Damien Miller
7280401bdd
remove support for old libcrypto
...
OpenSSH now requires LibreSSL 3.1.0 or greater or
OpenSSL 1.1.1 or greater
with/ok dtucker@
2023-03-24 13:56:25 +11:00
Rochdi Nassah
6b17e12887
Fix broken zlib link.
2022-11-05 07:33:11 +11:00
Darren Tucker
f87a132800
Note that, for now, we need variadic macros.
2022-05-06 14:46:09 +10:00
Damien Miller
a5ab488234
remove built-in support for md5crypt()
...
Users of MD5-hashed password should arrange for ./configure to link
against libxcrypt or similar. Though it would be better to avoid use
of MD5 password hashing entirely, it's arguably worse than DEScrypt.
feedback and ok dtucker@
2021-10-28 16:16:13 +11:00
Darren Tucker
def7a72234
Update comments about EGD to include prngd.
2021-07-09 14:34:06 +10:00
HARUYAMA Seigo
fa1fe3ead7
Restore first section title of INSTALL
2020-09-27 21:12:12 +10:00
Damien Miller
acfe2ac5fe
libfido2 1.5.0 is recommended
2020-09-18 22:02:53 +10:00
Darren Tucker
f2950baf0b
New config-build-time dependency on automake.
2020-09-11 14:45:23 +10:00
Darren Tucker
c2ec7a07f8
Document --without-openssl and --without-zlib.
2020-08-07 14:26:20 +10:00
Darren Tucker
47faad8f79
Document that libfido2 >= 1.4.0 is needed.
2020-05-27 23:26:23 +10:00
mkontani
b18dcf6cca
fix some typos and sentence
2020-02-21 12:29:05 +11:00
HARUYAMA Seigo
11d4271627
Fix typos in INSTALL: s/avilable/available/ s/suppports/supports/
2020-02-18 20:24:44 +11:00
Darren Tucker
b763ed05bd
Minor documentation update:
...
- remove duplication of dependency information (it's all in INSTALL).
- SSHFP is now an RFC.
2020-02-11 12:51:24 +11:00
Darren Tucker
74deb7029b
zlib is now optional.
2020-01-23 22:17:24 +11:00
Darren Tucker
b8df8fe920
Mac OS X has PAM too.
2019-12-18 09:14:45 +11:00
Darren Tucker
9a967c5bbf
Describe how to build libcrypto as PIC.
...
While there, move the OpenSSL 1.1.0g caveat closer to the other version
information.
2019-12-09 20:25:26 +11:00
Darren Tucker
b66fa5da25
Recommend running LibreSSL or OpenSSL self-tests.
2019-12-09 17:23:22 +11:00
Darren Tucker
cf62307bc9
Add libfido2 to INSTALL.
2019-11-15 14:01:20 +11:00
Darren Tucker
69fbda1894
libcrypto is now optional.
2019-11-15 14:01:20 +11:00
Darren Tucker
5a273a33ca
Privsep is now required.
2019-09-19 15:41:23 +10:00
Darren Tucker
cd16aceec1
Add OpenSSL 1.1.1 to the supported list.
...
Clarify the language around prngd and egd.
2019-05-16 07:53:20 +10:00
Darren Tucker
6ab75aba34
Update required OpenSSL versions to match current.
2018-10-28 15:16:31 +11:00
Damien Miller
87f08be054
Remove support for S/Key
...
Most people will 1) be using modern multi-factor authentication methods
like TOTP/OATH etc and 2) be getting support for multi-factor
authentication via PAM or BSD Auth.
2018-07-31 12:59:30 +10:00
Darren Tucker
f2c06ab8dd
Remove ability to override $LD.
...
Since autoconf always uses $CC to link C programs, allowing users to
override LD caused mismatches between what LD_LINK_IFELSE thought worked
and what ld thought worked. If you do need to do this kind of thing you
need to set a compiler flag such as gcc's -fuse-ld in LDFLAGS.
2018-06-08 17:43:36 +10:00
Darren Tucker
f1ca487940
Remove extra newline.
2018-02-15 22:28:00 +11:00
Darren Tucker
6d4e980f3c
OpenSSH's builtin entropy gathering is long gone.
2018-02-15 22:27:51 +11:00
Darren Tucker
79c0e1d299
Add autogenerated dependency info to Makefile.
...
Adds a .depend file containing dependency information generated by
makedepend, which is appended to the generated Makefile by configure.
You can regen the file with "make -f Makefile.in depend" if necessary,
but we'll be looking at some way to automatically keep this up to date.
"no objection" djm@
2017-12-11 14:38:33 +11:00
Darren Tucker
c5bfe83f67
Portable switched to git so s/CVS/git/.
2017-12-09 10:12:23 +11:00
Damien Miller
a65655fb1a
fix incorrect range of OpenSSL versions supported
...
