en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#317a38ab openssh: update to OpenSSH v8.7p1Some notable changes, from upstream's release notes:- sshd(8): Remove support for obsolete "host/port" syntax.- ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes".- ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm.- ssh(1), sshd(8), ssh-keygen(1): this release removes the "ssh-rsa" (RSA/SHA1) algorithm from those accepted for certificate signatures.- ssh-sk-helper(8): this is a new binary. It is used by the FIDO/U2F support to provide address-space isolation for token middleware libraries (including the internal one).- ssh(1): this release enables UpdateHostkeys by default subject to some conservative preconditions.- scp(1): this release changes the behaviour of remote to remote copies (e.g. "scp host-a:/path host-b:") to transfer through the local host by default.- scp(1): experimental support for transfers using the SFTP protocol as a replacement for the venerable SCP/RCP protocol that it has traditionally used.Additional integration work is needed to support FIDO/U2F in the basesystem.Deprecation Notice------------------OpenSSH will disable the ssh-rsa signature scheme by default in thenext release.Reviewed by: impMFC after: 1 monthRelnotes: YesSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D29985(cherry picked from commit 19261079b74319502c6ffa1249920079f0f69a72)(cherry picked from commit f448c3ed4ae1281861913a56377f9d93d49f8e8e)(cherry picked from commit 1f290c707a19d1695c303e6c8ead9cc414ccc6dc)(cherry picked from commit 0f9bafdfc325779e4ecc5154d5bb06c752297138)(cherry picked from commit adb56e58e8db84d8087ebe3d3e7def0074cb5a90)(cherry picked from commit 576b58108c1723c85e4dd00355e29bfe301dab11)(cherry picked from commit 1c99af1ebe61cbaf633792941640dcd254acf921)(cherry picked from commit 87152f34054921632016bc5eb4ab9f836fbaa522)(cherry picked from commit 172fa4aa7577915bf5ace5783251821d3774dc05) List of files: /freebsd-13.1/secure/lib/libssh/Makefile Wed, 08 Sep 2021 01:05:51 +0000 Ed Maste <emaste@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#a0880129 ssh: move common Makefile boilerplate to a new ssh.mkThis moves SSHDIR and ssh_namespace.h handling to a common location,and will simplify future work such as adding U2F support (D32509).Reviewed by: kevansMFC after: 1 weekSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D32808(cherry picked from commit 9d63429fa16352f58037ac2aa6ddc734b25e8331) List of files: /freebsd-13.1/secure/lib/libssh/Makefile Tue, 02 Nov 2021 18:48:33 +0000 Ed Maste <emaste@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#1f474190 Replace literal uses of /usr/local in C sources with _PATH_LOCALBASELiteral references to /usr/local exist in a large number of files inthe FreeBSD base system. Many are in contributed software, in configurationfiles, or in the documentation, but 19 uses have been identified in Csource files or headers outside the contrib and sys/contrib directories.This commit makes it possible to set _PATH_LOCALBASE in paths.h to usea different prefix for locally installed software.In order to avoid changes to openssh source files, LOCALBASE is passed tothe build via Makefiles under src/secure. While _PATH_LOCALBASE could havebeen used here, there is precedent in the construction of the path used toa xauth program which depends on the LOCALBASE value passed on the compilercommand line to select a non-default directory.This could be changed in a later commit to make the openssh buildconsistently use _PATH_LOCALBASE. It is considered out-of-scope for thiscommit.Reviewed by: impMFC after: 1 monthDifferential Revision: https://reviews.freebsd.org/D26942 List of files: /freebsd-13.1/secure/lib/libssh/Makefile Tue, 27 Oct 2020 11:29:11 +0000 Stefan Eßer <se@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#4b6d416b openssh: connect libressl-api-compat.c and regen config.hDifferential Revision: https://reviews.freebsd.org/D17390 List of files: /freebsd-13.1/secure/lib/libssh/Makefile Wed, 03 Oct 2018 16:38:36 +0000 Ed Maste <emaste@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#ad5b34a2 Fix invalid .o SRCS from r314527.MFC after: 1 weekSponsored by: Dell EMC Isilon List of files: /freebsd-13.1/secure/lib/libssh/Makefile Tue, 09 May 2017 01:48:02 +0000 Bryan Drewery <bdrewery@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#b71fb1a4 crypto: normalize paths using SRCTOP-relative paths or :H when possibleThis simplifies make logic/outputMFC after: 1 monthSponsored by: Dell EMC Isilon List of files: /freebsd-13.1/secure/lib/libssh/Makefile Sat, 04 Mar 2017 11:35:30 +0000 Enji Cooper <ngie@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#94ef145e Only bake krb5_config.h support in to ssh(3), etc if both MK_GSSAPI