d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
135,076 Commits 4 Branches 49 Tags 2 GiB
fd172ed327
Commit Graph

134 Commits

Author SHA1 Message Date
ru
c9d8bf8608 Add pam_ssh support to the static PAM library, libpam.a: 
- Spam /usr/lib some more by making libssh a standard library.
- Tweak ${LIBPAM} and ${MINUSLPAM}.
- Garbage collect unused libssh_pic.a.
- Add fake -lz dependency to secure/ makefiles needed for
  dynamic linkage with -lssh.

Reviewed by:	des, markm
Approved by:	markm
 2002-01-23 15:54:17 +00:00
markm
7f33af3e59 Clean up makefiles, and turn on WARNS=2. Take into account the telnet 
#if cleanup.
 2001-11-30 21:10:58 +00:00
markm
e909686930 Diff reduce all the crypto telnet Makefiles. 2001-08-20 12:32:45 +00:00
bde
7f2b2ff935 Link to libcipher in the usual way. `bdes' depended on a nonexistent 
library.  This only worked because of the undocmented feature of make(1)
that targets named foo.a are always up to date.

Fixed some style bugs.
 2001-08-03 22:28:25 +00:00
markm
18d8718070 Revamp and diff-reduce the various secure telnets. Make sure that 
Kerberos5 has _a_ telnet (which is not currently K5 enabled).
Incorporate BDE's static linking fixes.
 2001-08-03 16:03:26 +00:00
bde
150ca138e2 Fixed world breakage when NOSHARED=yes. libmp now depends on libcrypto, 
so it must be linked before libcrypto to work right.
 2001-07-30 14:36:19 +00:00
ru
e3b0021e39 Added missing DPADD and CLEANFILES. 2001-07-12 09:17:51 +00:00
bde
a968ca96b6 Fixed world breakage in previous commit. -lpam must never be used 
directly (except in the definition of MINUSLPAM in bsd.libnames.mk)
since it doesn't give all the libraries necessary for static linkage.

Fixed missing ${LIBPAM} in DPADD.

Fixed some style bugs in DPADD and LDADD.
 2001-05-09 14:30:49 +00:00
nsayer
ce2648b0d2 Add PAM support to SRA authentication. Cribbed mostly from ftpd. This 
doesn't solve the problem of root being allowed to log in, but that sort
of thing is something PAM should be doing anyway.
 2001-05-07 20:38:39 +00:00
green
a0c1c483e2 Follow the OpenSSH 2.9 upgrade with the infrastructure. Two new 
programs are now included: sftp(1) and ssh-keyscan(1).
 2001-05-04 04:21:25 +00:00
ru
98c6ecb383 Bye-bye /usr/lib/libtelnet.a. This should fix ``make release'' brokeness. 
Approved by:	markm
 2001-03-28 12:08:22 +00:00
ru
ffbd5f978d secure/ build fixes: 
- TELNETOBJDIR is gone.  `buildworld' already installs libtelnet.a
  in ${WORLDTMP}/usr/lib, and we have LIBRARY_PATH pointing there.

- SSHDIR (formerly SSHSRC) is now shared between all SSH modules.
  New LIBSSH is introduced for libssh.a (an internal static lib).
  Previously, build without prior `obj' was broken; SSH modules
  always looked for libssh.a in ${.OBJDIR}.  Also, the dependancies
  on the libssh.a were missing.

- libtelnet/ did not install the crypto version of telnet.h into
  /usr/include/arpa.

- Removed BINOWN, BINMODE, BINDIR and SRCS with default values.

Reviewed by:	markm

- MAN[1-9] -> MAN.
 2001-03-26 14:53:33 +00:00
ru
a2560551a0 man(7) -> mdoc(7). 2001-01-16 15:28:12 +00:00
green
dd707cf4f4 Disable /usr/bin/ssh being setuid root by default. Let the variable 
ENABLE_SUID_SSH being defined reenable it for those that want it.

This follows discussion favoring the change from September.  It
is not usually necessary to be setuid root, possibly less safe,
and less convenient (cannot use $HOSTALIASES, for example).

