summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2009-07-20ssh has movedchristos
2009-04-14Enable WARNS=4 by default for usr.bin, except for:lukem
awk bdes checknr compile_et error gss hxtool kgetcred kinit klist ldd less lex locale login m4 man menuc mk_cmds mklocale msgc openssl rpcgen rpcinfo sdiff spell ssh string2key telnet tn3270 verify_krb5_conf xlint
2009-02-17link in fmt_scaled.cmrg
2009-02-17add mux.c to the link.mrg
2008-11-09- retire MKXORG from public usemrg
- introduce X11FLAVOUR to choose src/x11 vs src/external/mit/xorg for the X11 to build if MKX11=yes is set. it takes the values of either Xorg or XFree86. - default to Xorg on alpha, i386, macppc, shark, sparc and sparc64 - remove MKXORG_WITH_XSRC_XSERVER, unused and never useful
2008-10-27Make sshd find the xauth program, even with the new /usr/X11R7.hubertf
OK'd by christos@
2008-08-29Wrap compiler-specific flags with HAVE_GCC and HAVE_PCC as necessary. Add a ↵gmcgarry
few flags for PCC.
2008-04-10Add more libraries required by libgssapi and libkrb5 etc. in NOPIC case.tsutsui
2008-04-06update for 5.0christos
2008-04-06Be consistent about making USE_PAM!=no be exclusive to USE_SKEY!=no.lukem
2007-05-28Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on thetls
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to various string and memory copy and set functions (as well as a few system calls and other miscellany) where known at function entry. RedHat has evidently built all "core system packages" with this option for some time. This option should be used at the top of Makefiles (or Makefile.inc where this is used for subdirectories) but after any setting of LIB. This is only useful for userland code, and cannot be used in libc or in any code which includes the libc internals, because it overrides certain libc functions with macros. Some effort has been made to make USE_FORT=yes work correctly for a full-system build by having the bsd.sys.mk logic disable the feature where it should not be used (libc, libssp iteself, the kernel) but no attempt has been made to build the entire system with USE_FORT and doing so will doubtless expose numerous bugs and misfeatures. Adjust the system build so that all programs and libraries that are setuid, directly handle network data (including serial comm data), perform authentication, or appear likely to have (or have a history of having) data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default, with the exception of libc, which cannot use USE_FORT and thus uses only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no per-directory or in a system build will disable if desired.
2006-11-24s/independant/independent/, from Zafer.wiz
2006-09-28Add -DHEIMDALchristos
2006-05-12Only use -Wno-pointer-sign for gcc4.lukem
2006-05-11sprinkle some -fno-strict-aliasing and -Wno-pointer-sign with GCC4.mrg
2006-05-11build sshconnect1.c with -fno-strict-aliasing.mrg
2006-03-20Goodbye KerberosIVchristos
2006-02-15Do not attempt to generate moduli from moduli.c using the shuttlechristos
suffix rule. This can happen if moduli.c is newer than moduli. Reported by Hisashi T Fujinaka.
2005-08-18PR/30750: Mark Davies: ssh gives bogus complaint when gssapi authenticationchristos
fails. The problem was that different ssh programs were compiled with different cpp flags. In particular, ssh-keysign was affected. Move all the CPPFLAGS to Makefile.inc. Note that I am not moving the library portion of the defines because we don't want to link everything with all the libraries.
2005-07-29remove -static.christos
2005-04-23sftp now uses libedit.christos
2005-03-09Add -lcrypt where -lcrypto is specified.christos
2005-03-04Add -lcrypt to link lines for applications using -lkrb5, so that theyhe
link successfully when MKPIC=no, as is always the case for our ports which do not support shared libraries. Discussed with thorpej and christos.
2005-03-04Introduce PAM_STATIC_LDADD and PAM_STATIC_DPADD. When compilinghe
with MKPIC=no, possibly because the target does not support shared libraries, these include libraries required to resolve all symbols which end up referenced from PAM-using applications. The libraries presently required are -lcrypt, -lrpcsvc and -lutil. Add use of these variables which are currently set up to use PAM, so that they compile when MKPIC=no. Also, in the telnetd case, reorder the order of the libraries, so that libtelnet.a comes before -ltermcap and -lutil, again to fix link error when MKPIC=no. Discussed with thorpej and christos.