andMK_KERBEROS_SUPPORT != noThis fixes the odd case where someone specified MK_GSSAPI=no andMK_KERBEROS_SUPPORT=yes (which admittedly, probably doesn't make sense,but the build system doesn't prevent this case today, and it didn't whenI filed the bug back in 2011 either).MFC after: 2 weeksPR: 159745 List of files: /freebsd-13.1/secure/lib/libssh/Makefile Mon, 02 Jan 2017 20:29:50 +0000 Enji Cooper <ngie@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#ba681bc9 List source files (foo.c) instead of object files in SRCS.Reviewed by: bdrewery List of files: /freebsd-13.1/secure/lib/libssh/Makefile Wed, 20 Jan 2016 00:03:28 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#e42070a7 Replace unneeded manual dependency on header by adding it to SRCS.bsd.lib.mk and bsd.prog.mk already depend all objs on headers in SRCS ifthere is not yet a depend file. The headers in SRCS are never built orinstalled. After 'make depend' the header was already added as a properdependency on the objects where needed.MFC after: 2 weeksSponsored by: EMC / Isilon Storage Division List of files: /freebsd-13.1/secure/lib/libssh/Makefile Mon, 07 Dec 2015 16:08:09 +0000 Bryan Drewery <bdrewery@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#1765946b Retire the NONE cipher option. List of files: /freebsd-13.1/secure/lib/libssh/Makefile Mon, 23 Nov 2015 12:48:13 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#0bd7d22e Move ssh into a dedicated packageFlag config files as "to be merged on upgrade" List of files: /freebsd-13.1/secure/lib/libssh/Makefile Thu, 05 Mar 2015 20:25:09 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#ff75e007 Reduce overlinkingThe framework now ensure by itself that pthread is added to the link chainas the last component if linked to kerberos hence avoid with out any explicitaddition prevent issue like CVE-2014-8475 List of files: /freebsd-13.1/secure/lib/libssh/Makefile Tue, 25 Nov 2014 22:25:13 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#ee5a34ec Convert to LIBADDReduce overlinking List of files: /freebsd-13.1/secure/lib/libssh/Makefile Tue, 25 Nov 2014 21:18:18 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#d029c3aa Rework privatelib/internallibMake sure everything linking to a privatelib and/or an internallib does it directlyfrom the OBJDIR rather than DESTDIR.Add src.libnames.mk so bsd.libnames.mk is not polluted by libraries not existsingin final installationIntroduce the LD* variable which is what ld(1) is expecting (via LDADD) to link tointernal/privatelibDirectly link to the .so in case of private library to avoid having to complexifyLDFLAGS.Phabric: https://phabric.freebsd.org/D553Reviewed by: imp, emaste List of files: /freebsd-13.1/secure/lib/libssh/Makefile Wed, 06 Aug 2014 22:17:26 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#c6063d0d Use src.opts.mk in preference to bsd.own.mk except where we need stufffrom the latter. List of files: /freebsd-13.1/secure/lib/libssh/Makefile Tue, 06 May 2014 04:22:01 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#0085282b Unbreak the WITHOUT_KERBEROS build and try to reduce the odds of arepeat performance by introducing a script that runs configure with andwithout Kerberos, diffs the result and generates krb5_config.h, whichcontains the preprocessor macros that need to be defined in the Kerberoscase and undefined otherwise.Approved by: re (marius) List of files: /freebsd-13.1/secure/lib/libssh/Makefile Mon, 23 Sep 2013 20:35:54 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#9cfa8b3f Clean up the OpenSSH build. It is now possible to build most componentsas static binaries, if desired. The one exception is sshd, which runsinto trouble due to libpam.a's includion of pam_ssh.Make OpenSSH use LDNS if available. This allows it to verify signedSSHFP records.Approved by: re (blanket) List of files: /freebsd-13.1/secure/lib/libssh/Makefile Tue, 10 Sep 2013 22:26:11 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#0b2766bd Make libldns and libssh private.Approved by: re (blanket) List of files: /freebsd-13.1/secure/lib/libssh/Makefile Sun, 08 Sep 2013 10:04:26 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#e6a64a84 Add a src.conf(5) option to allow users to compile in the "NONE cipher",which, only after authentication, disables crypto, and only for sessionswithout a terminal.Submitted by: Jeremy Chadwick (freebsd jdc.parodius.com)PR: bin/163095MFC after: 10 days List of files: /freebsd-13.1/secure/lib/libssh/Makefile Thu, 17 Jan 2013 01:51:04 +0000 Bjoern A. Zeeb <bz@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-13.1/secure/lib/libssh/Makefile#124981e1 MFH OpenSSH 5.4p1 List of files: /freebsd-13.1/secure/lib/libssh/Makefile Wed, 21 Apr 2010 06:33:10 +0000 Dag-Erling Smørgrav <des@FreeBSD.org>