d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
f0edf3f806
freebsd-nq/etc/rc.d/sshd

89 lines
1.5 KiB
Plaintext
Raw Normal View History

Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
#!/bin/sh
#
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson
2002-06-13 22:14:37 +00:00
# $FreeBSD$
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
#
# PROVIDE: sshd
Simply things so that "#REQUIRE: FILESYSTEMS" means the file systems are fully "ready to go". 'FILESYSTEMS' states: "This is a dummy dependency, for services which require file systems to be mounted before starting." However, we have 'var' which is was run after 'FILESYSTEMS' and can mount /var if it already isn't mounted. Furthermore, several scripts cannot use /var until 'cleanvar' has done its thing. Thus "FILESYSTEMS" hasn't really meant all critical file systems are fully usable.
2012-09-11 05:04:59 +00:00
# REQUIRE: LOGIN FILESYSTEMS
Add the shutdown KEYWORD to those scripts that start persistent services to allow them to do a "clean" shutdown. I purposely avoided making changes to network-related stuff since the system shutting down is pretty conclusive, and there may be complicated dependencies on the network that I would rather not try to unravel. I also skipped kerberos-related stuff for the reasons above, and because I have no way to test it.
2008-07-16 19:50:29 +00:00
# KEYWORD: shutdown
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
. /etc/rc.subr
name="sshd"
- Add descriptions to most of the rc scripts. Those are mostly taken from their daemon's manpage and probably improved. - Consistently use "filesystem" not "file system". Approved by: bapt, brueffer Differential Revision: D452
2016-04-23 16:10:54 +00:00
desc="Secure Shell Daemon"
Prepare for the removal of set_rcvar() by changing the rcvar= assignments to the literal values it would have returned. The concept of set_rcvar() was nice in theory, but the forks it creates are a drag on the startup process, which is especially noticeable on slower systems, such as embedded ones. During the discussion on freebsd-rc@ a preference was expressed for using ${name}_enable instead of the literal values. However the code portability concept doesn't really apply since there are so many other places where the literal name has to be searched for and replaced. Also, using the literal value is also a tiny bit faster than dereferencing the variables, and every little bit helps.
2012-01-14 02:18:41 +00:00
rcvar="sshd_enable"
Don't be lazy, set the "command" variable even if /etc/defaults/rc.conf will provide foo_program, too. By specifying "command" we explicitly say that we're going to rely on rc.subr(8) default methods, and rc.subr(8) will take advantage of this soon. The majority of our rc.d scripts already set "command" if appropriate, so fix just the non-compliant handful.
2005-10-23 14:06:53 +00:00
command="/usr/sbin/${name}"
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson
2002-06-13 22:14:37 +00:00
keygen_cmd="sshd_keygen"
start_precmd="sshd_precmd"
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
reload_precmd="sshd_configtest"
restart_precmd="sshd_configtest"
Add a configtest command. Submitted by: gjb@ MFC after: 1 week
2012-09-04 21:56:16 +00:00
configtest_cmd="sshd_configtest"
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
pidfile="/var/run/${name}.pid"
Add a configtest command. Submitted by: gjb@ MFC after: 1 week
2012-09-04 21:56:16 +00:00
extra_commands="configtest keygen reload"
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
Do not generate RSA1 or DSA keys by default.
2016-01-22 12:14:08 +00:00
: ${sshd_rsa1_enable:="no"}
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
: ${sshd_rsa_enable:="yes"}
Disable DSA again. MFC after: 3 days
2016-08-03 16:34:20 +00:00
: ${sshd_dsa_enable:="no"}
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
: ${sshd_ecdsa_enable:="yes"}
Upgrade to OpenSSH 6.5p1.
2014-01-31 13:12:02 +00:00
: ${sshd_ed25519_enable:="yes"}
Give sshd a secure startup, but with a tweakable timeout so that the box won't hang forever at startup.
2004-08-04 08:10:37 +00:00
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
sshd_keygen_alg()
Give sshd a secure startup, but with a tweakable timeout so that the box won't hang forever at startup.
