|
Revision tags: release/12.4.0, release/13.1.0 |
|
| #
8464ad72 |
| 19-Dec-2021 |
Ed Maste <[email protected]> |
ssh: update to OpenSSH v8.8p1
OpenSSH v8.8p1 was motivated primarily by a security update and
deprecation of RSA/SHA1 signatures. It also has a few minor bug fixes.
The security update was already
ssh: update to OpenSSH v8.8p1
OpenSSH v8.8p1 was motivated primarily by a security update and
deprecation of RSA/SHA1 signatures. It also has a few minor bug fixes.
The security update was already applied to FreeBSD as an independent
change, and the RSA/SHA1 deprecation is excluded from this commit but
will immediately follow.
MFC after: 1 month
Relnotes: Yes
Sponsored by: The FreeBSD Foundation
(cherry picked from commit e9e8876a4d6afc1ad5315faaa191b25121a813d7)
(cherry picked from commit 2ffb13149c8e46cb7d7e891b237255615906dc60)
show more ...
|
|
Revision tags: release/12.3.0 |
|
| #
317a38ab |
| 08-Sep-2021 |
Ed Maste <[email protected]> |
openssh: update to OpenSSH v8.7p1
Some notable changes, from upstream's release notes:
- sshd(8): Remove support for obsolete "host/port" syntax.
- ssh(1): When prompting whether to record a new ho
openssh: update to OpenSSH v8.7p1
Some notable changes, from upstream's release notes:
- sshd(8): Remove support for obsolete "host/port" syntax.
- ssh(1): When prompting whether to record a new host key, accept the key
fingerprint as a synonym for "yes".
- ssh-keygen(1): when acting as a CA and signing certificates with an RSA
key, default to using the rsa-sha2-512 signature algorithm.
- ssh(1), sshd(8), ssh-keygen(1): this release removes the "ssh-rsa"
(RSA/SHA1) algorithm from those accepted for certificate signatures.
- ssh-sk-helper(8): this is a new binary. It is used by the FIDO/U2F
support to provide address-space isolation for token middleware
libraries (including the internal one).
- ssh(1): this release enables UpdateHostkeys by default subject to some
conservative preconditions.
- scp(1): this release changes the behaviour of remote to remote copies
(e.g. "scp host-a:/path host-b:") to transfer through the local host
by default.
- scp(1): experimental support for transfers using the SFTP protocol as
a replacement for the venerable SCP/RCP protocol that it has
traditionally used.
Additional integration work is needed to support FIDO/U2F in the base
system.
Deprecation Notice
------------------
OpenSSH will disable the ssh-rsa signature scheme by default in the
next release.
Reviewed by: imp
MFC after: 1 month
Relnotes: Yes
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D29985
(cherry picked from commit 19261079b74319502c6ffa1249920079f0f69a72)
(cherry picked from commit f448c3ed4ae1281861913a56377f9d93d49f8e8e)
(cherry picked from commit 1f290c707a19d1695c303e6c8ead9cc414ccc6dc)
(cherry picked from commit 0f9bafdfc325779e4ecc5154d5bb06c752297138)
(cherry picked from commit adb56e58e8db84d8087ebe3d3e7def0074cb5a90)
(cherry picked from commit 576b58108c1723c85e4dd00355e29bfe301dab11)
(cherry picked from commit 1c99af1ebe61cbaf633792941640dcd254acf921)
(cherry picked from commit 87152f34054921632016bc5eb4ab9f836fbaa522)
(cherry picked from commit 172fa4aa7577915bf5ace5783251821d3774dc05)
show more ...
|
|
Revision tags: release/13.0.0, release/12.2.0, release/11.4.0, release/12.1.0, release/11.3.0, release/12.0.0, release/11.2.0, release/10.4.0, release/11.1.0 |
|
| #
6d6e8a4a |
| 03-Mar-2017 |
Dag-Erling Smørgrav <[email protected]> |
Forgot to bump the version addendum date.
|
|
Revision tags: release/11.0.1, release/11.0.0, release/10.3.0 |
|
| #
60c59fad |
| 19-Jan-2016 |
Dag-Erling Smørgrav <[email protected]> |
As previously threatened, remove the HPN patch from OpenSSH.
|
|
Revision tags: release/10.2.0, release/10.1.0, release/9.3.0, release/10.0.0, release/9.2.0 |
|
| #
83c6a524 |
| 10-Sep-2013 |
Dag-Erling Smørgrav <[email protected]> |
Change the default value of VerifyHostKeyDNS to "yes" if compiled with
LDNS. With that setting, OpenSSH will silently accept host keys that
match verified SSHFP records. If an SSHFP record exists b
Change the default value of VerifyHostKeyDNS to "yes" if compiled with
LDNS. With that setting, OpenSSH will silently accept host keys that
match verified SSHFP records. If an SSHFP record exists but could not
be verified, OpenSSH will print a message and prompt the user as usual.
