aboutsummaryrefslogtreecommitdiffstats
path: root/security/ssh
Commit message (Collapse)AuthorAgeFilesLines
* Further adjustments to english.jkh1998-03-101-4/+4
|
* Clean up and clarify some english user prompts in the Makefile whichjkh1998-03-101-6/+6
| | | | have been bugging me for many months. :)
* Fix rare DES empty passwords bugache1998-02-141-0/+13
|
* Don't print "No mail" for FreeBSD , just print nothingache1998-01-221-3/+15
|
* Fix .hushlogin supportache1998-01-221-48/+74
| | | | | | Remove FreeBSD mail check, now done elsewhere in the code Use bsdi code to warn about expired/changed passwords Move misplaced login_close up
* Upgrade to ssh 1.2.22. Please send problems with the upgrade to me.imp1998-01-213-426/+359
| | | | | | | 1.2.22 fixes a security hole with ssh-agent, so users are encouraged to upgrade. OK'd by: Torsten Blum (torstenb@freebsd.org)
* Merge in change requested by theo:imp1997-12-251-1/+1
| | | | | | OpenBSD and FreeBSD now both use rresvport. This is a nop for FreeBSD, but for OpenBSD this picks random port numbers. Submitted by: deraadt@cvs.openbsd.org
* Make the SOCKS support from USE_SOCKS play nicely with the socks5 port.imp1997-12-251-2/+2
|
* Change to use perl5.004_04markm1997-11-211-4/+4
|
* ftp.dsi.unimi.it -> idea.sec.dsi.unimi.itdima1997-11-111-2/+2
|
* fixed little typo.rse1997-10-101-2/+2
|
* Upgrade to 1.2.21torstenb1997-09-163-65/+67
|
* mv -> ${MV}.max1997-09-121-2/+2
|
* Prevent this server error message:jdp1997-07-201-0/+13
| | | | | | | | | | | | fatal: Local: Agent socket bind failed: Address already in use It would happen when the server tried to create the Unix domain socket "/tmp/ssh-username/agent-socket-123", if the file already existed. It could already exist if it happened to be left over from a system crash. This patch unlinks the file before attempting the bind operation. I will send this patch to ssh-bugs@cs.hut.fi too.
* Update name of perl executable in dependencies to "perl5.00401".asami1997-07-181-4/+4
| | | | | Use USE_PERL5 when appropriate (i.e., defined in both BUILD_DEPENDS and RUN_DEPENDS).
* typo in commentadam1997-07-011-2/+2
|
* Handle expired and changed password timeouts nowache1997-06-111-19/+70
|
* Don't remove the host key on pkg_delete. It is irreplaceable.jdp1997-06-021-1/+0
|
* Upgrade all ports requiring perl5.003 to perl5.004jfitz1997-05-241-4/+4
| | | | Remove p5-CGI.pm and p5-ExtUtils-Embed; they are now part of the perl5.004 distribution.
* login_getclass() -> login_getpwclass().davidn1997-05-111-2/+2
|
* Fix 3 error with login.confache1997-05-031-24/+38
| | | | | | | 1) pw->pw_class was always zero since not copied 2) login_getuserclass() used instead of login_getclass(), so default class always returned 3) env pointer can be redefined at the moment of setusercontext() call
* Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I justpeter1997-04-256-67/+76
| | | | | | | | | regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc.