Submitted by:	jedgar
 2000-11-14 04:42:25 +00:00
kris
1925c689bb Update for OpenSSL 0.9.6 2000-11-13 02:21:38 +00:00
kris
f9e92409b4 Update for OpenSSH 2.2.0 2000-09-10 09:43:29 +00:00
ache
c0ebc50c76 Add missing quotes around xauth path 2000-08-23 19:14:48 +00:00
kris
aba57a02e8 Respect X11BASE to derive the location of xauth(1) 
PR:		17818
Submitted by:	Bjoern Fischer <bfischer@Techfak.Uni-Bielefeld.DE>
 2000-08-23 09:39:20 +00:00
kris
509680f8f3 Install the openssl(1) manpage with an MLINK from ssl(8) to at least put 
something in the location where OpenSSH likes to point.
 2000-08-03 05:29:04 +00:00
peter
e2062d0bd5 Add missing $FreeBSD$ to files that are NOT still on vendor a branch. 2000-07-16 05:48:49 +00:00
markm
2fe0472e39 MFI. This is a documentation-only, diffreducing patch, that if 
invoked will cause breakage. US Users - DO NOT try to turn on
IDEA - the sources are not included.
 2000-06-24 06:50:58 +00:00
kris
45c7889547 Update for OpenSSH 2.1 2000-05-15 05:26:50 +00:00
kris
ec2fce6561 Update for OpenSSL 0.9.5a and clean up a bit. 2000-04-13 07:37:35 +00:00
kris
2325c37f86 Missed a fix for the new openssh; this fixes make world. 2000-03-26 21:17:11 +00:00
kris
f2ad2382fd Update for latest OpenSSH 2000-03-26 07:54:12 +00:00
kris
0d1f47825b Buildworld fixes for NO_OPENSSH and NO_OPENSSL 
Approved by:	jkh
 2000-03-09 06:29:05 +00:00
jhay
9e73fea413 MFI: Make ssh and sshd link in the krb5 part of make release. 
Reviewed by:	markm
 2000-03-03 20:34:05 +00:00
markm
b401a071dd New distribution names. 2000-02-28 19:25:34 +00:00
peter
58c2a78aa2 Merge from internat.freebsd.org repo, minus change to rsa_eay.c (missing) 
Reorganize and unify libcrypto's interface so that the RSA implementation
is chosen at runtime via dlopen().

This is a checkpoint and may require more tweaks still.
 2000-02-26 13:13:03 +00:00
peter
3e7de8aad5 Merge from internat.freebsd.org; deal with -DRSAref the same way as 
libcrypto - not that it means much on the US code tree.
 2000-02-25 14:15:31 +00:00
peter
47e3d89f30 Don't pull in libRSAglue for the rsaref case. Since this is linked 
dynamically by default, we use the dlopen() calls to load librsaref.so
on US code trees.
 2000-02-25 08:21:35 +00:00
markm
ef025b40ab Build everything properly. This means: 
o Don't b uild libdes.

o Crypto is now housed in libcrypto (with a compatability symlink to
  libdes)

o RSA may depend on RSAREF at your locale.

o OpenSSH is now a part of the base system.
 2000-02-24 18:59:34 +00:00
markm
e2eb488588 Add the OpenSSH userland-building Makefiles. 2000-02-24 17:00:55 +00:00
markm
95d086535d Diff reducer. Comes from Internat. 2000-02-24 09:52:37 +00:00
markm
785e71a1db Remove useless whitespace. 
Part of big commit OK'ed by: JKH
 2000-02-24 09:48:58 +00:00
kris
85bfffb077 Back out the previous commit - it broke world and was not approved. 
I don't know what I was thinking committing without approval - sorry.
 2000-02-14 08:09:52 +00:00
kris
f7d8edf2df Link dynamically, not statically. 2000-02-13 00:53:12 +00:00
kris
e47db973e2 Add NO_OPENSSL knob to turn off building of openssl 
Requested by:   wollman
 2000-01-30 04:12:49 +00:00
shin
ce15efb7c0 another tcp apps IPv6 updates.(should be make world safe) 
ftp, telnet, ftpd, faithd
  also telnet related sync with crypto, secure, kerberosIV

