summaryrefslogtreecommitdiffstats
path: root/secure
Commit message (Collapse)AuthorAgeFilesLines
* Handle includes the normal way.ru2003-02-273-88/+68
| | | | | Reviewed by: markm Approved by: nectar
* Regenerate man pages after import of OpenSSL 0.9.7a.nectar2003-02-19262-537/+627
|
* LIBDIR/INCLUDEDIR do not include DESTDIR.nectar2003-02-181-2/+2
| | | | Reported by: Andrzej Tobola <san@iem.pw.edu.pl>
* Follow-up to previous commit: we had a des.h symlink, too. Removenectar2003-02-181-0/+1
| | | | that.
* Previously, libcrypto contained symbols that were identical to EAYnectar2003-02-181-0/+7
| | | | | | | | | libdes, and functionally close enough so that we created symlinks (libdes -> libcrypto) to help older applications. With the import of OpenSSL 0.9.7, this is no longer true and we no longer install these symlinks. However, systems that are upgraded may have these symlinks, which could cause non-obvious breakage at build-time. Therefore, blow any old symlinks away in the `afterinstall' target.
* Correct path for finding asm-generating files.nectar2003-02-141-6/+6
|
* Install the OpenSSL man pages in /usr/share/openssl/mannectar2003-02-10268-649/+1587
| | | | and remove the WANT_OPENSSL_MANPAGES knob.
* Do not define OPENSSL_NO_KRB5 here in CFLAGS. It is handled innectar2003-02-091-1/+1
| | | | | | opensslconf.h. Reminded by: reports from des, obrien
* Re-add WANT_OPENSSL_MANPAGES knob.nectar2003-01-311-0/+2
| | | | Noticed by: ru
* Background:nectar2003-01-291-1/+1
| | | | | | | | | | | | | | | | | | | | | When libdes was replaced with OpenSSL's libcrypto, there were a few interfaces that the former implemented but the latter did not. Because some software in the base system still depended upon these interfaces, we simply included them in our libcrypto (rnd_keys.c). Now, finally get around to removing the dependencies on these interfaces. There were basically two cases: des_new_random_key -- This is just a wrapper for des_random_key, and these calls were replaced. des_init_random_number_generator et. al. -- A few functions were used by the application to seed libdes's PRNG. These are not necessary when using libcrypto, as OpenSSL internally seeds the PRNG from /dev/random. These calls were simply removed. Again, some of the Kerberos 4 files have been taken off the vendor branch. I do not expect there to be future imports of KTH Kerberos 4.
* Re-add WANT_OPENSSL_MANPAGES knob.nectar2003-01-291-0/+2
|
* Hopefully fix world for folks not compiling IDEA (the default).peter2003-01-291-2/+2
| | | | | NO_IDEA is now spelled OPENSSL_NO_IDEA. Update the bmake glue accordingly or the IDEA references are not stripped from <openssl/evp.h>
* Force OPENSSL_NO_KRB5. OpenSSL's current implementation of RFC 2712nectar2003-01-296-0/+12
| | | | | | | can only be built with MIT Kerberos. If we didn't define this here, then SSL-using applications would have to define OPENSSL_NO_KRB5 themselves in order to build.
* Update for OpenSSL 0.9.7. No assembler code at the moment. Thismarkm2003-01-28276-2619/+12390
| | | | will follow.
* ia64 and sparc64 both have libc_r now.des2003-01-091-2/+1
|
* Don't build auth-pam.c and auth2-pam.c, auth2-pam-freebsd.c is all we need.des2002-12-141-1/+8
| | | | | | | Use pthreads for PAM if the platform supports it and the user asked for it (by setting OPENSSH_USE_POSIX_THREADS) Sponsored by: DARPA, NAI Labs
* Remove myself as maintainer of openssl; I no longer have enough time tokris2002-11-213-6/+0
| | | | devote to it.
