun
bdf6d63256 can't install ssh on top of openssh, due to conflicting files. 2000-03-03 06:07:31 +00:00
wiz
b4256a3e97 find -> ${FIND} 2000-03-02 20:59:37 +00:00
jlam
b799da545d Make this compile with KERBEROS=5. 2000-02-11 00:06:35 +00:00
wiz
82e95f100a minor fixes for pkglint 2000-02-05 06:03:25 +00:00
tron
c1bf3aad29 Link "ssh-askpass" with run time library path for X11 libraries. Fixes
PR pkg/9242 by Christian E. Hopps.
2000-01-22 23:30:42 +00:00
jlam
25bcac8237 Use new variable USE_IDEA, which is YES/NO, and mention that SSH_DONT_USE_IDEA
is deprecated.  Defaults to USE_IDEA=YES to match current default build.
2000-01-17 16:17:58 +00:00
abs
df05aef71f Strip trailing '.', and/or leading '(a|an) ' 2000-01-05 15:37:50 +00:00
kim
6c61c9d4d9 It looks like libwrap wasn't used ever since it became a dynamic lib?
I recommend checking their binary to everyone (e.g. with ldd).
1999-12-28 03:54:19 +00:00
kim
ece8add434 One of our patches changes --with-kerberos5 to --with-krb5 1999-12-28 03:53:06 +00:00
tron
9c5bfd98fb Sync checksum. Fixes PR pkg/9055 and pkg/9057. 1999-12-26 16:15:34 +00:00
kim
4f2efc1e04 Regenerate md5, keep checksums for the old "distribution" patches
in Makefile as comments for future reference.
1999-12-25 05:31:49 +00:00
kim
608fa6b2df Folded in IPv6 and Kerberos IV patches, so that both can be
compiled.  This also fixes problems with Kerberos IV and V
support clashing (you still have to choose one or the other
at compile time, though).

Compiles and runs on 1.4O -- needs testing on 1.4.2, and
also some closer looking at certain patches (e.g. patch-au
has a "#if 0" that could maybe be something else).
1999-12-25 05:28:33 +00:00
fredb
fd61b1c973 regen 1999-12-16 09:14:08 +00:00
jonb
12274b1bd7 Fix ns32k specific syntax error. Require use of rsaref-2.0p3 instead of
faulty rsaref-2.0p2 while I'm in here.
1999-12-16 08:18:04 +00:00
sommerfeld
63efa7eca9 Catch up to rev 1.11 of regular patch-sum 1999-12-05 13:58:59 +00:00
bouyer
f00e96c70b Oups, forgot to commit this one (thanks Bernd :) 1999-12-02 09:21:10 +00:00
bouyer
0485dc98c9 Make this work on solaris. 1999-12-01 20:48:35 +00:00
bouyer
9d6a650c95 Use $(INSTALL_DATA), not /usr/bin/install -c ... 1999-12-01 20:48:17 +00:00
explorer
d0c4e63e89 Make this work with -current's krb5 stuff. 1999-11-30 09:08:44 +00:00
sommerfeld
a1a7006d94 Revise previous fix (overly restrictive range check) 1999-11-13 17:32:20 +00:00
abs
5e760986d1 Enable alternate rsh path with SSH_RSHPATH
Patch from NoRM <norm@mono.org>
1999-11-12 16:34:29 +00:00
sommerfeld
952c898915 fix security problem with using RSAREF with ssh, reported in FreeBSD
PR14749 (missing range checks in rsaglue.c)
see http://www.freebsd.org/cgi/query-pr.cgi?pr=14749
1999-11-12 14:10:52 +00:00
agc
4e05a4a3c5 s/DONT_USE_IDEA/SSH_DONT_USE_IDEA/ to make it more obvious which package
uses this definition.
1999-10-19 08:49:48 +00:00
tron
8d7d754dfa Remove me as maintainer of those packages. 1999-10-07 17:41:46 +00:00
soren
3a94a4cd47 Use a relative path for bsd.pkg.mk instead of relying on the search path. 1999-09-28 20:40:02 +00:00
kim
08ecb5e863 Kerberos IV support (cannot have both IV and V at the same time).
Note that I reverted some LIBZ stuff in patch-ac that was (while
correct) not necessary and conflicted with the Kerberos patch.

I have not tested the combination of Kerberos IV and INET6 (yet).
1999-09-18 22:04:55 +00:00
kim
360620265b Regen. 1999-09-18 21:10:18 +00:00
kim
e01b589f8d Regenerate offset and fuzzy patches. 1999-09-18 21:08:20 +00:00
hubertf
34af151913 this builds fine without user interaction 1999-09-08 22:18:04 +00:00
sommerfeld
1ae0a316ec Fix USE_INET6 build:
- revise patch-aq so it doesn't conflict with ipv6 patches.
	- adjust checksums
	- set up alternate patch-sum-v6 patchfile used when
	  v6 patches are added.
1999-09-06 05:30:19 +00:00
tron
a9af877984 Compare "${USE_INET6}" explicitly with "YES" so that you can override
settings at the command line.
1999-09-03 22:00:52 +00:00