rpms/openssh
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1,236 commits 55 branches 239 tags 7.7 MiB
Commit graph

908 commits

Author SHA1 Message Date
Dmitry Belyavskiy
b3639c9616 Separate ssh-keysign to a dedicated package 2024-10-11 15:07:02 +02:00
Dmitry Belyavskiy
2b8473c18a Update version of pam_ssh_agent_auth 2024-10-10 15:55:43 +02:00
Dmitry Belyavskiy
ddef24ba7e Rebasing to OpenSSH 9.9p1 2024-10-10 11:36:06 +02:00
Zoltan Fridrich
64631599fc Merge gssapi-keyex patches 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2024-09-16 12:28:25 +02:00
Dmitry Belyavskiy
adab98c5ba Synchronize patches from Red Hat 2024-09-03 16:12:58 +02:00
Dmitry Belyavskiy
28a28238b3 Sshd now proposes to enter password again when a non-existing user is specified 2024-08-05 12:49:38 +02:00
Dmitry Belyavskiy
dd27043411 Change default key type in FIPS mode 2024-07-26 17:01:14 +02:00
Dmitry Belyavskiy
ff8756ae7b Make test pass again 2024-07-24 13:57:59 +02:00
Dmitry Belyavskiy
b38789c6ac Rebase to OpenSSH 9.8p1 2024-07-24 13:57:59 +02:00
Fedora Release Engineering
fe837a3014 Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-18 21:00:36 +00:00
Zoltan Fridrich
2b3c43fd47 Rewriting OpenSSH GSS KEX to use new packet API 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2024-07-02 16:30:07 +02:00
Dmitry Belyavskiy
c58fea86cd Version bump 2024-07-02 11:12:42 +02:00
Gordon Messmer
dcbca7b947 Patch 9.6p1 for CVE-2024-6387 2024-07-02 00:48:16 -07:00
Gordon Messmer
69c52aa299 Shorten paths used for parallel tests to fix BZ#2295117 2024-07-01 20:51:01 -07:00
Zoltan Fridrich
b77eafa86b Make default key sizes configurable in sshd-keygen 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2024-05-10 10:27:51 +02:00
Zoltan Fridrich
dc8423673e Correctly audit hostname and IP address 
Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
 2024-05-09 16:29:32 +02:00
Dmitry Belyavskiy
53eafa2b19 Use OpenSSL SSH KDF implementation - s390x fixup 2024-04-24 15:13:42 +02:00
Dmitry Belyavskiy
855a9d9c41 Use OpenSSL SSH KDF implementation 2024-04-24 12:00:24 +02:00
Dmitry Belyavskiy
80ba97c338 Bump spec 2024-04-17 10:44:40 +02:00
Zbigniew Jędrzejewski-Szmek
b001382b22 Drop %attr for a symlink 
This removes the following warning:
RPM build warnings:
    Explicit %attr() mode not applicable to symlink: /builddir/build/BUILDROOT/openssh-9.6p1-1.fc41.6.x86_64/usr/libexec/openssh/ssh-askpass
 2024-04-17 08:37:17 +00:00
Daan De Meyer
8fb8f02a0d Only set PAM_RHOST if the remote host is not "UNKNOWN" 
When using sshd's -i option with stdio that is not a AF_INET/AF_INET6
socket, auth_get_canonical_hostname() returns "UNKNOWN" which is then
set as the value of PAM_RHOST, causing pam to try to do a reverse DNS
query of "UNKNOWN", which times out multiple times, causing a
substantial slowdown when logging in.

To fix this, let's only set PAM_RHOST if the hostname is not "UNKNOWN".

The upstream PR (https://github.com/openssh/openssh-portable/pull/388)
has gone unreviewed for more than a year, even after multiple pings on
the PR and the mailing list.

This greatly improves the experience of using systemd's new ssh-generator
(https://github.com/systemd/systemd/pull/30777) which allows connecting
to VMs via VSOCK.
 2024-04-15 15:13:27 +02:00
Dmitry Belyavskiy
055c4e2de7 Rebuild 2024-04-04 20:56:51 +02:00
Dmitry Belyavskiy
56e678546d Bump pam_ssh_agent version 2024-04-04 20:36:51 +02:00
Gordon Messmer
031b4c6f36 Build OpenSSH without libsystemd dependency, using reference implementation 2024-04-03 00:57:56 -07:00
Dmitry Belyavskiy
176421c4e4 Run tests on building OpenSSH 2024-03-13 17:50:31 +01:00
Dmitry Belyavskiy
086e6f64e1 Disable openssl engine support in openssh 2024-03-13 13:39:46 +01:00
Fedora Release Engineering
2f41ca7cd3 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-25 11:29:57 +00:00
Fedora Release Engineering
d089d5f71b Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-21 11:22:01 +00:00
Dmitry Belyavskiy
f238307bdf Applying patches to rebase to OpenSSH 9.6p1 
Based on Damien Milnes' PR
https://src.fedoraproject.org/rpms/openssh/pull-request/63

