Changes in Makefile

d0b2dbfa - Remove $FreeBSD$: one-line sh pattern

Wed, 16 Aug 2023 17:55:03 +0000

Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd-14.2/secure/libexec/Makefile

e9a99463 - ssh: enable FIDO/U2F keys

Thu, 07 Oct 2021 03:31:17 +0000

ssh: enable FIDO/U2F keysDescription of FIDO/U2F support (from OpenSSH 8.2 release notes,https://www.openssh.com/txt/release-8.2): This release adds support for FIDO/U2F hardware authenticators to OpenSSH. U2F/FIDO are open standards for inexpensive two-factor authentication hardware that are widely used for website authentication. In OpenSSH FIDO devices are supported by new public key types "ecdsa-sk" and "ed25519-sk", along with corresponding certificate types. ssh-keygen(1) may be used to generate a FIDO token-backed key, after which they may be used much like any other key type supported by OpenSSH, so long as the hardware token is attached when the keys are used. FIDO tokens also generally require the user explicitly authorise operations by touching or tapping them. Generating a FIDO key requires the token be attached, and will usually require the user tap the token to confirm the operation: $ ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk Generating public/private ecdsa-sk key pair. You may need to touch your security key to authorize key generation. Enter file in which to save the key (/home/djm/.ssh/id_ecdsa_sk): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/djm/.ssh/id_ecdsa_sk Your public key has been saved in /home/djm/.ssh/id_ecdsa_sk.pub This will yield a public and private key-pair. The private key file should be useless to an attacker who does not have access to the physical token. After generation, this key may be used like any other supported key in OpenSSH and may be listed in authorized_keys, added to ssh-agent(1), etc. The only additional stipulation is that the FIDO token that the key belongs to must be attached when the key is used.To enable FIDO/U2F support, this change regenerates ssh_namespace.h,adds ssh-sk-helper, and sets ENABLE_SK_INTERNAL (unless buildingWITHOUT_USB).devd integration is not included in this change, and is underinvestigation for the base system. In the interim the security/u2f-devdport can be installed to provide appropriate devd rules.Reviewed by: delphij, kevansRelnotes: YesSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D32509 List of files: /freebsd-14.2/secure/libexec/Makefile

4b330699 - Convert traditional ${MK_TESTS} conditional idiom for including test

Wed, 02 Aug 2017 08:35:51 +0000

Convert traditional ${MK_TESTS} conditional idiom for including testdirectories to SUBDIR.${MK_TESTS} idiomThis is being done to pave the way for future work (and homogenity) in^/projects/make-check-sandbox .No functional change intended.MFC after: 1 weeks List of files: /freebsd-14.2/secure/libexec/Makefile

aa92269e - Add more SUBDIR_PARALLEL.

Thu, 15 Oct 2015 22:55:08 +0000

Add more SUBDIR_PARALLEL.MFC after: 3 weeksSponsored by: EMC / Isilon Storage Division List of files: /freebsd-14.2/secure/libexec/Makefile

c6063d0d - Use src.opts.mk in preference to bsd.own.mk except where we need stuff

Tue, 06 May 2014 04:22:01 +0000

Use src.opts.mk in preference to bsd.own.mk except where we need stufffrom the latter. List of files: /freebsd-14.2/secure/libexec/Makefile

38f0b757 - Add placeholder Kyuafiles for various top-level hierarchies.

Mon, 21 Apr 2014 21:39:25 +0000

Add placeholder Kyuafiles for various top-level hierarchies.This change adds tests/ directories in the source tree to create varioussubdirectories in /usr/tests/ and to install placeholder Kyuafiles forthem.the relevant hierarchies are: cddl, etc, games, gnu and secure.The reason for this is to simplify the addition of new test programs forutilities or libraries under any of these directories. Doing so on acase by case basis is unnecessary and is quite an obscure process. List of files: /freebsd-14.2/secure/libexec/Makefile

124981e1 - MFH OpenSSH 5.4p1

Wed, 21 Apr 2010 06:33:10 +0000

MFH OpenSSH 5.4p1 List of files: /freebsd-14.2/secure/libexec/Makefile

b911c45c - Revert r204939

Wed, 10 Mar 2010 11:33:15 +0000

Revert r204939 List of files: /freebsd-14.2/secure/libexec/Makefile

32202de7 - Fix the build. The ssh-pkcs11-helper directory is empty, which is

Wed, 10 Mar 2010 02:17:57 +0000

Fix the build. The ssh-pkcs11-helper directory is empty, which iscausing confusion. List of files: /freebsd-14.2/secure/libexec/Makefile

e1fe3dba - Reimplementation of world/kernel build options. For details, see:

Fri, 17 Mar 2006 18:54:44 +0000

Reimplementation of world/kernel build options. For details, see:http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.htmlThe src.conf(5) manpage is to follow in a few days.Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) List of files: /freebsd-14.2/secure/libexec/Makefile

4afa3718 - Very big makeover in the way telnet, telnetd and libtelnet are built.

