security/openssh-portable 10.6.p1,1

- Update to 4.7p1 - Update HPN patch to 4.7p1-hpn12v18 - Mark as BROKEN WITH_KERB_GSSAPI while developer release a new patch

- Enable ssl-engine - Update gsskex patch to 4.6p1-gsskex-20070312 - Update lpk patch to 4.6p1-0.3.9 - Update hpn patch to 4.6p1-hpn12v17 - Fix challenge-response issue - Bump PORTREVISION

Reported by:	Stefan Lambrev [1], ale@ [1]

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script   supports them.  This is determined by running ``configure --help'' in   do-configure target and set the shell variable _LATE_CONFIGURE_ARGS   which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable   Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - 

PR:		ports/111470
Approved by:	portmgr
Discussed with:	stas (Mk/*), gerald (info related stuffs)
Tested by:	pointyhat exp run

- Update OpenSSH to 4.6p1 - Update GSSKEX patch to 20061220 - Update HPN patch to hpn12v16 - Update LPK patch to 0.3.8

- Use RC_SUBR_SUFFIX

Approved by:	mnag (maintainer)

Update HPN patch to v14 for openssh 4.5p1.

Approved by:	mnag

- Fix CHROOT patch using chroot() before setusercontext() and add strerror() in message if chroot() fail.

Notified by:	Chris Gardner <chris_g_g___hotmail.com>

- Update to 4.5p1 - patch-sshd.c unconditionally includes <gssapi.h>. Include "ssh-gss.h" instead. [1]

PR:		104481 [1]
Submitted by:	Mark Andrews <Mark_Andrews___isc.org> [1]

- Update HPN patch. Patch are renamed, the only content differences are two rows now enclosed in an "else" block.

Submitted by:	ale
Approved by:	portmgr (erwin)

- Add OPTION to enable Kerberos/GSSAPI patch [1] - Add OPTION to enable LPK patch (ldap stored public key) [2]

PR:		86384 [1], 103399 [2]
Submitted by:	Garrett Wollman <wollman___khavrinen.csail.mit.edu> [1], Dmitriy Kirhlarov <dkirhlarov___oilspace.com> [2]

- Fix package creation. [1] - Update HPN patch and remove IGNORE. [2] - Bump PORTREVISION

PR:		103961
Submitted by:	Phil Oleson <oz___nixil.net> [1], ale [2]

- Install ssh_config-dist and sshd_config-dist in OVERWRITE_BASE too.

- Update to 4.4p1. - Disable temporary HPN patch until HPN release new version. - Fix rc.d script path in sshd.8 - Add FreeBSD-${PKGNAME} in SSH_VERSION and SSH_RELEASE like src does. - Sync patches with src.

Security:	CVE-2006-4924, CVE-2006-5051

Update HPN-12 patch to version 8 (no functional changes, only documentation changes and a small bug fix on option parsing).

Approved by:	mnag

Add optional OpenSC PIN patch which make it possible for OpenSSH to ask for a PIN when using an OpenSC smartcard.

Approved by:		mnag (maintainer)
Patch obtained from:	http://bugzilla.mindrot.org/show_bug.cgi?id=608

- Remove unecessary ?= in PKGNAMESUFFIX [1] - Update HPN patch to hpn12. Now none cipher are configured in run time. [2]

Notified by:	Peter Losher <plosher___plosh.net> [1], Scott Larson <stl___iowainteractive.com> [2]

Add support for smart cards.

Approved by:	maintainer

Remove the hpn-ssh port.  The functionality is now an option when building the openssh-portable port.

- Fix order in rc.d script. Because of pidfile are empty, reload [2] and restart [1]   commands kill all connections. - Separate keygen part and create keygen command. - Bump PORTREVISION

PR:		93228 [1]
Reported by:	DanGer on #bsdports [2]

Forget to add HPN patches.

- Update to 4.3p2

- Update to 4.3p1 - Use DISTVERSION - Add most configuration in OPTIONS - Enable support to libedit in sftp [1] - Add OPTIONS to HPN patches [2] - Add new rc.d script [3] - New rc.d script are responsible to check configuration and create host keys - Using USE_RC_SUBR - Modify pkg-message to reflect new rc.d script - Fix pkg-plist

Reviewd by:	dougb [3]
Submitted by:	vs [1], brooks [2]
Tested by:	me, John E Hein

- Reorganize Makefile in preparation to update to 4.3p1 - Add one http in MASTER_SITES - Update WWW

BROKEN: Checksum mismatch

Add SHA256

Update my email

Approved by: pav (mentor)

- Pass maintainership to submitter, since he sent the last patch.

PR:		ports/85775
Submitted by:	Marcus Alves Grando <marcus@corp.grupos.com.br>

- Update to 4.2p1

PR:		ports/85578
Submitted by:	Marcus Grando <marcus@corp.grupos.com.br>

Update to the latest hpn-ssh patches for 3.9p1.  The previous patches were unfetchable.  An upgrade to 4.1p1 will follow soon.

Reported by:	pointyhat (via kris)

- Update to 4.1p1

PR:		ports/81948
Submitted by:	Daniel Gerzo <danger@rulez.sk>

- Don't specify --with-ssl-dir when using the system's OpenSSL

PR:		ports/79355
Submitted by:	Mark Andrews <Mark_Andrews@isc.org>

- Update to 4.0p1

PR:		ports/79029
Submitted by:	Dimitry Andric <dimitry@andric.com>

Update to a new version of the none ciper patch.  The previous version mistakenly allowed ssh to switch to the none ciper for interactive sessions which could pose a security risk.  The new version corrects this.  This code was only enabled when WANT_NONE_CIPHER was set in the make environment.  Bump portrevision in this case.

- sshd child process crashes when user with expired password logs in.   Fix unitialized pointer in our local patch.

PR:		ports/75204
Submitted by:	Andriy Gapon <avg@icyb.net.ua>

Add security/hpn-ssh, a high performance SSH based on OpenSSH, after a repo-copy from security/openssh-portable.

HPN-SSH is a set of patches to improve the perfomance of bulk transfers
such as scp over long-fat pipes.

Repocopy by:	marcus

- drop maintainership

- new option WITH_OPENSSH_CHROOT Submitted by:	KANAI Makoto

- cleanup patches (only context changed)

- update to 3.9p1

set PORTVERSION 3.9.0.1 to avoid another
bump of PORTEPOCH if 3.9.1p1 come out.

- new option OPENSSH_SNAPSHOT

- bump PORTEPOCH Reported by kriS

- update to 3.8.1p1

- force kerberos by option WITH_GSSAPI

- make PKGNAMESUFFIX more flexible

- add SIZE

- update to 3.8p1

- fix Usage

- new option WITHOUT_KERBEROS

PR:		58156
Submitted by:	matt@peterson.org

- fix build with kerberos5 from base and missing libdes - get rid of autoconf dependency

- fix spelling of gssapi

- add CONFLICTS Submitted by:	eikemeier@fillmore-labs.com