Xin LI
9ea45e75fa
MFV r311913:
...
Fix multiple OpenSSH vulnerabilities.
Submitted by: des
Approved by: so
2017-01-11 05:49:39 +00:00
Dag-Erling Smørgrav
9ded33068e
Remove DSA from default cipher list and disable SSH1.
...
Upstream did this a long time ago, but we kept DSA and SSH1 in FreeBSD for
reasons which boil down to POLA. Now is a good time to catch up.
MFC after: 3 days
Relnotes: yes
2016-08-03 16:08:21 +00:00
Dag-Erling Smørgrav
acc1a9ef83
Upgrade to OpenSSH 7.2p2.
2016-03-11 00:15:29 +00:00
Dag-Erling Smørgrav
fc1ba28a5c
Upgrade to OpenSSH 7.1p2.
2016-01-21 11:54:34 +00:00
Dag-Erling Smørgrav
acf8e75eb0
Enable DSA keys by default. They were disabled in OpenSSH 6.9p1.
...
Noticed by: glebius
2016-01-21 11:10:14 +00:00
Dag-Erling Smørgrav
eccfee6ebc
Upgrade to OpenSSH 7.0p1.
2016-01-20 22:57:10 +00:00
Dag-Erling Smørgrav
557f75e54a
Upgrade to OpenSSH 6.9p1.
2016-01-19 18:55:44 +00:00
Dag-Erling Smørgrav
bc5531debe
Upgrade to OpenSSH 6.8p1.
2016-01-19 18:28:23 +00:00
Dag-Erling Smørgrav
a0ee8cc636
Upgrade to OpenSSH 6.7p1, retaining libwrap support (which has been removed
...
upstream) and a number of security fixes which we had already backported.
MFC after: 1 week
2016-01-19 16:18:26 +00:00
Dag-Erling Smørgrav
60c59fad88
As previously threatened, remove the HPN patch from OpenSSH.
2016-01-19 14:38:20 +00:00
Dag-Erling Smørgrav
5b71b2ebe0
Now that we have mandoc, we can leave $Mdocdate$ tags as-is. Unfortunately,
...
there is (currently) no way to make Subversion generate correct $Mdocdate$
tags, but perhas we can teach mandoc to read Subversion's %d format.
2015-11-11 13:23:07 +00:00
Bryan Drewery
6e57108113
Document "none" for VersionAddendum.
...
PR: 193127
MFC after: 2 weeks
2015-03-23 02:45:12 +00:00
Dag-Erling Smørgrav
30a0343983
Apply upstream patch for EC calculation bug and bump version addendum.
2014-04-20 11:34:33 +00:00
Dag-Erling Smørgrav
b83788ff87
Upgrade to OpenSSH 6.6p1.
2014-03-25 11:05:34 +00:00
Dag-Erling Smørgrav
f7167e0ea0
Upgrade to OpenSSH 6.5p1.
2014-01-31 13:12:02 +00:00
Xin LI
0a37d4a300
MFV r257952:
...
Upgrade to OpenSSH 6.4p1.
Bump VersionAddendum.
Approved by: des
2013-11-11 09:19:58 +00:00
Dag-Erling Smørgrav
e4a9863fb7
Upgrade to 6.3p1.
...
Approved by: re (gjb)
2013-09-21 21:36:09 +00:00
Dag-Erling Smørgrav
83c6a5242c
Change the default value of VerifyHostKeyDNS to "yes" if compiled with
...
LDNS. With that setting, OpenSSH will silently accept host keys that
match verified SSHFP records. If an SSHFP record exists but could not
be verified, OpenSSH will print a message and prompt the user as usual.
Approved by: re (blanket)
2013-09-10 22:30:22 +00:00
Dag-Erling Smørgrav
420bce642c
Upgrade to OpenSSH 6.2p2. Mostly a no-op since I had already patched
...
the issues that affected us.
2013-05-17 09:12:33 +00:00
Dag-Erling Smørgrav
6888a9be56
Upgrade to OpenSSH 6.2p1. The most important new features are support
...
for a key revocation list and more fine-grained authentication control.
2013-03-22 17:55:38 +00:00
Dag-Erling Smørgrav
462c32cb8d
Upgrade OpenSSH to 6.1p1.
2012-09-03 16:51:41 +00:00
Dag-Erling Smørgrav
e146993e33
Upgrade to OpenSSH 5.9p1.
...
