b2bebc3586
pkgsMusl.openssh: fix build
2 years ago
72ff0a0bf8
openssh_hpn: 8.9p1 -> 9.0p1
2 years ago
07eeff9055
Merge #167852 : openssh: 8.9p1 -> 9.0p1
...
(cherry picked from commit 830b4daeb1
2 years ago
4cfdd98265
openssh: 8.9p1 -> 9.0p1
2 years ago
80dfb3f744
openssh_hpn: 8.8p1 -> 8.9p1
2 years ago
0269c10d74
openssh: 8.8p1 -> 8.9p1
2 years ago
b7480c8674
pkgsStatic.openssh: fix build
...
Remove reference to libredirect for cross builds, as for those the tests are disabled:
4818f809a9/pkgs/stdenv/generic/make-derivation.nix (L103)
2 years ago
95fee491d9
openssh_hpn: 8.4p1 -> 8.8p1
...
- Switch to using patch from the FreeBSD port security/openssh-portable
which is regularly maintained
- Add myself as maintainer for openssh_hpn
3 years ago
ff07c87167
openssh: disable t-exec tests on musl
...
These tests fail on musl, as encountered by Alpine:
04d4e07ad8/main/openssh/APKBUILD (L132)
3 years ago
a79a294901
openssh: set enableParallelChecking = false
...
this should hopefully make the tests more reliable
3 years ago
bc56346bcd
openssh_hpn/openssh_gssapi: Add CVE-2021-41617
3 years ago
85c63a515d
openssh: enable tests
3 years ago
1b41f51b96
openssh: Add myself as maintainer
3 years ago
fae34f538f
openssh: 8.7p1 -> 8.8p1
3 years ago
cfaa89b03b
openssh-portable: switch to fetchFromGitHub
3 years ago
5ad7db7ed8
openssh: add meta.mainProgram
...
Fix the following error when running `nix run .#openssh`:
error: unable to execute '/nix/store/bzxxfx0a774vqa3cbz66c2172smc317a-openssh-8.6p1/bin/openssh': No such file or directory
3 years ago
deb9bd197e
openssh: 8.6p1 -> 8.7p1
3 years ago
fbafeb7ad5
treewide: runCommandNoCC -> runCommand
...
This has been synonymous for ~5y.
3 years ago
4e09c26ea1
openssh: disable kerberos on Apple Silicon
3 years ago
53f43a2048
openssh: add link to related nixos test
...
It'd certainly be better to have an openssh-specific integration test,
but it's not there yet and this is better than nothing.
3 years ago
35da81b990
openssh: 8.5p1 -> 8.6p1
3 years ago
2e2a36f082
ssh-copy-id: init at 8.4p1 ( #105896 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
3 years ago
dcb501f993
kerberos: deprecate alias
3 years ago
b1b48e10de
openssh: Fix cross-compile regression from c99c499 ( #117053 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
3 years ago
a1aa6bd250
openssh: Remove useless .dev
3 years ago
2b1011d4a3
openssh_hpn/openssh_gssapi: Add CVE-2021-28041
3 years ago
c99c4998fd
openssh: 8.4p1 -> 8.5p1 and refactor
...
Also split out the variants of the package because I'm sick of waiting
for random patches to be updated before I can update my unpatched
openssh.
Also make pname correspond to the attribute name.
3 years ago
76f93cc731
pkgs/tools: pkgconfig -> pkg-config
3 years ago
8c5d37129f
pkgs/tools: stdenv.lib -> lib
3 years ago
c0681ac66a
openssh: fix cross-compilation after #100906
...
krb5-config from the host platform needs to be added to PATH so it can be run
during build. This works because krb5-config is a platform independent
shell-script. Before #100906 , krb5-config was not used, so we didn't run into
this problem.
4 years ago
4c8c8d2ce5
[staging] openssh: Fix EOF: command not found
4 years ago
b5794556b4
openssh: fix hpn sha256
4 years ago
02390ed725
openssh: 8.3p1 -> 8.4p1
...
Fixes CVE-2020-15778, CVE-2020-14145
4 years ago
4879ea9034
openssh: fix static build
4 years ago
f8473b1d39
openssh_hpn: fix source
4 years ago
f034637a5b
openssh: 8.2p1 -> 8.3p1
...
compile openssh_hpn with recent openssl
4 years ago
59616b291d
openssh: don’t include fido2 on musl
...
libselinux pulls in openssh transitively, so can’t use fido here
Fixes #89246
4 years ago
84cf00f980
treewide: Per RFC45, remove all unquoted URLs
4 years ago
205f42b142
openssh_hpn: 7.8p1 -> 8.1p1
...
fix build failure
4 years ago
44864b292f
openssh: 8.1p1 -> 8.2p1
...
https://www.openssh.com/txt/release-8.2
add libfido2 to enable hardware tokens support added in this release
4 years ago
8f0b3b1305
openssh_gssapi: fix build
...
Hydra build is failing[1] because of a hash-mismatch of the gss-api
patch from debian.
I updated the patch, and activated the `autoreconfHook` when building
gss support as well, otherwise the build would fail with the following
error:
```
ERROR: configure is out of date; please run autoreconf (and configure)
```
[1] https://hydra.nixos.org/build/109409845
5 years ago
9bfec806df
openssh: don't let configure override SSH_KEYSIGN
...
While 9fe10288f0
5 years ago
e6d641d957
openssh: mark hpnSupport as broken
...
We're hoping to deprecate HPN support, given that as far as we
can tell, nobody is using it, and the patches seem rather unmaintained.
5 years ago
9199729df4
openssh: 7.9p1 -> 8.1p1
...
https://www.openwall.com/lists/oss-security/2019/04/18/1
5 years ago
46420bbaa3
treewide: name -> pname (easy cases) ( #66585 )
...
treewide replacement of
stdenv.mkDerivation rec {
name = "*-${version}";
version = "*";
to pname
5 years ago
9fe10288f0
openssh: use ssh-keysign from PATH
...
ssh-keysign is used for host-based authentication, and is designed to be used
as SUID-root program. OpenSSH defaults to referencing it from libexec, which
cannot be made SUID in Nix.
5 years ago
6d3a653f10
openssh: apply CVE-2018-20685 patch
6 years ago
3681fa5456
direnv: make cross-compile on windows
6 years ago
2337c7522a
openssh: 7.7p1 -> 7.9p1 ( #48784 )
...
added openssh_gssapi to make it easier to test the patched version
the HPN edition isn't available on top of 7.9p1 yet
fix-host-key-algorithms-plus.patch didn't apply anymore, assuming it's
fixed.
release notes: https://www.openssh.com/txt/release-7.9
6 years ago
c2e6ca501e
openssh: fix tunnel forwarding (upstream patch)
...
Close #48031 , fixes #48016 . I didn't use the PR commit
because I think it's better to fetch the patch.
6 years ago
wyndon