Pointed out by Solar Designer
2017-11-24 10:23:47 +11:00
Damien Miller
ff3507aea9
typo
2017-07-07 11:21:39 +10:00
Darren Tucker
30eee7d1b2
Re-add missing "Prerequisites" header and fix typo
...
Patch from HARUYAMA Seigo <haruyama at unixuser org>.
2016-12-20 12:16:11 +11:00
Darren Tucker
461f50e7ab
Update links to https.
...
www.openssh.com now supports https and ftp.openbsd.org no longer
supports ftp. Make all links to these https.
2016-10-21 06:55:58 +11:00
Darren Tucker
dd4e7212a6
Update host key generation examples.
...
Remove ssh1 host key generation, add ssh-keygen -A
2016-10-21 06:48:46 +11:00
Darren Tucker
976ba8a8fd
Fix typo.
2016-08-17 15:33:10 +10:00
Darren Tucker
9abf84c25f
Correct LDFLAGS for clang example.
...
--with-ldflags isn't used until after the -ftrapv test, so mention
LDFLAGS instead for now.
2016-08-17 14:25:43 +10:00
Darren Tucker
adab758242
Remove now-obsolete CVS $Id tags from text files.
...
Since -portable switched to git, the CVS $Id tags are no longer being
updated and are becoming increasingly misleading. Remove them.
2016-08-17 13:40:58 +10:00
Darren Tucker
560c006854
Add a section for compiler specifics.
...
Add a section for compiler specifics and document the runtime requirements
for clang's integer sanitization.
2016-08-17 13:38:30 +10:00
Damien Miller
b0b48beab1
update recommended autoconf version
2016-08-02 11:06:23 +10:00
Darren Tucker
a162dd5e58
OpenSSL 1.1.x not currently supported.
2016-07-14 21:19:59 +10:00
Darren Tucker
ad7d23d461
20140908
...
- (dtucker) [INSTALL] Update info about egd. ok djm@
2014-09-09 12:23:10 +10:00
Damien Miller
ad013944af
- (djm) [INSTALL] Recommend libcrypto be built -fPIC, mention LibreSSL,
...
update OpenSSL version requirement.
2014-08-26 09:27:28 +10:00
Damien Miller
a75aca1bbc
- (djm) [INSTALL contrib/caldera/openssh.spec contrib/cygwin/README]
...
[contrib/redhat/openssh.spec contrib/suse/openssh.spec] Remove mentions
of TCP wrappers.
2014-08-19 11:36:07 +10:00
Darren Tucker
b3cd503742
- (dtucker) [INSTALL] Bump documented autoconf version to what we're
...
currently using.
2013-03-07 12:33:35 +11:00
Darren Tucker
aa3cbd1b5b
- (dtucker) [INSTALL LICENCE configure.ac openbsd-compat/Makefile.in
...
openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/getrrsetbyname.c]
bz 1320: Add optional support for LDNS, a BSD licensed DNS resolver library
which supports DNSSEC. Patch from Simon Vallet (svallet at genoscope cns fr)
with some rework from myself and djm. ok djm.
2011-11-04 11:25:24 +11:00
Damien Miller
f22019bdbf
- (djm) [Makefile.in WARNING.RNG aclocal.m4 buildpkg.sh.in configure.ac]
...
[entropy.c ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c]
[ssh-keysign.c ssh-pkcs11-helper.c ssh-rand-helper.8 ssh-rand-helper.c]
[ssh.c ssh_prng_cmds.in sshd.c contrib/aix/buildbff.sh]
[regress/README.regress] Remove ssh-rand-helper and all its
tentacles. PRNGd seeding has been rolled into entropy.c directly.
Thanks to tim@ for testing on affected platforms.
2011-05-05 13:48:37 +10:00
Damien Miller
d8f6002272
- (djm) [INSTALL Makefile.in README.smartcard configure.ac scard-opensc.c]
...
[scard.c scard.h pkcs11.h scard/Makefile.in scard/Ssh.bin.uu scard/Ssh.java]
Remove obsolete smartcard support
2010-02-12 09:34:22 +11:00
Darren Tucker
fb206ded16
- (dtucker) [INSTALL] Link to tcpwrappers.
2007-08-17 22:52:05 +10:00
Darren Tucker
8ea84561c4
- (dtucker) [INSTALL] Give PAM its own heading.
2007-08-17 22:12:14 +10:00
Darren Tucker
ea43c49650
- (dtucker) [INSTALL] the pid file is sshd.pid not ssh.pid.
2007-08-17 22:10:10 +10:00
Darren Tucker
1a32953e48
- (dtucker) [INSTALL] Group the parts describing random options and PAM
...
implementations together which is hopefully more coherent.
2007-08-17 22:03:09 +10:00