* Add virtual category 'perl5'.wosch1997-04-201-2/+2
|
* Disable extended LOGIN_CAP $MAIL processing until it will be fixedache1997-04-171-1/+1
| | | | | properly. In old variant /var/mail/root was always checked instead of /var/mail/<user>
* Upgrade to 1.2.19ache1997-04-176-78/+151
|
* Back out previous patch, I got confused by an old sshd.conf filepst1997-04-011-2/+2
|
* Fix argument parsing loop in ssh-agent (original 1.2.18 bug)ache1997-04-011-0/+13
|
* Generate host key in /etc to match the portpst1997-04-011-2/+2
|
* Upgrade to 1.2.18ache1997-03-298-190/+191
|
* Add LOGIN_CAP abilitiesache1997-02-275-37/+237
| | | | Submitted by: davidn
* Make one of our changes for -current work on 2.1. In -current, rresvport()peter1996-12-271-1/+2
| | | | | | | ignores it's argument (it's meaningless, the kernel keeps the state), but 2.1.x use it. ssh was effectively giving a random port to 2.1. Originally noticed by: John Polstra <jdp@polstra.com>
* 1.2.16 --> 1.2.17adam1996-11-203-19/+19
| | | | (new agent forwarding protocol that is said to work this time)
* Use MAN? macros. CATEGORIES+= -> CATEGORIES.asami1996-11-181-5/+6
|
* Remove my ptys patch, because this code is unused, openpty is used insteadache1996-11-121-15/+35
| | | | | | Mimic login more closely now: 1) Put usual Copyright line 2) You have mail
* Use BSD naming convention for pty names, it fixes two problems:ache1996-11-121-0/+19
| | | | | 1) Too many false open syscalls on pty allocation 2) (more serious) ssh not use about half of available ptys
* Change syslog facility from DAEMON to AUTHache1996-11-021-0/+19
|
* Use system shared libgmp nowache1996-10-252-89/+183
|
* It fixes a really annoying errorache1996-10-181-0/+32
| | | | | | | | reporting bug which happens if the remote end uses tcp_wrappers to control sshd access (it says something like "read: no such file or directory" or "read: permission denied" instead of "connection closed"). I already sent it in to the ssh mailing list. Submitted by: fenner
* Upgrade to official 1.2.16ache1996-10-165-69/+98
| | | | Fix PLIST
* Oh my goodness! Satoshi is finally fed up and decided to "clean up"asami1996-10-101-1/+1
| | | | | | | | | | all the COMMENTs! No package names, no version numbers, no "this is absolutix-3.1.2" type comments that have zero information contents. Now, without any bad examples to follow, nobody has an excuse to import a port with those kind of comments. :) Phew! 238 ports modified!
* Remove LIB_DEPENDS on libz, it's in /usr/src now.asami1996-08-191-2/+1
|
* Have ssh use rresvport() to get a privileged socket instead of doing itpeter1996-08-121-0/+26
| | | | itself. This means it obeys the portrange sysctl's.
* Several fixes/improvements :-peter1996-08-082-5/+14
| | | | | | | | | | | | | | | | - protect the secret RSA etc/ssh_host_key. It is now generated on install (either by pkg_add or make install) if not already present and is not ever added to a package since it's your host's credentials. It should not be removed on pkg_delete, since you are in big trouble if you did this (for example) pkg_delete ssh-1.2.14; pkg_add ssh-1.2.15.tgz. - fix the broken manpage symlink when compressing man pages (slogin.1 has been causing /etc/weekly to generate cron messages) - zlib 1.0.4 is now "blessed" again, the ssh working sources now use this instead of v0.95. The decompression problem was fixed in either 1.0.3 or 1.0.4. Also, the current version of cvs uses zlib 1.0.4 as well.. - perl5.002 -> perl5.003 Reviewed by: torstenb
* The checksum for the ssh tarball was out of date - fix it.jkh1996-07-291-1/+1
|
* If using socks, make sure you find socks librarypst1996-07-231-7/+5
|
* Back out andrews change - 1.2.14.1 is not an official ssh release.torstenb1996-07-185-87/+77
|
* Use += for USA_RESIDENT MASTER_SITESache1996-07-181-3/+2
|
* Upgrade to 1.2.14.1ache1996-07-165-75/+86
| | | | Misc bugfixes
* Add back checksum for rsaref2, used only while building in the US.asami1996-07-051-0/+1
| | | | | | | People, if you do a "make makesum" on a non-US machine, don't forget to add this line back before commiting it: MD5 (rsaref2.tar.gz) = 0b474c97bf1f1c0d27e5a95f1239c08d
* Remove reminder about host key generation, it autogenerated on installache1996-06-201-5/+1
|
* If hostname > UT_HOSTSIZE, write its numeric address instead to keepache1996-06-181-0/+24
| | | | valid information in utmp and lastlog
* Install an sshd.sh startup file.jkh1996-06-162-1/+9
|
* Path on master site has changedtorstenb1996-06-151-2/+2
|
* Return back to distributed libz 0.95ache1996-06-091-2/+1
| | | | | All libzs 0.99-1.0.2 produce deflate error on certain files (with ssh) I don't know, is it ssh error or libz error
* Update ssh-1.2.13 -> ssh-1.2.14peter1996-06-074-101/+53
| | | | | | | ssh-askpass no longer uses wish, so chop the make rules that attempt to locate it. Go further to try and protect the ssh_host_key, since it's critical to the operation and security of the machine.