2005-02-13- Add depency ob ligssapi and the required c-file(s).christos
- Reorder libkafs so its possible to build w/o kerberos4 From Love.
2005-02-13Add depency on libgssapi and add the required c-file(s)christos
From Love.
2005-02-13Add a couple of HAVE_'schristos
2005-02-13Only need the PAM hooks for sshd. Now it compiles, PAM portion untested.christos
2005-02-13Add PAM glue [unused]christos
2005-02-13Update for OpenSSH-3.9christos
2005-01-03Style/consistency cleanup:lukem
* libcrypto & libz are provided by ../Makefile.inc * <bsd.own.mk> isn't required by most of these * be consistent in the layout
2005-01-03Use the public libssh that's now available.lukem
2004-05-23Use MKPRIVATELIB=yes instead of providing an empty libinstall:: target andlukem
setting NOLINT, NOPIC, NOPROFILE (etc)
2004-05-16Consistently use CONFIGFILES & CONFIGLINKS (which enable the 'configinstall'lukem
target) instead of using home-grown 'distribution' targets or using FILES with the 'install' target. Add some etc/ subdir Makefiles where appropriate. XXX: some of etc/Makefile install-etc-files could be converted to CONFIGFILES.
2003-12-11Fix the checkflist for builds without Kerberos 4 (MKKERBEROS4=no)dyoung
and without Kerberos 4 & 5 (MKKERBEROS=no). Previously checkflist complained of missing files. * move kerberos- and kerberos 4-only files into new flists, distrib/sets/lists/*/krb.* * make the flist generators grok MKKERBEROS{,4} variables * fix Makefiles which treat MKKERBEROS=no as MKKERBEROS5=no. 9 out of 10 experts agree that it is ludicrous to build w/ KERBEROS4 and w/o KERBEROS5. * fix header files, also, which treat MKKERBEROS=no as MKKERBEROS5=no. * omit some Kerberos-only subdirectories from the build as MKKERBEROS{,4} indicate (I acknowledge the sentiment that flists are the wrong way to go, and that the makefiles should produce the metalog directly. That sounds to me like the right way to go, but I am not prepared to do revamp all the makefiles. While my approach is expedient, it fits painlessly within the current build architecture until we are delivered from flist purgatory, and it does not postpone our delivery. Fair enough?)
2003-08-23libkrb depends on libdes, patch in private mail fromlha
Harold Gutch logix at foobar franken de
2003-07-24bring back krb4 support, just to suppress unwanted noise from other developers.itojun
note that official openssh distribution have already dropped kerberosIV support, therefore maintenance cost needs to be paid by us. and have no intent to help.
2003-07-23forgot to remove -lkafs. from rafalitojun
2003-07-23remove KRB4 and AFS support. sync w/ openssh main treeitojun
2003-07-21UPPORT_UTMP{,X} outside of .if KERBEROS. PR 22202itojun
2003-05-14>implement kerberos over ssh2 ("kerberos-2@ssh.com"); tested with jakob@itojun
>server interops with commercial client; ok jakob@ djm@ markus@openbsd
2003-04-03sync w/ 3.6.1itojun
2002-10-01upgrade to openssh 3.5. major changes include:itojun
- krb4/5 support for privsep (krb5 diff was already applied) includes fake implementaation of getpeereid() from openssh-portable, which does nothing useful - need improvement.
2002-09-18makefile delint. use NETBSDSRCDIR as appropriatelukem
2002-09-18rcsid fixlukem
2002-08-02Don't set BINOWN if using the default BINMODE.simonb
2002-07-28Add utmpx support.christos
2002-07-03re-enable ssh-keysign's sbit. sync w/openbsditojun
2002-07-03>make ssh-keysign read /etc/ssh/ssh_configitojun
>and exit if HostbasedAuthentication is disabled globally. based on discussions >with deraadt, itojun and sommerfeld; ok itojun@ sync w/openbsd
2002-07-01install ssh-keysign non-setuid for the moment.itojun
(HostbasedAuthentication does not work for a while)