* DON'T EVER PUT THIS BACK!ru2002-11-081-1/+1
| | | | Pointy hat to: obrien
* Style sync with rest of FreeBSD.obrien2002-11-066-52/+41
|
* Update for OpenSSH 3.5p1.des2002-10-293-2/+11
|
* Don't lint contrib'ed sources, even if the builder has asked for linting.markm2002-09-253-0/+6
| | | | Its Just Too Noisy.
* Bandaid for a broken world. The real fix is somewhat moreru2002-09-202-12/+10
| | | | complicated and will be sent for a review.
* Added the missing dependencies for openssl/ headers.ru2002-09-191-5/+7
|
* Use `uint32_t' instead of `unsigned long', since the code assumes 32-bitnectar2002-08-241-30/+29
| | | | | | | | | arithmetic. Reviewed by: make test The fact that bdes(1) didn't work was Reported by: Fred Clift <fclift@verio.net>
* Update list of installed manual pages after regenerating them.nectar2002-07-301-2/+6
|
* This commit was generated by cvs2svn to compensate for changes in r100946,nectar2002-07-30225-673/+1442
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Import the regenerated OpenSSL man pages after import of OpenSSL 0.9.6e.nectar2002-07-30225-673/+1442
| |
* | Update to match reality (i.e. reference libcrypto headers andnectar2002-07-301-3/+4
| | | | | | | | libraries, not the no-longer-existent libdes).
* | s,/usr/include,${INCLUDEDIR},ru2002-07-221-1/+1
| |
* | Removed the (never used) help-distribute target from here.ru2002-07-111-4/+0
| | | | | | | | | | (Similar targets were once used during the release building process for kerberosIV and kerberos5.)
* | ssh-keysign(8) belongs in /usr/libexec, not in /usr/bin, and needs to bedes2002-07-054-5/+5
| | | | | | | | | | | | | | setuid so ssh(1) doesn't have to be. Pointy hat to: des Submitted by: Katsuyuki TATEISHI <katsu@iec.hiroshima-u.ac.jp>
* | Switch over to 3.4p1.des2002-06-291-1/+1
| |
* | No guts, no glory. Switch to OpenSSH-portable.des2002-06-2512-12/+24
| | | | | | | | Sponsored by: DARPA, NAI Labs
* | My previous style commits weren't entirely right. Fix some bugs Ides2002-06-247-23/+11
| | | | | | | | | | | | introduced, and a few more I hadn't yet fixed. Submitted by: bde
* | Previous commit made no sense.des2002-06-241-1/+2
| |
* | Fix style and unbreal static build.des2002-06-245-11/+10
| |
* | Install the new man pages.des2002-06-232-2/+2
| |
* | Update Makefiles for OpenSSH 3.3.des2002-06-234-7/+24
| |
* | Make NO_OPENSSL actually imply NO_OPENSSH, as documented in make.conf(5).ru2002-06-211-1/+1
| |
* | for OpenSSL 0.9.5aobrien2002-05-151-0/+175
| |
* | Build using pregenerated manpages; don't use perl to translate .pod's.markm2002-05-142-12/+2
| | | | | | | | The translated .pod's have already been committed.
* | This commit was generated by cvs2svn to compensate for changes in r96593,markm2002-05-14223-0/+52244
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * As the perl-generated assembler files have been committed, add themarkm2002-05-14223-0/+52244
| | | | | perl-generated (.pod) manual pages too. This is another nail in the perl5 coffin (for base perl, not the port or the language in general).
* Removed now unused INTERNALSTATICLIB.ru2002-05-131-2/+0
| | | | | INTERNALLIB now implies NOPIC and NOPROFILE. Removed gratuitous NOMAN.
