summaryrefslogtreecommitdiffstats
path: root/secure
Commit message (Collapse)AuthorAgeFilesLines
...
* Nuke RSAREF support from orbit.kris2000-09-104-75/+3
| | | | It's the only way to be sure.
* ``Anyone is now free to rub two primes together for their own gratification''kris2000-09-061-1/+1
| | | | | | | | | | -- Unknown Now that the RSA algorithm is released into the public domain, build librsaintl by default unless NO_RSAINTL is set in make.conf. The native OpenSSL implementation of RSA is much faster, doesn't have an artificial keysize limitation, has 30% fewer calories and tastes great!
* Err, we weren't even compiling auth1.c with LOGIN_CAP at all. Guess nobodykris2000-09-021-1/+1
| | | | was using this feature.
* Make the temporary file _evp.h instead of evp.h to not conflict withgreen2000-08-242-5/+7
| | | | | | the real evp.h. Reported by: markm
* Add missing quotes around xauth pathache2000-08-231-1/+1
|
* Generate a new evp.h at build-time instead of install-time to properlygreen2000-08-232-6/+7
| | | | support NFS(ro) installworlds.
* Respect X11BASE to derive the location of xauth(1)kris2000-08-231-0/+4
| | | | | PR: 17818 Submitted by: Bjoern Fischer <bfischer@Techfak.Uni-Bielefeld.DE>
* Add working and easy crypt(3)-switching. Yes, we need a whole new APIgreen2000-08-221-0/+1
| | | | | | | | | | | | | | for crypt(3) by now. In any case: Add crypt_set_format(3) + documentation to -lcrypt. Add login_setcryptfmt(3) + documentation to -lutil. Support for switching crypt formats in passwd(8). Support for switching crypt formats in pw(8). The simple synopsis is: edit login.conf; add a passwd_format field set to "des" or "md5"; go nuts :) Reviewed by: peter
* Turn on support for IPv6gshapiro2000-08-141-1/+1
|
* Get rid of the /etc/aliases -> /etc/mail/aliases hack. /etc/mail/aliasesgshapiro2000-08-131-6/+0
| | | | now exists in the distribution.
* The rest of the changes needed to support the new version of sendmail (8.11.0).gshapiro2000-08-121-11/+28
| | | | | | Beyond changes to the build system, this includes fixing up the sample freebsd.mc configuration for changes in defaults and syntax, removing outdated documentation, and updating the release notes.
* Unbreak the OpenSSL headers for those of us who don't/can't use IDEA bygreen2000-08-041-1/+10
| | | | | getting rid of the check for NO_IDEA (in evp.h) completely if it's installed without MAKE_IDEA=YES.
* Install the openssl(1) manpage with an MLINK from ssl(8) to at least putkris2000-08-031-6/+12
| | | | something in the location where OpenSSH likes to point.
* Don't build sshd if NO_OPENSSL defined.kris2000-07-301-1/+1
| | | | Submitted by: stephen@math.missouri.edu
* Don't build crypto-enabled telnetd if NO_OPENSSL is defined, since itkris2000-07-251-1/+1
| | | | attempts to link against libcrypto.
* WITH_IDEA --> MAKE_IDEA fix.markm2000-07-161-1/+1
|
* Add missing $FreeBSD$ to files that are NOT still on vendor a branch.peter2000-07-162-0/+6
|
* Be consistant about WITH_ vs MAKE_ flags. We have a precedent of usingpeter2000-07-142-4/+4
| | | | | | | MAKE_foo for things like MAKE_KERBEROS etc. Use that. I managed to confuse myself last time and made make.conf different to the code. ;-( Reported by: Jun Kuriyama <kuriyama@FreeBSD.org>
* Argh. Cut/paste transcription error. Fix syntax of previous commit.peter2000-07-031-1/+1
|
* USA_RESIDENT is forced to YES or NO at the start of Makefile.inc1peter2000-07-031-1/+2
| | | | | | Use that to be the final arbiter of whether or not to build the librsaintl.so plugin for openssl/openssh. Add a magic WANT_RSAINTL flag to force building even if USA_RESIDENT=YES.
* MFI. This is a documentation-only, diffreducing patch, that ifmarkm2000-06-244-2/+23
| | | | | invoked will cause breakage. US Users - DO NOT try to turn on IDEA - the sources are not included.
* Link explicitly against -lmd. I'm not sure what was pulling this inkris2000-06-111-2/+2
| | | | on -current, but it doesnt do it on -stable.