MFC after: 3 months
2011-10-05 22:08:17 +00:00
Dag-Erling Smørgrav
4a421b6336
Upgrade to OpenSSH 5.8p2.
2011-05-04 07:34:44 +00:00
Dag-Erling Smørgrav
e2f6069c09
Upgrade to OpenSSH 5.6p1.
2010-11-11 11:46:19 +00:00
Dag-Erling Smørgrav
afee23fec9
Missing commas
2010-06-01 15:11:29 +00:00
Dag-Erling Smørgrav
8ad9b54a6d
Upgrade to OpenSSH 5.5p1.
2010-04-28 10:36:33 +00:00
Dag-Erling Smørgrav
b15c83408c
Upgrade to OpenSSH 5.4p1.
...
MFC after: 1 month
2010-03-09 19:16:43 +00:00
Dag-Erling Smørgrav
7aee6ffee0
Upgrade to OpenSSH 5.3p1.
2009-10-01 17:12:52 +00:00
Dag-Erling Smørgrav
cce7d3464f
Upgrade to OpenSSH 5.2p1.
...
MFC after: 3 months
2009-05-22 18:46:28 +00:00
Dag-Erling Smørgrav
a29f9ec52c
Our groff doesn't understand $Mdocdate$, so replace them with bare dates.
...
MFC after: 3 days
2008-09-29 10:53:05 +00:00
Dag-Erling Smørgrav
d4af9e693f
Upgrade to OpenSSH 5.1p1.
...
I have worked hard to reduce diffs against the vendor branch. One
notable change in that respect is that we no longer prefer DSA over
RSA - the reasons for doing so went away years ago. This may cause
some surprises, as ssh will warn about unknown host keys even for
hosts whose keys haven't changed.
MFC after: 6 weeks
2008-08-01 02:48:36 +00:00
Dag-Erling Smørgrav
e3ae3b098d
Properly flatten openssh/dist.
2008-07-22 19:01:18 +00:00
Dag-Erling Smørgrav
ffea3f5a05
s/X11R6/local/g
2007-05-24 22:04:07 +00:00
Dag-Erling Smørgrav
62efe23a82
Resolve conflicts.
2006-11-10 16:52:41 +00:00
Dag-Erling Smørgrav
3c492e28cd
Bump version addendum.
...
MFC after: 1 week
2006-09-30 13:39:07 +00:00
Dag-Erling Smørgrav
333ee03933
Merge conflicts.
...
MFC after: 1 week
2006-09-30 13:38:06 +00:00
Dag-Erling Smørgrav
761efaa70c
Vendor import of OpenSSH 4.4p1.
2006-09-30 13:29:51 +00:00
Dag-Erling Smørgrav
b74df5b26f
Merge conflicts.
2006-03-22 20:41:37 +00:00
Dag-Erling Smørgrav
021d409f5b
Vendor import of OpenSSH 4.3p1.
2006-03-22 19:46:12 +00:00
Dag-Erling Smørgrav
d4ecd10857
Resolve conflicts.
2005-09-03 07:04:25 +00:00
Dag-Erling Smørgrav
043840df5b
Vendor import of OpenSSH 4.2p1.
2005-09-03 06:59:33 +00:00
Dag-Erling Smørgrav
aa49c9264c
Resolve conflicts.
2005-06-05 15:46:09 +00:00
Dag-Erling Smørgrav
4518870c72
Vendor import of OpenSSH 4.1p1.
2005-06-05 15:41:57 +00:00
Dag-Erling Smørgrav
5e8dbd04ef
Vendor import of OpenSSH 4.0p1.
2005-06-05 15:40:50 +00:00
Dag-Erling Smørgrav
21e764df0c
Resolve conflicts
2004-10-28 16:11:31 +00:00
Dag-Erling Smørgrav
d74d50a84b
Vendor import of OpenSSH 3.9p1.
2004-10-28 16:03:53 +00:00
Dag-Erling Smørgrav
5962c0e9a3
Resolve conflicts.
2004-04-20 09:46:41 +00:00
Dag-Erling Smørgrav
562de5d9f6
Adjust version number and addendum.
2004-04-20 09:37:29 +00:00
Dag-Erling Smørgrav
52028650db
Vendor import of OpenSSH 3.8.1p1.
2004-04-20 09:35:04 +00:00
Dag-Erling Smørgrav
eea81d70c9
Update VersionAddendum in config files and man pages.
2004-02-26 11:54:03 +00:00