* Update the hack for locating wish/wish4.0 to also look for wish4.1 nowpeter1996-05-251-3/+7
| | | | that we have that one too.
* Change NO_PACKAGE to RESTRICTED.asami1996-04-171-2/+2
|
* Auto-sense installed perl & wishache1996-03-251-3/+7
|
* Move perl depends under USE_PERLache1996-03-241-2/+12
|
* Check USE_WISH for YES value as other parts of Makefile doesache1996-03-211-2/+2
|
* Use wish only if USE_WISH defined.ache1996-03-211-2/+2
|
* Update for perl5.002markm1996-03-171-2/+2
|
* Use libz 1.0ache1996-02-201-2/+2
|
* Checksum for rsaref2.tar.gz. Only used if you are compiling this in USA.asami1996-02-191-0/+1
|
* Upgrade to 1.2.13ache1996-02-173-16/+16
|
* Fix patch typo.pst1996-02-071-1/+1
| | | | Found by: Andrzej Tobola <san@iem.pw.edu.pl>
* Upgrade to snapshot of ssh. 1.1.12a was recalled due to even worsepst1996-02-064-17/+77
| | | | | | | security problems. Also re-do the method we use for disconnecting ourselves from the supplied gmp and z libraries so that this can be maintained in the future (sigh!).
* Understands shared libwrap nowache1996-01-251-2/+3
|
* Autopick any wish present even wish4.0ache1996-01-251-9/+23
| | | | Autopick libwrap.a
* Damn. Forgot to include the makefile diffs in the last lot.markm1996-01-231-1/+2
| | | | Make the Makefile aware of libz dependancies.
* Remove ftp.funet.fi from master list, it not contains rsarefache1996-01-211-2/+1
| | | | | and not contains ssh in this directory. Another directory there have obsoleted ssh version.
* Add BUILD_DEPENDS of wish and perl5, both checked exactly in build processache1996-01-211-1/+3
|
* Upgrade to 1.2.12a (security bugfix)ache1996-01-213-8/+7
| | | | | Fix installation bug too (scripts not installed) Fix PLIST (missing files)
* Update ssh from 1.2.10 to 1.2.12.. This is for two reasons:peter1995-11-243-3/+6
| | | | | | 1) It eliminated the need for my horrible kludge patch-ad 2) 1.2.12 has data stream compression (like gzip). (I'm talking with the author about the remining three patches)
* Change category "networking" to "net".asami1995-11-221-2/+2
|
* two minor adjustments to ssh for freebsd specific issues:peter1995-11-211-0/+14
| | | | | | | | | | | patch-ac: call setsid() before setlogin() in the child (when emulating rsh) otherwise the setlogin() will fail when/if the proposed setlogin() changes go in. Otherwise it silently fails and may leave the login name of the user session as "root" (depending on how sshd was started). Without the proposed kernel change, it harmlessly sets the login name of the user's session. patch-ad: patch the #ifdef botch that stopped a ssh login from using and updating the lastlog file. This is because we have struct lastlog defined inside utmp.h rather than a lastlog.h include file like it was expecting.
* Add torstenb as maintainer.asami1995-11-091-1/+3
|
* Fix tcp_wrapper supportache1995-10-111-4/+5
|
* add "networking" to the categories listtorstenb1995-10-071-2/+2
|
* Ssh is a secure rlogin/rsh/rcp replacement with strong authenticationtorstenb1995-10-076-0/+227
(.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).