Approved by: re (blanket)
show more ...
|
|
Revision tags: release/8.4.0, release/9.1.0, release/8.3.0_cvs, release/8.3.0, release/9.0.0, release/7.4.0_cvs, release/8.2.0_cvs, release/7.4.0, release/8.2.0, release/8.1.0_cvs, release/8.1.0 |
|
| #
124981e1 |
| 21-Apr-2010 |
Dag-Erling Smørgrav <[email protected]> |
MFH OpenSSH 5.4p1
|
|
Revision tags: release/7.3.0_cvs, release/7.3.0, release/8.0.0_cvs, release/8.0.0, release/7.2.0_cvs, release/7.2.0, release/7.1.0_cvs, release/7.1.0, release/6.4.0_cvs, release/6.4.0, release/7.0.0_cvs, release/7.0.0, release/6.3.0_cvs, release/6.3.0, release/6.2.0_cvs, release/6.2.0 |
|
| #
62efe23a |
| 10-Nov-2006 |
Dag-Erling Smørgrav <[email protected]> |
Resolve conflicts.
|
| #
3c492e28 |
| 30-Sep-2006 |
Dag-Erling Smørgrav <[email protected]> |
Bump version addendum.
MFC after: 1 week
|
| #
333ee039 |
| 30-Sep-2006 |
Dag-Erling Smørgrav <[email protected]> |
Merge conflicts.
MFC after: 1 week
|
| #
761efaa7 |
| 30-Sep-2006 |
Dag-Erling Smørgrav <[email protected]> |
Vendor import of OpenSSH 4.4p1.
|
|
Revision tags: release/5.5.0_cvs, release/5.5.0, release/6.1.0_cvs, release/6.1.0 |
|
| #
b74df5b2 |
| 22-Mar-2006 |
Dag-Erling Smørgrav <[email protected]> |
Merge conflicts.
|
| #
021d409f |
| 22-Mar-2006 |
Dag-Erling Smørgrav <[email protected]> |
Vendor import of OpenSSH 4.3p1.
|
|
Revision tags: release/6.0.0_cvs, release/6.0.0 |
|
| #
d4ecd108 |
| 03-Sep-2005 |
Dag-Erling Smørgrav <[email protected]> |
Resolve conflicts.
|
| #
aa49c926 |
| 05-Jun-2005 |
Dag-Erling Smørgrav <[email protected]> |
Resolve conflicts.
|
| #
5e8dbd04 |
| 05-Jun-2005 |
Dag-Erling Smørgrav <[email protected]> |
Vendor import of OpenSSH 4.0p1.
|
|
Revision tags: release/5.4.0_cvs, release/5.4.0, release/4.11.0_cvs, release/4.11.0, release/5.3.0_cvs, release/5.3.0 |
|
| #
21e764df |
| 28-Oct-2004 |
Dag-Erling Smørgrav <[email protected]> |
Resolve conflicts
|
|
Revision tags: release/4.10.0_cvs, release/4.10.0 |
|
| #
562de5d9 |
| 20-Apr-2004 |
Dag-Erling Smørgrav <[email protected]> |
Adjust version number and addendum.
|
| #
eea81d70 |
| 26-Feb-2004 |
Dag-Erling Smørgrav <[email protected]> |
Update VersionAddendum in config files and man pages.
|
|
Revision tags: release/5.2.1_cvs, release/5.2.1, release/5.2.0_cvs, release/5.2.0 |
|
| #
cf2b5f3b |
| 07-Jan-2004 |
Dag-Erling Smørgrav <[email protected]> |
Resolve conflicts and remove obsolete files.
Sponsored by: registrar.no
|
| #
d95e11bf |
| 07-Jan-2004 |
Dag-Erling Smørgrav <[email protected]> |
Vendor import of OpenSSH 3.7.1p2.
|
|
Revision tags: release/4.9.0_cvs, release/4.9.0 |
|
| #
44172b70 |
| 24-Sep-2003 |
Dag-Erling Smørgrav <[email protected]> |
Update version string.
|
|
Revision tags: release/5.1.0_cvs, release/5.1.0 |
|
| #
e73e9afa |
| 23-Apr-2003 |
Dag-Erling Smørgrav <[email protected]> |
Resolve conflicts.
|
|
Revision tags: release/4.8.0_cvs, release/4.8.0 |
|
| #
9794bba8 |
| 11-Feb-2003 |
Dag-Erling Smørgrav <[email protected]> |
document the current default value for VersionAddendum.
|
|
Revision tags: release/5.0.0_cvs, release/5.0.0 |
|
| #
00617102 |
| 05-Nov-2002 |
Dag-Erling Smørgrav <[email protected]> |
Document the current default value for VersionAddendum.
|
| #
f388f5ef |
| 29-Oct-2002 |
Dag-Erling Smørgrav <[email protected]> |
Resolve conflicts.
|