History log of /freebsd-11.0-release/crypto/openssh/sshd_config.5
Revision Date Author Comments
(<<< Hide modified files)
(Show modified files >>>)
# 303975 11-Aug-2016 gjb

Copy stable/11@r303970 to releng/11.0 as part of the 11.0-RELEASE
cycle.

Prune svn:mergeinfo from the new branch, and rename it to RC1.

Update __FreeBSD_version.

Use the quarterly branch for the default FreeBSD.conf pkg(8) repo and
the dvd1.iso packages population.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

# 303770 05-Aug-2016 des

MFH (r303716, r303719): drop SSH1 support, disable DSA by default

PR: 208254
Approved by: re (gjb)
Relnotes: yes


# 302408 08-Jul-2016 gjb

Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation


# 296634 11-Mar-2016 des

Re-add AES-CBC ciphers to the default cipher list on the server.

PR: 207679


# 296633 11-Mar-2016 des

Upgrade to OpenSSH 7.2p2.


# 295139 02-Feb-2016 des

Document our modified default value for PermitRootLogin.


# 294909 27-Jan-2016 des

Switch UseDNS back on


# 294496 21-Jan-2016 des

Upgrade to OpenSSH 7.1p2.


# 294495 21-Jan-2016 des

Enable DSA keys by default. They were disabled in OpenSSH 6.9p1.

Noticed by: glebius


# 294464 20-Jan-2016 des

Upgrade to OpenSSH 7.0p1.


# 294336 19-Jan-2016 des

Upgrade to OpenSSH 6.9p1.


# 294332 19-Jan-2016 des

Upgrade to OpenSSH 6.8p1.


# 294328 19-Jan-2016 des

Upgrade to OpenSSH 6.7p1, retaining libwrap support (which has been removed
upstream) and a number of security fixes which we had already backported.

MFC after: 1 week


# 294325 19-Jan-2016 des

As previously threatened, remove the HPN patch from OpenSSH.


# 290671 11-Nov-2015 des

Now that we have mandoc, we can leave $Mdocdate$ tags as-is. Unfortunately,
there is (currently) no way to make Subversion generate correct $Mdocdate$
tags, but perhas we can teach mandoc to read Subversion's %d format.


# 280360 23-Mar-2015 bdrewery

Document "none" for VersionAddendum.

PR: 193127
MFC after: 2 weeks


# 264691 20-Apr-2014 des

Apply upstream patch for EC calculation bug and bump version addendum.


# 263712 25-Mar-2014 des

Upgrade to OpenSSH 6.6p1.


# 261340 01-Feb-2014 des

Turn sandboxing on by default.


# 261320 31-Jan-2014 des

Upgrade to OpenSSH 6.5p1.


# 257954 11-Nov-2013 delphij

MFV r257952:

Upgrade to OpenSSH 6.4p1.

Bump VersionAddendum.

Approved by: des


# 255767 21-Sep-2013 des

Upgrade to 6.3p1.

Approved by: re (gjb)


# 252338 28-Jun-2013 des

r251088 reverted the default value for UsePrivilegeSeparation from
"sandbox" to "yes", but did not update the documentation to match.


# 250739 17-May-2013 des

Upgrade to OpenSSH 6.2p2. Mostly a no-op since I had already patched
the issues that affected us.


# 248619 22-Mar-2013 des

Upgrade to OpenSSH 6.2p1. The most important new features are support
for a key revocation list and more fine-grained authentication control.


# 240075 03-Sep-2012 des

Upgrade OpenSSH to 6.1p1.


# 231584 13-Feb-2012 ed

Polish diff against upstream.

- Revert unneeded whitespace changes.
- Revert modifications to loginrec.c, as the upstream version already
does the right thing.
- Fix indentation and whitespace of local changes.

Approved by: des
MFC after: 1 month


# 226046 05-Oct-2011 des

Upgrade to OpenSSH 5.9p1.

MFC after: 3 months


# 221420 04-May-2011 des

Upgrade to OpenSSH 5.8p2.