Obtained from: KAME project
 2000-01-27 09:28:38 +00:00
kris
6dea110be6 Don't search for libraries in ${LOCALBASE}. This should fix the problems 
people were seeing with conflicts with the openssl port.
 2000-01-20 07:29:01 +00:00
kris
fb35998cf9 The wrong version of the file was committed previously which explains the 
problems seen here.
 2000-01-16 21:00:06 +00:00
kris
c4ff3eee89 Turn back on openssl building. 2000-01-16 05:25:26 +00:00
kris
980132129f Add MAINTAINER tag so people don't feel the need to randomly frob with this. 2000-01-16 02:20:03 +00:00
green
3404ef4464 We cannot have libcrypto, and therefore OpenSSL at all, without RSA. 
If you need examples of breakage, I'm ready to provide more than a
few.
 2000-01-15 18:02:10 +00:00
kris
e64b093666 Connect OpenSSL to the build. 2000-01-14 08:01:51 +00:00
kris
fdd71b0f8f Build infrastructure for OpenSSL 2000-01-14 05:49:29 +00:00
peter
bf11704e75 Revert -lmd changes now that libcrypt doesn't expose this binutils/ld 
bug any more.
 1999-12-18 16:42:33 +00:00
marcel
539b0dd3ef Add libmd to DPADD and LDADD. 1999-12-17 11:45:28 +00:00
markm
ca616e7d07 Dont build telenet if we are going for kerberised telnet; this just 
jumps all over kerberised telnet otherwise.
 1999-10-12 19:48:05 +00:00
markm
e22fcdae42 Make telnet with SRA work. 
Submitted by:	Nick Sayer
 1999-10-07 19:47:09 +00:00
peter
efabb9ccb1 $Id$ -> $FreeBSD$ 1999-08-28 01:35:59 +00:00
kris
ea91b6aa9b Typo in comment. 1999-04-25 13:14:36 +00:00
peter
4968036f61 Revert $FreeBSD$ to $Id$ 1997-02-22 14:40:44 +00:00
jkh
808a36ef65 Make the long-awaited change from $Id$ to $FreeBSD$ 
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore.  This update would have been
insane otherwise.
 1997-01-14 07:20:47 +00:00
markm
524bda369e Secure telnet is now in eBones. 1996-11-07 14:42:57 +00:00
jkh
8eb37231d4 Bring in my changes for removing the pestilent obj links (unless you 
really want them) from /usr/src.  This is the final version of the
patches, incorporating the feedback I've received from -current.
 1996-06-24 04:26:21 +00:00
nate
87afb7f371 Bring in a change that got lost when we spammed over the CVS repository 
to fix the mega-commits spamming.

pst         96/05/29 20:09:25

  Modified:    secure/usr.bin/telnet  Makefile main.c
  Log:
  Remove obsolete SOCKSv4 support