Wed, 16 Jul 2003 20:59:15 +0000

Very big makeover in the way telnet, telnetd and libtelnet are built.Previously, there were two copies of telnet; a non-crypto versionthat lived in the usual places, and a crypto version that lived incrypto/telnet/. The latter was built in a broken manner somewhat akinto other "contribified" sources. This meant that there were 4 telnetscompeting with each other at build time - KerberosIV, Kerberos5,plain-old-secure and base. KerberosIV is no longer in the running, butthe other three took it in turns to jump all over each other during a"make buildworld".As the crypto issue has been clarified, and crypto _calls_ are nota problem, crypto/telnet has been repo-copied to contrib/telnet,and with this commit, all telnets are now "contribified". The contribpath was chosen to not destroy history in the repository, and differsfrom other contrib/ entries in that it may be worked on as "normal"BSD code. There is no dangerous crypto in these sources, only avery weak system less strong than enigma(1).Kerberos5 telnet and Secure telnet are now selected by using the usualmacros in /etc/make.conf, and the build process is unsurprising andless treacherous. List of files: /freebsd-14.2/secure/libexec/Makefile

dbf104e6 - Turn MAKE_KERBEROS5 into NO_KERBEROS by negating the logic. Some extra

Mon, 05 May 2003 07:58:44 +0000

Turn MAKE_KERBEROS5 into NO_KERBEROS by negating the logic. Some extracleanups were necessary in release/Makefile, and the tinderbox codewas syntax checked, not run checked. List of files: /freebsd-14.2/secure/libexec/Makefile

6402d39a - Most things depend on !defined(NO_OPENSSL); make it look so.

Wed, 30 Apr 2003 07:51:51 +0000

Most things depend on !defined(NO_OPENSSL); make it look so. List of files: /freebsd-14.2/secure/libexec/Makefile

bce0c927 - NOSECURE is implied by NOCRYPT, meaning if the latter is defined

Wed, 30 Apr 2003 07:34:14 +0000

NOSECURE is implied by NOCRYPT, meaning if the latter is definedwe won't be here. List of files: /freebsd-14.2/secure/libexec/Makefile

581ff5e3 - Remove Kerberos IV shims.

Wed, 23 Apr 2003 17:26:01 +0000

Remove Kerberos IV shims. List of files: /freebsd-14.2/secure/libexec/Makefile

81d85817 - ssh-keysign(8) belongs in /usr/libexec, not in /usr/bin, and needs to be

Fri, 05 Jul 2002 08:39:09 +0000

ssh-keysign(8) belongs in /usr/libexec, not in /usr/bin, and needs to besetuid so ssh(1) doesn't have to be.Pointy hat to: desSubmitted by: Katsuyuki TATEISHI List of files: /freebsd-14.2/secure/libexec/Makefile

563df952 - Revamp and diff-reduce the various secure telnets. Make sure that

Fri, 03 Aug 2001 16:03:26 +0000

Revamp and diff-reduce the various secure telnets. Make sure thatKerberos5 has _a_ telnet (which is not currently K5 enabled).Incorporate BDE's static linking fixes. List of files: /freebsd-14.2/secure/libexec/Makefile

65c9b74c - Only build sftp-server conditionally

Sat, 16 Sep 2000 22:43:00 +0000

Only build sftp-server conditionally List of files: /freebsd-14.2/secure/libexec/Makefile

89cdeb29 - Add sftp-server

Fri, 15 Sep 2000 01:04:32 +0000

Add sftp-server List of files: /freebsd-14.2/secure/libexec/Makefile

abe829c0 - Don't build crypto-enabled telnetd if NO_OPENSSL is defined, since it

Tue, 25 Jul 2000 01:11:17 +0000

Don't build crypto-enabled telnetd if NO_OPENSSL is defined, since itattempts to link against libcrypto. List of files: /freebsd-14.2/secure/libexec/Makefile