BSD Portssecurity/openssh-portable 10.6.p1,1 FreeBSD
The portable version of OpenBSD's OpenSSH
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- Last update
- Commit
b8d0a9401e- License
- OPENSSH
- Categories
- security
- Package size
- 1238.4 KiB, 7945.9 KiB installed
Description
OpenBSD's OpenSSH portable version
Normal OpenSSH development produces a very small, secure, and easy to maintain version for the OpenBSD project. The OpenSSH Portability Team takes that pure version and adds portability code so that OpenSSH can run on many other operating systems (Unfortunately, in particular since OpenSSH does authentication, it runs into a *lot* of differences between Unix operating systems).
The portable OpenSSH follows development of the official version, but releases are not synchronized. Portable releases are marked with a 'p' (e.g. 3.1p1). The official OpenBSD source will never use the 'p' suffix, but will instead increment the version number when they hit 'stable spots' in their development.
In the other systems
| System | Port | Version |
|---|---|---|
| FreeBSD | security/openssh-portable | 10.6.p1,1 |
| MidnightBSD | security/openssh-portable | 10.5.p1,1 |
Install
Binary package:
pkg install openssh-portableFrom the ports tree:
cd /usr/ports/security/openssh-portable/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= openssh-portable>0:security/openssh-portablePackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 10.6.p1,1 | 10.6.p1,1 | 9.1.p1,1 | 10.0.p1_2,1 | 10.6.p1,1 |
| FreeBSD:14:quarterly | 10.6.p1,1 | 10.6.p1,1 | n/a | 10.0.p1_1,1 | 10.6.p1,1 |
| FreeBSD:15:latest | 10.6.p1,1 | 10.6.p1,1 | n/a | 10.0.p1_1,1 | 10.0.p1_2,1 |
| FreeBSD:15:quarterly | 10.6.p1,1 | 10.6.p1,1 | n/a | n/a | n/a |
| FreeBSD:16:latest | 10.5.p1_1,1 | 10.6.p1,1 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
The Makefile names none itself; they come from USES and USE_*.
The full lists below include those, and their dependencies in turn.
Build dependencies 12
Run dependencies 4
No port depends on this one.
Configuration
Options name: security_openssh
| Option | Default | Description |
|---|---|---|
| BLOCKLISTD | on | FreeBSD blocklistd(8) support |
| BSM | off | OpenBSM Auditing |
| DOCS | off | Build and/or install documentation |
| FIDO_U2F | on | FIDO/U2F support (security/libfido2) |
| HEIMDAL | off | Heimdal Kerberos (security/heimdal) |
| HEIMDAL_BASE | off | Heimdal Kerberos (base) |
| HPN | off | HPN-SSH patch |
| KERB_GSSAPI | off | Kerberos/GSSAPI patch (req: GSSAPI) |
| LDNS | on | SSHFP/LDNS support |
| LIBEDIT | on | Command line editing via libedit |
| MIT | off | MIT Kerberos (security/krb5) |
| NONECIPHER | off | NONE Cipher support |
| PAM | on | Pluggable authentication module support |
| TCP_WRAPPERS | on | tcp_wrappers support |
- USES
- autoreconf compiler:c11 cpe localbase ncurses pkgconfig ssl
- Service scripts
openssh- Conflicts with
- openssh-3.* ssh-1.* ssh2-3.* openssh-portable-devel
- Flavors
openssh-portable-hpn-10.6.p1,1,openssh-portable-gssapi-10.6.p1,1
Message after installing
To enable this port, add openssh_enable="YES" in your rc.conf. To prevent conflict with openssh in the base system add sshd_enable="NO" in your rc.conf. Also you can configure openssh at another TCP port (via sshd_config 'Port' and 'Listen' options or via 'openssh_flags' variable in rc.conf) and run it in same time with base sshd. 'PermitRootLogin no' is the default for the OpenSSH port. This now matches the PermitRootLogin configuration of OpenSSH in the base system. Please be aware of this when upgrading your OpenSSH port, and if truly necessary, re-enable remote root login by readjusting this option in your sshd_config. Users are encouraged to create single-purpose users with ssh keys, disable Password authentication by setting 'PasswordAuthentication no' and 'ChallengeResponseAuthentication no', and to define very narrow sudo privileges instead of using root for automated tasks.
Files
Manual pages 15
- moduli(5)
- scp(1)
- sftp(1)
- sftp-server(8)
- ssh(1)
- ssh-add(1)
- ssh-agent(1)
- ssh-keygen(1)
- ssh-keyscan(1)
- ssh-keysign(8)
- ssh-pkcs11-helper(8)
- ssh-sk-helper(8)
- ssh_config(5)
- sshd(8)
- sshd_config(5)
pkg-plist 35
- bin/scp
- bin/sftp
- bin/ssh
- bin/ssh-add
- bin/ssh-agent
- bin/ssh-keygen
- bin/ssh-keyscan
- @sample etc/openssh-portable/moduli.sample
- @sample etc/openssh-portable/ssh_config.sample
- @sample etc/openssh-portable/sshd_config.sample
- @dir etc/openssh-portable/ssh_config.d
- @dir etc/openssh-portable/sshd_config.d
- @postexec if [ -f %D/etc/openssh-portable/ssh_host_ecdsa_key ] && grep -q DSA %D/etc/openssh-portable/ssh_host_ecdsa_key; then echo; echo "\!/ Warning \!/"; echo; echo "Your %D/etc/openssh-portable/ssh_host_ecdsa_key is not a valid ECDSA key. It is incorrectly"; echo "a DSA key due to a bug fixed in 2012 in the security/openssh-portable port."; echo; echo "Regenerate a proper one with: rm -f %D/etc/openssh-portable/ssh_host_ecdsa_key*; service openssh restart"; echo; echo "Clients should not see any key change warning since the ECDSA was not valid and was not actually"; echo "used by the server."; echo; echo "\!/ Warning \!/"; fi
- sbin/sshd
- libexec/sftp-server
- libexec/ssh-keysign
- libexec/ssh-pkcs11-helper
- libexec/ssh-sk-helper
- libexec/sshd-auth
- libexec/sshd-session
- share/man/man1/sftp.1.gz
- share/man/man1/ssh-add.1.gz
- share/man/man1/ssh-agent.1.gz
- share/man/man1/ssh-keygen.1.gz
- share/man/man1/ssh-keyscan.1.gz
- share/man/man1/scp.1.gz
- share/man/man1/ssh.1.gz
- share/man/man5/moduli.5.gz
- share/man/man5/ssh_config.5.gz
- share/man/man5/sshd_config.5.gz
- share/man/man8/sftp-server.8.gz
- share/man/man8/ssh-keysign.8.gz
- share/man/man8/ssh-pkcs11-helper.8.gz
- share/man/man8/ssh-sk-helper.8.gz
- share/man/man8/sshd.8.gz
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| openssh-10.6p1.tar.gz | 2.355244e+06 | a9dc9565dffe8640f64d863cd29a32bc4a3dbdec0566a7fc44c5d6ee767d5f39 |
Master sites 1
- OPENBSD/OpenSSH/portable