Submitted by:	pst
Obtained from:  A mirrored CVS repository that will disappear next SUP
 1996-06-05 22:48:04 +00:00
pst
d73d5ee489 Add support for socks 1996-04-23 05:18:43 +00:00
markm
135587ee97 Big clean-up job. Remove ancient and never-to-be used stuff. 
The look much more like BSD Makefiles now.
 1996-03-11 16:17:58 +00:00
ache
beb2bbfb7a Sense MAKE_EBONES, DESTDIR 
SRCS cleanup
DPADD cleanup
 1996-03-09 13:26:21 +00:00
mpp
6e83fbce86 Correct some manual page cross reference errors. E.g. su is a section 
one man page, not section eight.  This is the first round of such changes
and only fixes man pages in manual section one.
 1996-02-02 00:26:12 +00:00
peter
c3f352d4ad This commit was generated by cvs2svn to compensate for changes in r13122, 
which included commits to RCS files with non-trunk default branches.
 1995-12-30 19:02:48 +00:00
ache
2c2755e311 Pick correct library dir whenever obj exists or not 1995-12-21 17:57:16 +00:00
gibbs
651cbee0db Remove MAKE_EBONES conditionals. They were originally placed here because 
of missing functionality in our libkrb which is no longer a problem.
 1995-10-11 00:04:09 +00:00
ache
c0bde4017e Remove duplicated targets which now build from main tree 
if available and allowed
 1995-09-29 20:23:09 +00:00
gibbs
8d7d06f373 Add TELNETOBJDIR and CRYPTOBJDIR for use in LDADD entries. This makes 
secure reference the libraries that were just build instead of in /usr/lib.
 1995-09-16 03:04:10 +00:00
gibbs
958c14faa7 Enable kerberosIV authentication/encryption conditionalized on MAKE_EBONES. 1995-09-14 21:29:21 +00:00
ache
f87a14f2ec Comment out LDADD+=-ldescrypt, it is not yet active due to 
missng defines for krb4encpwd and rsaencpwd and missing rsa library too.
 1995-08-05 19:10:25 +00:00
markm
96fd43c32a After pst and ache fixed secure telnet, it was still not in the main 
makefiles. This puts it in.

PLEASE NOTE - YOU WILL NEED TO BUILD AND INSTALL THE libtelnet IN secure/
Reviewed by:
Submitted by:
Obtained from:
 1995-07-29 12:49:25 +00:00
ache
5bd836c190 Final cleanup pass through Makefiles, now this stuff 
autodetect kerberos/eBones and work even with eBones,
but with reduced functionality (don't pick up des/krb stuff
in this case)
 1995-07-24 22:55:59 +00:00
ache
2abb3f187a Add -ldescrypt, or wrong crypt version can be picked from libc 
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 22:01:01 +00:00
ache
8d6cb97e95 Since this stuff not works with eBones, ifdef kerberos stuff 
with MAKE_KERBEROS to allow other things to live
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 21:47:30 +00:00
ache
cb87a42d33 Add comment about new_rnd_key.c module needed from original 
libdes (and not present in eBones libdes)
 1995-07-24 21:12:57 +00:00
ache
0551b03e78 Fix dependances, typing errors, etc. 
Note: this thing need original libdes not Eric Young libdes from eBones
Submitted by:
Obtained from:
 1995-07-24 20:40:03 +00:00
pst
d6b93135e2 Update telnet to the 95.05.31 release. 
Obtained from:	Dave Borman <dab@cray.com>
 1995-07-20 11:40:06 +00:00
rgrimes
f3a2b348da Remove trailing whitespace. 1995-05-30 06:12:45 +00:00
dima
937577d030 Security fixes. 
CERT Advisory CA-95:03.telnet.encryption

Obtained from: CERT
 1995-02-17 03:57:00 +00:00
phk
277a5cfc85 Make the "distribute" target build the "des" distribution. Make des'ed 
init and ed, by pointing to real sources.
 1994-11-14 20:45:35 +00:00
pst
0ffafd8bfe !Just! fixing makefile, no code changes Geoff 1994-09-30 06:04:40 +00:00
ache
1265c85a97 Add libcipher.a: libcrypt exports only crypt() but not des_setkey() 
which is in libcipher.a
 1994-09-12 17:27:55 +00:00
pst
6239100975 Remove static in front of declarations for des_setkey and des_cipher 
so that linking against -lcrypt (-ldescrypt) will give us the good
versions instead of the stubs in libc.  (These changes need to be
made to the non-US version of libdescrypt too!)

Allow building and support for bdes program.
A bit more work still needs to be done on secure telnet.

Submitted by:	pst
 1994-09-07 07:16:52 +00:00
csgr
c900d4c13e This commit was generated by cvs2svn to compensate for changes in r2316, 
which included commits to RCS files with non-trunk default branches.
 1994-08-27 15:48:54 +00:00
csgr
23c56ec341 The telnet version with encryption in in. 
Reviewed by:	geoff.
 1994-08-27 15:48:54 +00:00
wollman
ead91815c8 Moved from usr.bin/bdes for export-control. 1994-08-07 18:17:39 +00:00