* Added new bsd.incs.mk which handles installing of header filesru2002-05-124-27/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | via INCS. Implemented INCSLINKS (equivalent to SYMLINKS) to handle symlinking include files. Allow for multiple groups of include files to be installed, with the powerful INCSGROUPS knob. Documentation to follow. Added standard `includes' and `incsinstall' targets, use them in Makefile.inc1. Headers from the following makefiles were not installed before (during `includes' in Makefile.inc1): kerberos5/lib/libtelnet/Makefile lib/libbz2/Makefile lib/libdevinfo/Makefile lib/libform/Makefile lib/libisc/Makefile lib/libmenu/Makefile lib/libmilter/Makefile lib/libpanel/Makefile Replaced all `beforeinstall' targets for installing includes with the INCS stuff. Renamed INCDIR to INCSDIR, for consistency with FILES and SCRIPTS, and for compatibility with NetBSD. Similarly for INCOWN, INCGRP, and INCMODE. Consistently use INCLUDEDIR instead of /usr/include. gnu/lib/libstdc++/Makefile and gnu/lib/libsupc++/Makefile changes were only lightly tested due to the missing contrib/libstdc++-v3. I fully tested the pre-WIP_GCC31 version of this patch with the contrib/libstdc++.295 stuff. These changes have been tested on i386 with the -DNO_WERROR "make world" and "make release".
* Pre-generate the optimized x86 crypto code and check it in rather thanpeter2002-05-0315-41/+14661
| | | | | | | | | | | depending on perl at build time. Makefile.asm is a helper for after the next import. With my cvs@ hat on, the relatively small repo cost of this is acceptable, especially given that we have other (much bigger) things like lib*.so.gz.uu checked in under src/lib/compat/*. Reviewed by: kris (maintainer)
* Milestone #1 in cross-arch make releases.ru2002-04-262-12/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Do not install games and profiled libraries to the ${CHROOTDIR} with the initial installworld. Eliminate the need in the second installworld. For that, make sure _everything_ is built in the "world" environment, using the right tool chain. Added SUBDIR_OVERRIDE helper stuff to Makefile.inc1. Split the buildworld process into stages, and skip some stages when SUBDIR_OVERRIDE is set (used to build crypto, krb4, and krb5 dists). Added NO_MAKEDB_RUN knob to Makefile.inc1 to avoid running makewhatis(1) at the end of installworld (used when making crypto, krb4, and krb5 dists). In release/scripts/doFS.sh, ensure that the correct boot blocks are used. Moved the creation of the "crypto" dist from release.5 to release.2. In release.3 and doMFSKERN, build kernels in the "world" environment. KERNELS now means "additional" kernels, GENERIC is always built. Ensure we build crunched binaries in the "world" environment. Obfuscate release/Makefile some more (WMAKEENV) to achieve this. Inline createBOOTMFS target. Use already built GENERIC kernel modules to augment mfsfd's /stand/modules. GC doMODULES as such. Assorted fixes: Get rid of the "afterdistribute" target by moving the single use of it from sys/Makefile to etc/Makefile's "distribute". Makefile.inc1: apparently "etc" no longer needs to be last for "distribute" to succeed. gnu/usr.bin/perl/library/Makefile.inc: do not override the "install" and "distribute" targets, do it the "canonical" way. release/scripts/{man,cat}pages-make.sh: make sure Perl manpages and catpages appear in the right dists. Note that because Perl does not respect the MANBUILDCAT (and NOMAN), this results in a loss of /usr/share/perl/man/cat* empty directories. This will be fixed soon. Turn MAKE_KERBEROS4 into a plain boolean variable (if it is set it means "make KerberosIV"), as documented in the make.conf(5) manpage. Most of the userland makefiles did not test it for "YES" anyway. XXX Should specialized kerberized libpam versions be included into the krb4 and krb5 dists? (libpam.a would be incorrect anyway if both krb4 and krb5 dists were choosen.) Make sure "games" dist is made before "catpages", otherwise games catpages settle in the wrong dist. Fast build machine provided by: Igor Kucherenko <kivvy@sunbay.com>
* The library itself does not depend on Kerberos bits.ru2002-04-231-10/+0
| | | | Otherwise, we would have broken krb4 and krb5 dists.
* Switch over to using pam_login_access(8) module in sshd(8).ru2002-03-261-5/+3
| | | | | | (Fixes static compilation. Reduces diffs to OpenSSH.) Reviewed by: bde
* Install headers with -C. Ideally, these Makefiles should not need todes2002-03-233-4/+4
| | | | | override the beforeinstall target at all, but this has proven difficult to achieve.
OpenPOWER on IntegriCloud