Also rebasing openssh-8.0p1-pkcs11-uri.patch to 9.6 by Dmitry Belyavskiy
 2024-01-12 16:04:03 +01:00
Florian Weimer
87ae5d1d5a Fix type errors in downstream gssapi-keyex patch 
Related to:

  <https://fedoraproject.org/wiki/Changes/PortingToModernC>
  <https://fedoraproject.org/wiki/Toolchain/PortingToModernC>
 2023-12-22 17:01:38 +01:00
Mattias Ellert
5c1da775a9 Fix issue with read-only ssh buffer during gssapi key exchange 
(rhbz#1938224)
https://github.com/openssh-gsskex/openssh-gsskex/pull/19
 2023-10-16 22:26:16 +02:00
Mattias Ellert
4f07bfcfe1 Fix FTBFS due to implicit declarations (rhbz#2241211) 2023-10-15 06:42:32 +02:00
Dmitry Belyavskiy
d3cd3f2851 migrated to SPDX license 2023-09-19 12:19:43 +02:00
Timothée Ravier
f98acbdc5d Revert "Remove sshd.socket unit" 
This reverts commit 8a294387d0.

This change has been pushed to Fedora 40 and is pending discussion /
voting from FESCo.

See: https://pagure.io/fesco/issue/3062
See: https://fedoraproject.org/wiki/Changes/Drop_Sshd_Socket
 2023-09-15 10:22:41 +02:00
Jakub Jelen
d77b1b790a pkcs11: Add support for 'serial' in PKCS#11 URI 
The patch was updated by the upstream MR
https://github.com/openssh/openssh-portable/pull/406
by npocs@redhat.com
 2023-08-11 15:04:18 +02:00
Dmitry Belyavskiy
c7af8ecb76 Minor optimization of ssh_krb5_kuserok 
Resolves: rhbz#2112501
 2023-08-03 11:06:10 +02:00
Dmitry Belyavskiy
8a294387d0 Remove sshd.socket unit 
Resolves: rhbz#2025716
 2023-08-03 10:38:48 +02:00
Dmitry Belyavskiy
f4f5944e31 Disable forking of ssh-agent on startup 
Resoves: rhbz#2148555
 2023-08-03 10:32:24 +02:00
Dmitry Belyavskiy
ec2f61e2cf Split including crypto-policies to a separate config 
Resolves: rhbz#1970566
 2023-08-03 10:25:50 +02:00
Dmitry Belyavskiy
147ab2eb19 relax checks of the OpenSSL version 2023-08-01 14:19:16 +02:00
Mattias Ellert
c04e468b07 Update gssapi-keyex patch for OpenSSH 9.0+ 
userauth_gsskeyex must have the same argument as userauth_gssapi
method_gsskeyex must have the same members as method_gssapi
 2023-07-26 23:28:39 +02:00
Dmitry Belyavskiy
c3494feffe Fix remote code execution in ssh-agent PKCS#11 support 
Resolves: CVE-2023-38408
 2023-07-21 17:00:23 +02:00
Fedora Release Engineering
9fd130d8eb Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2023-07-20 18:12:08 +00:00
Norbert Pocs
8f5b8fd2c5 Revert "pkcs11: Add support for 'serial' in PKCS#11 URI" 
This reverts commit e39f11e77c.

The patch has some problems (the pkcs11 downstream test is failing)
and needs more investigation
 2023-06-13 14:38:59 +02:00
Norbert Pocs
c5082a3f81 Merge gssapi-keyex and gssapi-auth 
Signed-off-by: Norbert Pocs <npocs@redhat.com>
 2023-06-08 13:58:01 +02:00
Norbert Pocs
2b67ec48c2 Merge manpage crypto-policies related patches 
Signed-off-by: Norbert Pocs <npocs@redhat.com>
 2023-06-08 13:57:42 +02:00
Norbert Pocs
fb40f0afda Merge evp related patches 
Signed-off-by: Norbert Pocs <npocs@redhat.com>
 2023-06-08 13:57:23 +02:00
Norbert Pocs
141d7b2d4a Remove deprecated usage of %patchN 
Signed-off-by: Norbert Pocs <npocs@redhat.com>
 2023-06-08 13:56:15 +02:00
Dmitry Belyavskiy
d5fd076ab3 Updating specfile 2023-06-07 12:15:31 +02:00
Dmitry Belyavskiy
29083ac442 Remove unused patch 2023-06-02 18:56:58 +02:00