# 215116 11-Nov-2010 des

Upgrade to OpenSSH 5.6p1.


# 208709 01-Jun-2010 des

Missing commas


# 207319 28-Apr-2010 des

Upgrade to OpenSSH 5.5p1.


# 204917 09-Mar-2010 des

Upgrade to OpenSSH 5.4p1.

MFC after: 1 month


# 197679 01-Oct-2009 des

Upgrade to OpenSSH 5.3p1.


# 192595 22-May-2009 des

Upgrade to OpenSSH 5.2p1.

MFC after: 3 months


# 183458 29-Sep-2008 des

Our groff doesn't understand $Mdocdate$, so replace them with bare dates.

MFC after: 3 days


# 181111 01-Aug-2008 des

Upgrade to OpenSSH 5.1p1.

I have worked hard to reduce diffs against the vendor branch. One
notable change in that respect is that we no longer prefer DSA over
RSA - the reasons for doing so went away years ago. This may cause
some surprises, as ssh will warn about unknown host keys even for
hosts whose keys haven't changed.

MFC after: 6 weeks


# 181097 01-Aug-2008 des

Consistently set svn:eol-style.


# 169966 24-May-2007 des

s/X11R6/local/g


# 164149 10-Nov-2006 des

Resolve conflicts.


# 162857 30-Sep-2006 des

Bump version addendum.

MFC after: 1 week


# 162856 30-Sep-2006 des

Merge conflicts.

MFC after: 1 week


# 157019 22-Mar-2006 des

Merge conflicts.


# 149753 03-Sep-2005 des

Resolve conflicts.


# 147005 05-Jun-2005 des

Resolve conflicts.


# 137019 28-Oct-2004 des

Resolve conflicts


# 128460 20-Apr-2004 des

Resolve conflicts.


# 128459 20-Apr-2004 des

Adjust version number and addendum.


# 127033 15-Mar-2004 des

Correctly document the default value of UsePAM.


# 126283 26-Feb-2004 des

Update VersionAddendum in config files and man pages.


# 126277 26-Feb-2004 des

Resolve conflicts.


# 126271 26-Feb-2004 des

Pull asbesthos underpants on and disable protocol version 1 by default.


# 126009 19-Feb-2004 des

Turn non-PAM password authentication off by default when USE_PAM is
defined. Too many users are getting bitten by it.


# 124211 07-Jan-2004 des

Resolve conflicts and remove obsolete files.

Sponsored by: registrar.no


# 121824 31-Oct-2003 simon

Add a missing word.

Submitted by: Michel Lavondes <fox@vader.aacc.cc.md.us>
Reviewed by: des
MFC after: 1 week


# 120413 24-Sep-2003 des

Update version string.


# 113911 23-Apr-2003 des

Resolve conflicts.


# 110692 11-Feb-2003 des

document the current default value for VersionAddendum.


# 106489 06-Nov-2002 des

Add caveats regarding the effect of PAM on PasswordAuthentication and
PermitRootLogin.

PR: docs/43776
MFC after: 1 week


# 106464 05-Nov-2002 des

Accurately reflect our local changes and additions.


# 106130 29-Oct-2002 des

Resolve conflicts.


# 100715 26-Jul-2002 fanf

FreeBSD doesn't use the host RSA key by default.

Reviewed by: des


# 99063 29-Jun-2002 des

Resolve conflicts.

Sponsored by: DARPA, NAI Labs


# 99050 29-Jun-2002 des

Document FreeBSD defaults and paths.

Sponsored by: DARPA, NAI Labs


# 98941 27-Jun-2002 des

Forcibly revert to mainline.


# 98706 23-Jun-2002 des

Resolve conflicts and document local changes.


# 98676 23-Jun-2002 des

This commit was generated by cvs2svn to compensate for changes in r98675,
which included commits to RCS files with non-trunk default branches.


# 98675 23-Jun-2002 des

Vendor import of OpenSSH 3.3.