2004-08-04 08:10:37 +00:00
{
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
local alg=$1
local ALG="$(echo $alg | tr a-z A-Z)"
local keyfile
if ! checkyesno "sshd_${alg}_enable" ; then
return 0
Give sshd a secure startup, but with a tweakable timeout so that the box won't hang forever at startup.
2004-08-04 08:10:37 +00:00
fi
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
case $alg in
rsa1)
keyfile="/etc/ssh/ssh_host_key"
;;
Upgrade to OpenSSH 6.5p1.
2014-01-31 13:12:02 +00:00
rsa|dsa|ecdsa|ed25519)
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
keyfile="/etc/ssh/ssh_host_${alg}_key"
;;
*)
return 1
;;
esac
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson
2002-06-13 22:14:37 +00:00
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
if [ ! -x /usr/bin/ssh-keygen ] ; then
Backout this commit since it breaks startup and some scripts in certain conditions. I haven't been able to find a better solution yet: - Set a two read-only variables (${prefix} and ${etcdir}). This is especially useful when using /etc/rc.d scripts with third-party software installed from ports. - Fix rc.d/sshd to work with openssh from ports using ${etcdir} instead of hardcoded /etc. - Reflect prefix/etcdir changes in rc.subr.8. src/etc/rc.d/sshd: rev 1.9 -> 1.10 src/etc/rc.subr: rev 1.51 -> 1.52 src/share/man/man8/rc.subr.8: rev 1.11 -> 1.12 Approved by: cperciva (mentor)
2006-08-22 11:17:29 +00:00
warn "/usr/bin/ssh-keygen does not exist."
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson
2002-06-13 22:14:37 +00:00
return 1
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
fi
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
if [ -f "${keyfile}" ] ; then
Reduce priority of host key exists message in sshd startup script to info. Approved by: re (gjb)
2013-10-07 21:39:42 +00:00
info "$ALG host key exists."
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
else
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
echo "Generating $ALG host key."
/usr/bin/ssh-keygen -q -t $alg -f "$keyfile" -N ""
/usr/bin/ssh-keygen -l -f "$keyfile.pub"
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
fi
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
}
Upgrade to OpenSSH 5.8p2.
2011-05-04 07:34:44 +00:00
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
sshd_keygen()
{
sshd_keygen_alg rsa1
sshd_keygen_alg rsa
sshd_keygen_alg dsa
sshd_keygen_alg ecdsa
Upgrade to OpenSSH 6.5p1.
2014-01-31 13:12:02 +00:00
sshd_keygen_alg ed25519
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
}
Add a configtest command. Submitted by: gjb@ MFC after: 1 week
2012-09-04 21:56:16 +00:00
sshd_configtest()
{
echo "Performing sanity check on ${name} configuration."
eval ${command} ${sshd_flags} -t
}
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
sshd_precmd()
{
Ditch the random seeding code, which never really worked as intended. Add config variables to enable / disable individual host key algorithms. Clean up the host key generation code. Approved by: re (gjb) MFC after: 3 weeks
2013-09-21 21:34:22 +00:00
run_rc_command keygen
run_rc_command configtest
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
}
Backout this commit since it breaks startup and some scripts in certain conditions. I haven't been able to find a better solution yet: - Set a two read-only variables (${prefix} and ${etcdir}). This is especially useful when using /etc/rc.d scripts with third-party software installed from ports. - Fix rc.d/sshd to work with openssh from ports using ${etcdir} instead of hardcoded /etc. - Reflect prefix/etcdir changes in rc.subr.8. src/etc/rc.d/sshd: rev 1.9 -> 1.10 src/etc/rc.subr: rev 1.51 -> 1.52 src/share/man/man8/rc.subr.8: rev 1.11 -> 1.12 Approved by: cperciva (mentor)
2006-08-22 11:17:29 +00:00
load_rc_config $name
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names.
2001-06-16 07:16:14 +00:00
run_rc_command "$1"
Reference in New Issue Copy Permalink