Commit Graph

108 Commits

Author SHA1 Message Date
Damien Miller 87f08be054 Remove support for S/Key
Most people will 1) be using modern multi-factor authentication methods
like TOTP/OATH etc and 2) be getting support for multi-factor
authentication via PAM or BSD Auth.
2018-07-31 12:59:30 +10:00
Darren Tucker f2c06ab8dd Remove ability to override $LD.
Since autoconf always uses $CC to link C programs, allowing users to
override LD caused mismatches between what LD_LINK_IFELSE thought worked
and what ld thought worked.  If you do need to do this kind of thing you
need to set a compiler flag such as gcc's -fuse-ld in LDFLAGS.
2018-06-08 17:43:36 +10:00
Darren Tucker f1ca487940 Remove extra newline. 2018-02-15 22:28:00 +11:00
Darren Tucker 6d4e980f3c OpenSSH's builtin entropy gathering is long gone. 2018-02-15 22:27:51 +11:00
Darren Tucker 79c0e1d299 Add autogenerated dependency info to Makefile.
Adds a .depend file containing dependency information generated by
makedepend, which is appended to the generated Makefile by configure.

You can regen the file with "make -f Makefile.in depend" if necessary,
but we'll be looking at some way to automatically keep this up to date.

"no objection" djm@
2017-12-11 14:38:33 +11:00
Darren Tucker c5bfe83f67 Portable switched to git so s/CVS/git/. 2017-12-09 10:12:23 +11:00
Damien Miller a65655fb1a fix incorrect range of OpenSSL versions supported
Pointed out by Solar Designer
2017-11-24 10:23:47 +11:00
Damien Miller ff3507aea9 typo 2017-07-07 11:21:39 +10:00
Darren Tucker 30eee7d1b2 Re-add missing "Prerequisites" header and fix typo
Patch from HARUYAMA Seigo <haruyama at unixuser org>.
2016-12-20 12:16:11 +11:00
Darren Tucker 461f50e7ab Update links to https.
www.openssh.com now supports https and ftp.openbsd.org no longer
supports ftp.  Make all links to these https.
2016-10-21 06:55:58 +11:00
Darren Tucker dd4e7212a6 Update host key generation examples.
Remove ssh1 host key generation, add ssh-keygen -A
2016-10-21 06:48:46 +11:00
Darren Tucker 976ba8a8fd Fix typo. 2016-08-17 15:33:10 +10:00
Darren Tucker 9abf84c25f Correct LDFLAGS for clang example.
--with-ldflags isn't used until after the -ftrapv test, so mention
LDFLAGS instead for now.
2016-08-17 14:25:43 +10:00
Darren Tucker adab758242 Remove now-obsolete CVS $Id tags from text files.
Since -portable switched to git, the CVS $Id tags are no longer being
updated and are becoming increasingly misleading.  Remove them.
2016-08-17 13:40:58 +10:00
Darren Tucker 560c006854 Add a section for compiler specifics.
Add a section for compiler specifics and document the runtime requirements
for clang's integer sanitization.
2016-08-17 13:38:30 +10:00
Damien Miller b0b48beab1 update recommended autoconf version 2016-08-02 11:06:23 +10:00
Darren Tucker a162dd5e58 OpenSSL 1.1.x not currently supported. 2016-07-14 21:19:59 +10:00
Darren Tucker ad7d23d461 20140908
- (dtucker) [INSTALL] Update info about egd.  ok djm@
2014-09-09 12:23:10 +10:00
Damien Miller ad013944af - (djm) [INSTALL] Recommend libcrypto be built -fPIC, mention LibreSSL,
update OpenSSL version requirement.
2014-08-26 09:27:28 +10:00
Damien Miller a75aca1bbc - (djm) [INSTALL contrib/caldera/openssh.spec contrib/cygwin/README]
[contrib/redhat/openssh.spec contrib/suse/openssh.spec] Remove mentions
   of TCP wrappers.
2014-08-19 11:36:07 +10:00
Darren Tucker b3cd503742 - (dtucker) [INSTALL] Bump documented autoconf version to what we're
currently using.
2013-03-07 12:33:35 +11:00
Darren Tucker aa3cbd1b5b - (dtucker) [INSTALL LICENCE configure.ac openbsd-compat/Makefile.in
openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/getrrsetbyname.c]
   bz 1320: Add optional support for LDNS, a BSD licensed DNS resolver library
   which supports DNSSEC.  Patch from Simon Vallet (svallet at genoscope cns fr)
   with some rework from myself and djm.  ok djm.
2011-11-04 11:25:24 +11:00
Damien Miller f22019bdbf - (djm) [Makefile.in WARNING.RNG aclocal.m4 buildpkg.sh.in configure.ac]
[entropy.c ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c]
   [ssh-keysign.c ssh-pkcs11-helper.c ssh-rand-helper.8 ssh-rand-helper.c]
   [ssh.c ssh_prng_cmds.in sshd.c contrib/aix/buildbff.sh]
   [regress/README.regress] Remove ssh-rand-helper and all its
   tentacles. PRNGd seeding has been rolled into entropy.c directly.
   Thanks to tim@ for testing on affected platforms.
2011-05-05 13:48:37 +10:00
Damien Miller d8f6002272 - (djm) [INSTALL Makefile.in README.smartcard configure.ac scard-opensc.c]
