53 Commits

Author SHA1 Message Date
Natanael Copa
a439ca1341 main/openssh: add support for disable keygen
Add support for SSHD_DISABLE_KEYGEN in /etc/conf.d/sshd to make it
possible disable host key generation at startup.

Also sync with gentoo's init.d script

fixes #4171
2015-05-21 12:45:34 +00:00
Natanael Copa
6bf81f56e8 main/*: replace all sbin/runscript with sbin/openrc-run 2015-04-28 14:34:51 +00:00
Timo Teräs
6fa5bf8273 main/openssh: upgrade to 6.8p1
rebase manually the hpn patch
2015-03-19 10:55:17 +02:00
Timo Teräs
480caba4ac main/openssh: upgrade to 6.7p1 2014-11-21 08:37:03 +00:00
Peter Bui
3996dc08a5 main/openssh: flush stdout for interactive sftp
Previously, the "sftp> " prompt would only appear after a command was
entered.  This simply calls fflush on stdout to force the prompt to
appear during interactive mode.
2014-10-30 12:48:29 +00:00
Johannes Matheis
5bc265ef45 main/openssh: curve25519pad patch added
https://lists.mindrot.org/pipermail/openssh-unix-dev/2014-April/032494.html:
> bad bignum encoding for curve25519-sha256@libssh.org
>[...]
> So I screwed up when writing the support for the curve25519 KEX method
> that doesn't depend on OpenSSL's BIGNUM type - a bug in my code left
> leading zero bytes where they should have been skipped. The impact of
> this is that OpenSSH 6.5 and 6.6 will fail during key exchange with a
> peer that implements curve25519-sha256@libssh.org properly about 0.2%
> of the time (one in every 512ish connections).
2014-09-03 15:27:41 +03:00
Natanael Copa
faaf829725 main/openssh: move ssh-keysign to separate subpackage
This is a helper utility for host-based authentication, which is
disabled by default and normally not needed.

We move it to subpackage because it is suid root.

