FreeBSD src
Go to file
Ed Maste 19261079b7 openssh: update to OpenSSH v8.7p1
Some notable changes, from upstream's release notes:

- sshd(8): Remove support for obsolete "host/port" syntax.
- ssh(1): When prompting whether to record a new host key, accept the key
  fingerprint as a synonym for "yes".
- ssh-keygen(1): when acting as a CA and signing certificates with an RSA
  key, default to using the rsa-sha2-512 signature algorithm.
- ssh(1), sshd(8), ssh-keygen(1): this release removes the "ssh-rsa"
  (RSA/SHA1) algorithm from those accepted for certificate signatures.
- ssh-sk-helper(8): this is a new binary. It is used by the FIDO/U2F
  support to provide address-space isolation for token middleware
  libraries (including the internal one).
- ssh(1): this release enables UpdateHostkeys by default subject to some
  conservative preconditions.
- scp(1): this release changes the behaviour of remote to remote copies
  (e.g. "scp host-a:/path host-b:") to transfer through the local host
  by default.
- scp(1): experimental support for transfers using the SFTP protocol as
  a replacement for the venerable SCP/RCP protocol that it has
  traditionally used.

Additional integration work is needed to support FIDO/U2F in the base
system.

Deprecation Notice
------------------

OpenSSH will disable the ssh-rsa signature scheme by default in the
next release.

Reviewed by:	imp
MFC after:	1 month
Relnotes:	Yes
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D29985
2021-09-07 21:05:51 -04:00
.cirrus-ci Cirrus-CI: add some timing info on pkg install failure 2021-08-04 15:02:00 -04:00
.github [skip ci] fix syntax in CODEOWNERS 2021-07-22 10:58:54 -06:00
bin sh: improve emacs mode 2021-08-28 16:11:57 +02:00
cddl dtrace.1: Document a couple of preprocessor-related options 2021-09-07 14:04:50 -04:00
contrib compiler-rt: add aarch64 init function for LSE atomics 2021-09-06 21:24:01 +02:00
crypto openssh: update to OpenSSH v8.7p1 2021-09-07 21:05:51 -04:00
etc Register /usr/tests/usr.bin/diff3 2021-08-23 07:04:28 +02:00
gnu dialog: fix macro redefinition 2021-03-01 16:01:44 +01:00
include Add _Fork() 2021-08-03 21:19:32 +03:00
kerberos5 pkgbase: Create a FreeBSD-kerberos package 2021-09-07 10:23:14 +02:00
lib openssh: update to OpenSSH v8.7p1 2021-09-07 21:05:51 -04:00
libexec wpa: Address CTRL-EVENT-SCAN-FAILED 2021-09-07 05:55:48 -07:00
release pkgbase: Create a FreeBSD-ftp package 2021-09-07 10:25:23 +02:00
rescue Fix building rescue/rescue when sanitizers are enabled 2021-07-06 12:18:30 +01:00
sbin pkgbase: Move spppcontrol to FreeBSD-ppp 2021-09-07 10:18:53 +02:00
secure openssh: update to OpenSSH v8.7p1 2021-09-07 21:05:51 -04:00
share pkgbase: Create a syscons-data package 2021-09-07 10:21:40 +02:00
stand loader.efi: fix console output after BS off 2021-09-03 00:48:56 +03:00
sys VOP_COPY_FILE_RANGE: Add a COPY_FILE_RANGE_TIMEO1SEC flag 2021-09-07 17:35:26 -07:00
targets Fix bootstrapping to actually build lldb-tblgen for later use 2021-08-24 15:04:25 +01:00
tests pf tests: altq:codel_bridge requires if_bridge 2021-09-01 16:13:11 +02:00
tools Fix cross-builds after 4e5d32a445 2021-09-07 10:53:50 +01:00
usr.bin pkgbase: Create a FreeBSD-ftp package 2021-09-07 10:25:23 +02:00
usr.sbin pkgbase: Remove libefivar package and add a efi-tools one 2021-09-07 10:24:21 +02:00
.arcconfig Remove history.immutable from .arcconfig 2021-04-13 12:36:25 +01:00
.arclint arc lint: ignore /tests/ in chmod 2017-12-19 03:38:06 +00:00
.cirrus.yml Cirrus-CI: reduce VM memory to 8G 2021-08-30 21:40:37 -04:00
.clang-format clang-format: Avoid breaking after the opening paren of function definitions 2020-10-28 11:54:00 +00:00
.gitattributes Add a basic clang-format configuration file 2019-06-07 15:23:52 +00:00
.gitignore gitignore: Add .clangd and .ccls-cache 2021-06-04 16:56:08 +08:00
COPYRIGHT copyrights: Happy New Year 2021 2020-12-31 10:29:44 -05:00
LOCKS LOCKS: update current locks 2018-06-09 03:08:04 +00:00
MAINTAINERS [skip ci] volunteer to maintain POSIX AIO 2021-05-30 17:21:12 -06:00
Makefile Revert "Fix native-xtools build" 2021-08-03 10:00:28 -07:00
Makefile.inc1 Add WITH_LLVM_BINUTILS to install LLVM binutils instead of Elftoolchain 2021-09-06 09:49:49 +01:00
Makefile.libcompat Prefer MK_SSP=no to SSP_CFLAGS= 2021-08-04 15:23:22 -03:00
Makefile.sys.inc AUTO_OBJ: For all top-level targets enforce using an OBJDIR. 2017-12-05 21:29:47 +00:00
ObsoleteFiles.inc Don't build and install {llvm,clang,lldb}-tblgen for the target 2021-09-06 09:32:41 +01:00
README.md Whitespace cleanup 2021-03-12 19:57:58 +08:00
RELNOTES RELNOTES: Add entries for KASAN and KMSAN 2021-08-11 13:08:36 -04:00
UPDATING UPDATING: Add a note about OpenSSL defaulting KTLS to off. 2021-08-17 14:43:46 -07:00