[scard.c scard.h pkcs11.h scard/Makefile.in scard/Ssh.bin.uu scard/Ssh.java]
   Remove obsolete smartcard support
2010-02-12 09:34:22 +11:00
Darren Tucker fb206ded16 - (dtucker) [INSTALL] Link to tcpwrappers. 2007-08-17 22:52:05 +10:00
Darren Tucker 8ea84561c4 - (dtucker) [INSTALL] Give PAM its own heading. 2007-08-17 22:12:14 +10:00
Darren Tucker ea43c49650 - (dtucker) [INSTALL] the pid file is sshd.pid not ssh.pid. 2007-08-17 22:10:10 +10:00
Darren Tucker 1a32953e48 - (dtucker) [INSTALL] Group the parts describing random options and PAM
implementations together which is hopefully more coherent.
2007-08-17 22:03:09 +10:00
Darren Tucker 637cc404c6 typo 2007-08-17 21:40:22 +10:00
Darren Tucker 2a3868589b - (dtucker) [INSTALL] prngd lives at sourceforge these days. 2007-04-06 12:25:08 +10:00
Darren Tucker 62995c1f1e - (dtucker) [INSTALL] Update the systems that have PAM as standard. Link
to OpenPAM too.
2007-04-06 12:21:47 +10:00
Darren Tucker aef5beef12 - (dtucker) [INSTALL] Update to autoconf-2.61. 2007-03-02 17:53:41 +11:00
Darren Tucker 83bbb03e52 - (dtucker) [INSTALL] Add info about audit support. 2006-09-17 22:55:52 +10:00
Darren Tucker e34c96aea1 - (dtucker) [INSTALL] New autoconf version: 2.60. 2006-07-10 12:55:24 +10:00
Darren Tucker f32f55259c - (dtucker) [INSTALL] A bit more info on autoconf. 2006-07-06 19:12:08 +10:00
Darren Tucker db4c54bed1 - (dtucker) [INSTALL] Bug #1202: Note when autoconf is required and which
version.
2006-06-30 16:20:58 +10:00
Darren Tucker 3eb4834489 - (dtucker) [README.platform configure.ac openbsd-compat/port-tun.c] Add
tunnel support for Mac OS X/Darwin via a third-party tun driver.  Patch
   from reyk@, tested by anil@
2006-06-23 21:05:12 +10:00
Darren Tucker fabdb6c290 - (dtucker) [INSTALL configure.ac openbsd-compat/openssl-compat.{c,h}]
Add optional enabling of OpenSSL's (hardware) Engine support, via
   configure --with-ssl-engine.  Based in part on a diff by michal at
   logix.cz.
2006-02-20 20:17:35 +11:00
Darren Tucker 2f0b5c4869 - (dtucker) [INSTALL configure.ac] Make zlib version check test for 1.1.4 or
1.2.1.2 or higher.  With tim@, ok djm@
2005-04-24 17:52:22 +10:00
Darren Tucker 8d158c9937 - (dtucker) [INSTALL] Fix s/key text too. 2005-04-19 15:40:51 +10:00
Darren Tucker ad1e5e286c - (dtucker) [INSTALL] Put the s/key text and URL back together. 2005-04-19 15:31:49 +10:00
Darren Tucker d9c88138f7 - (dtucker) [INSTALL] Reference README.privsep for the privilege separation
requirements.  Pointed out by Bengt Svensson.
2005-04-19 12:21:21 +10:00
Darren Tucker 72c025d9f0 - (dtucker) [INSTALL Makefile.in configure.ac survey.sh.in] Implement
"make survey" and "make send-survey".  This will provide data on the
   configure parameters, platform and platform features to the development
   team, which will allow (among other things) better targetting of testing.
   It's entirely voluntary and is off be default. ok djm@
2005-01-18 12:05:18 +11:00
Darren Tucker 16bcc1c92e - (dtucker) [INSTALL Makefile.in configure.ac] Add --with-libedit configure
option and supporting makefile bits and documentation.
2004-11-07 20:14:34 +11:00
Darren Tucker 0ffe638bbb - (dtucker) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec
contrib/README CREDITS INSTALL] Bug #873: Correct URLs for x11-ssh-askpass
   and Jim Knoble's email address , from Jim himself.
2004-05-27 09:59:31 +10:00
Damien Miller a8e06cef35 - djm@cvs.openbsd.org 2003/11/21 11:57:03
[everything]
     unexpand and delete whitespace at EOL; ok markus@
     (done locally and RCS IDs synced)
2003-11-21 23:48:55 +11:00
Darren Tucker 0d37b5ca7b - (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords
directly.  Noted by Darren.Moffat at sun.com.
2003-10-21 12:41:14 +10:00
Darren Tucker 9568ad96ad - (dtucker) [INSTALL] Note that --with-md5 is now required on platforms with
MD5 passwords even if PAM support is enabled.  From steev at detritus.net.
2003-10-17 16:32:11 +10:00
Damien Miller 5c3a55846a - (djm) Sync with V_3_7 branch:
- (djm) Fix SSH1 challenge kludge
   - (djm) Bug #671: Fix builds on OpenBSD
   - (djm) Bug #676: Fix PAM stack corruption
   - (djm) Fix bad free() in PAM code
   - (djm) Don't call pam_end before pam_init
   - (djm) Enable build with old OpenSSL again
   - (djm) Trim deprecated options from INSTALL. Mention UsePAM
   - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
2003-09-23 22:12:38 +10:00
Darren Tucker 42d30828a4 - (dtucker) [INSTALL] Bug #686: Document requirement for zlib 1.1.4 or
higher.
2003-09-22 13:28:36 +10:00