* Add a new file to SRCSkris2000-06-031-1/+1
|
* /dev/urandom is the default random device, so no use in stateing it here.obrien2000-05-151-4/+1
| | | | Also simplify the conditionals a little.
* This version is slightly better than rev 1.10. There are still missingobrien2000-05-151-10/+8
| | | | | dependencies for openssl/*.h. I cannot reproduce any critical race conditions with this revision.
* Use unadorned `mkdir -p', removing the "test ... ||".obrien2000-05-151-2/+2
| | | | | There are sometimes problems with "&&" and "||" in the `make -j' case, as it appears multiple processes may process parts of the execution line.
* Update for OpenSSH 2.1kris2000-05-153-5/+15
|
* Use the C locale for running date(1).kris2000-04-201-1/+1
| | | | Submitted by: ache
* Update for OpenSSL 0.9.5a and clean up a bit.kris2000-04-135-111/+183
|
* Update for OpenSSL 0.9.5a and clean up a bit.kris2000-04-132-38/+10
| | | | Take responsibility for this makefile again :-)
* * Fix dependancies so that ``make depend'' is not required.obrien2000-04-111-24/+26
| | | | | | * Some style fixes Approved by: kris
* * Fix dependancies so that ``make depend'' is not required.obrien2000-04-111-38/+39
| | | | | | * Some style fixes Approved by: kris
* Add libcrypto to LDADD. This fixes problems seen with e.g. apache-modsslkris2000-04-041-0/+1
| | | | Submitted by: Jim Bloom <bloom@acm.org>
* Missed a fix for the new openssh; this fixes make world.kris2000-03-261-1/+1
|
* Update for latest OpenSSHkris2000-03-262-4/+4
|
* Add a new function stub to libcrypto() which resolves to a symbol inkris2000-03-131-1/+1
| | | | | | | | | | | the librsa* library and reports which version of the library (OpenSSL/RSAREF) is being used. This is then used in openssh to detect the failure case of RSAREF and a RSA key >1024 bits, to print a more helpful error message than 'rsa_public_encrypt() fai led.' This is a 4.0-RELEASE candidate.
* Make LOGIN_CAP work properly.markm2000-03-091-3/+5
| | | | Submitted by: ache
* Buildworld fixes for NO_OPENSSH and NO_OPENSSLkris2000-03-091-2/+2
| | | | Approved by: jkh
* Build a shared library too - ports expect it.kris2000-03-071-1/+0
| | | | | Reviewed by: peter Approved by: jkh
* Merge from internat.freebsd.org; cleanup stray rsaref glue code referencepeter2000-03-051-4/+0
|
* MFI: Make ssh and sshd link in the krb5 part of make release.jhay2000-03-032-4/+4
| | | | Reviewed by: markm
* Resurrect the old libdes manpages (after a repo copy) until we have betterkris2000-03-021-0/+14
| | | | ones.
* Merge from internat.freebsd.org: add libcrypto to librsaUSA's symbol searchpeter2000-03-021-0/+2
| | | | | | | | | path so that ERR_load_strings() is found in certain circumstances involving dlopen(). eg: main program dlopened foo.so which is linked against libcrypto. If libcrypto then dlopens librsaUSA.so, then it's search path doens't find libcrypto (!). One "fix" is to force modules (eg main opening foo.so) to use the RTLD_GLOBAL flag, the other is to explicitly declare dependencies (as done here).
* MFI: stupid typo of mine.markm2000-02-291-1/+1
|
* Add NODESCRYPTLINKS knob to prevent spamming of libcrypt -> libscryptkris2000-02-291-0/+2
| | | | | | | symlinks. The name is against my better judgement, but I defer to ancient tradition here because I'm a nice guy. Reviewed by: -current
* New distribution names.markm2000-02-283-4/+11
|
* New distribution name.markm2000-02-281-1/+1
|
* Merge from internat.freebsd.org repo, minus change to rsa_eay.c (missing)peter2000-02-266-25/+98
| | | | | | | Reorganize and unify libcrypto's interface so that the RSA implementation is chosen at runtime via dlopen(). This is a checkpoint and may require more tweaks still.
* Merge from internat.freebsd.org; deal with -DRSAref the same way aspeter2000-02-251-7/+9
| | | | libcrypto - not that it means much on the US code tree.
* Merge from internat.freebsd.org; make RSAREF=YES work correctly, althoughpeter2000-02-252-1/+1
| | | | this is not very useful as the US repo is missing bits.
OpenPOWER on IntegriCloud