FreeBSD Source:

This is the top level of the FreeBSD source directory.

FreeBSD is an operating system used to power modern servers, desktops, and embedded platforms. A large community has continually developed it for more than thirty years. Its advanced networking, security, and storage features have made FreeBSD the platform of choice for many of the busiest web sites and most pervasive embedded networking and storage devices.

For copyright information, please see the file COPYRIGHT in this directory. Additional copyright information also exists for some sources in this tree - please see the specific source directories for more information.

The Makefile in this directory supports a number of targets for building components (or all) of the FreeBSD source tree. See build(7), config(8), FreeBSD handbook on building userland, and Handbook for kernels for more information, including setting make(1) variables.

Source Roadmap:

Directory Description
bin System/user commands.
cddl Various commands and libraries under the Common Development and Distribution License.
contrib Packages contributed by 3rd parties.
crypto Cryptography stuff (see crypto/README).
etc Template files for /etc.
gnu Various commands and libraries under the GNU Public License. Please see gnu/COPYING and gnu/COPYING.LIB for more information.
include System include files.
kerberos5 Kerberos5 (Heimdal) package.
lib System libraries.
libexec System daemons.
release Release building Makefile & associated tools.
rescue Build system for statically linked /rescue utilities.
sbin System commands.
secure Cryptographic libraries and commands.
share Shared resources.
stand Boot loader sources.
sys Kernel sources.
sys/arch/conf Kernel configuration files. GENERIC is the configuration used in release builds. NOTES contains documentation of all possible entries.
tests Regression tests which can be run by Kyua. See tests/README for additional information.
tools Utilities for regression testing and miscellaneous tasks.
usr.bin User commands.
usr.sbin System administration commands.

For information on synchronizing your source tree with one or more of the FreeBSD Project's development branches, please see FreeBSD Handbook.