fixes #3311
2014-08-27 08:51:44 +00:00
Natanael Copa
1e351e7924 main/openssh: disable wtmp
fixes #2744
2014-05-27 11:50:19 +00:00
Timo Teräs
a518b8afc4 main/openssh: security fix for CVE-2014-2653
patch cherry-picked from debian
also delete the obsolete old CVE patch (6.6 has the fix builtin)
2014-04-18 16:58:43 +03:00
Eivind Uggedal
382576cb87 main/openssh: generate ed25519 host key 2014-04-04 14:57:40 +03:00
Natanael Copa
4381ab73f5 openssh: upgrade to 6.2 2014-04-03 14:45:38 +00:00
Bartłomiej Piotrowski
504d9cc36b main/openssh: security fix for CVE-2014-2532 2014-03-26 10:15:12 +01:00
Natanael Copa
6d4ec161f3 main/openssh: upgrade to 6.4_p1 2013-11-08 07:00:34 +00:00
Timo Teräs
e53afc7d2f main/openssh: fix build
openssh got upgraded since my last musl build, and had config.sub
updated. remove the now unneeded update_config_sub check.
2013-09-20 14:18:01 +00:00
Timo Teräs
2025a625e6 main/openssh: fix build against musl 2013-09-20 14:03:39 +00:00
Bartłomiej Piotrowski
5c40e9ee3b main/openssh: update checksums 2013-09-14 11:13:18 +02:00
Bartłomiej Piotrowski
847c6094ce main/openssh: rebase openssh-peaktput.diff 2013-09-14 11:04:05 +02:00
Bartłomiej Piotrowski
373c1bee77 main/openssh: upgrade to 6.3_p1 2013-09-14 11:00:30 +02:00
Bartłomiej Piotrowski
c3c2094173 Revert "main/openssh: upgrade to 6.3_p1"
This reverts commit 4f91876c99dba7e38c09a2c0dc87c5ff4f148461.
2013-09-14 10:44:59 +02:00
Bartłomiej Piotrowski
4f91876c99 main/openssh: upgrade to 6.3_p1 2013-09-14 10:36:16 +02:00
Natanael Copa
a19f6b51de main/openssh: reintroduce dynwindows HPN patch 2013-09-02 08:56:59 +00:00
Leonardo Arena
bde44dcc70 main/openssh: disable reverse DNS lookup 2013-08-23 14:51:17 +00:00
Natanael Copa
49702ab316 main/openssh: remove references to missing patches 2013-08-16 08:18:13 +00:00
Timo Teräs
5c90471732 [all autotools packages]: normalize ./configure 2013-07-30 08:54:53 +00:00
Bartłomiej Piotrowski
0ba8a696b0 main/openssh: upgrade to 6.2_p2 2013-05-17 08:41:23 +02:00
Timo Teräs
2ef241ba05 main/openssh: upgrade to 6.2_p1
rebase dynwindow patch.
2013-04-12 12:49:03 +03:00
Carlo Landmeter
bc96b7b6f6 main/openssh: remove libcrypto1.0 from deps 2013-02-08 14:56:43 +00:00
Carlo Landmeter
4fec08f9b0 main/openssh: add contrib scripts 2013-01-07 15:22:41 +01:00
Timo Teräs
e15b1ac0e3 main/openssh: upgrade to 6.1
* rebase hpn dynamic window patch
2012-09-04 09:03:48 +03:00
Timo Teräs
2c2467e1eb main/openssh: upgrade to 6.0p1
* also add support for hmac oneshot mode (requires patched openssl;
   we have these patches in Alpine)
 * rebase hpn patches
 * remove obsolete patch (upstreamed)
2012-08-02 17:40:14 +03:00
Timo Teräs
f44ae22eac main/openssh: fix openssl abi compatibility detection (for openssl-1.0+) 2012-03-28 10:07:03 +03:00
Natanael Copa
e9382963d3 main/openssh: fix init.d script
- properly kill established ssh connections on shutdown
- do not use $opts in init.d script. ref #943
2012-01-19 12:08:39 +00:00
Timo Teräs
2301f306ce main/openssh: upgrade to 5.9p1 (and rebase hpn patches we use) 2012-01-17 10:20:57 +02:00
Natanael Copa
4a7fde37aa main/openssh: do not try kill nonexisting sshd session on shutdown
Fixes the error message on shutdown:
sh: you need to specify whom to kill
2011-10-21 09:22:55 +00:00
Natanael Copa
aa95d4432b main/openssh: fix circular dep 2011-07-23 20:59:41 +00:00
Natanael Copa
8d571bb611 main/openssh: upgrade to 5.8_p2 2011-05-03 06:37:34 +00:00
Matt Smith
bf17c7ead2 main/openssh: drop connections on reboot/halt 2011-03-31 07:25:03 -05:00
Natanael Copa
631e05bb3e main/openssh: generate ecdsa host key 2011-02-26 13:01:36 +00:00
Natanael Copa
15460226da main/openssh: upgrade to 5.8_p1 2011-02-18 16:32:01 +00:00
William Pitcock
ba2600dc6e Set all packages with arch="x86 x86_64" to arch="all". 2011-01-13 06:06:02 -06:00
Natanael Copa
da49ad32c4 main/*: add arch 2010-12-13 16:00:16 +00:00
Natanael Copa
e48e174b78 main/openssh: apply HPN patches for speed improvement
http://www.psc.edu/networking/projects/hpn-ssh/faq.php

fixes #441
2010-10-14 07:01:34 +00:00
Natanael Copa
22e1f304b5 main/openssh: upgrade to 5.6_p1 2010-08-23 14:25:33 +00:00
Natanael Copa
148036d8cb main/openssh: upgrade to 5.5_p1 2010-05-27 18:47:16 +00:00
Natanael Copa
9ca82f726f main/[various]: rebuild against openssl-1.0 2010-05-14 17:57:16 +00:00
Natanael Copa
b4eecaf058 main/[various]: bump pkgrel to force rebuild against nptl 2010-05-04 08:26:51 +00:00
Natanael Copa
0a077a3063 Revert "main/openssh: kill current ssh sessions on stop"
This reverts commit ae99c382f78b1582b1528c2ce03570605c845503.
2010-03-16 14:14:00 +00:00
Natanael Copa
ae99c382f7 main/openssh: kill current ssh sessions on stop 2010-03-16 07:59:54 +00:00
Natanael Copa
5a2d7c6244 main/openssh: upgrade to 5.4_p1 2010-03-11 21:19:19 +00:00
Natanael Copa
26d7de4509 main/openssh: upgrade to 5.3_p1 2009-11-10 08:21:02 +00:00