linux/poky.git/meta/recipes-connectivity/openssh, branch 2.7_M2

openssh: use tarballs instead of git

2019-01-11T10:39:08+00:00

This was change to git recently to obtain openssl 1.1 compatible pre-release code (before 7.9 was out), however tarballs are preferred, and with them upstream version checks work (openssh uses a weird git tag scheme). (From OE-Core rev: a921a96e84f4d0b3f3d29a571981de08eb148e15) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

openssh: Update to 7.9 primarily bug fixes

2018-11-14T11:14:38+00:00

see: https://lwn.net/Articles/768991/ (From OE-Core rev: d9b69aa41bc0b768698b132b9805a8abf0fac40d) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

openssh: upgrade 7.8p1 -> 7.8p1+git to support openssl 1.1.x

2018-09-20T12:41:31+00:00

- Convert from tarball to git repository which support openssl 1.1.x - There is no specific minor version that contains the openssl fix (it was merged to master a few days agao), rename recipe version to `7.8p1+git' - Fix regression test binaries missing In commit `1f7aaf7 openssh: build regression test binaries', it build regression test binaries, since upstream add two binaries in commits `c59aca8 Create control sockets in clean temp directories' and `1acc058 Disable tests where fs perms are incorrect', we should update do_compile_ptest. [ptest log] |/usr/lib/openssh/ptest/regress/test-exec.sh: line 330: /usr/lib/openssh/ ptest/regress/mkdtemp: No such file or directory [ptest log] (From OE-Core rev: 9d48cb3da696add33315cf129fe60102bd9756c9) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

openssh: update from 7.7p1 to 7.8p1

2018-09-04T10:03:55+00:00

Drop the disable-ciphers patch since it has been integrated: cec33896 Omit 3des-cbc if OpenSSL built without DES. (From OE-Core rev: 7d35f5bb7b1700ae4bb7f55af8db7357a851c15a) Signed-off-by: Randy MacLeod Signed-off-by: Richard Purdie

openssh: add nativesdk support

2018-06-18T10:07:57+00:00

And use bitbake variables for install paths to fix nativesdk-openssh compilation. (From OE-Core rev: 70470dfa88338cae06670195bb7009cb13098ac2) Signed-off-by: Mikko Rapeli Signed-off-by: Richard Purdie

openssh: only create sshd host keys which have been enabled

2018-06-15T16:56:25+00:00

Previously sshd_check_keys would create a full set of all possible sshd host keys, even if sshd_config has been set to only enable certain key types. Update sshd_check_keys to only create keys which have been enabled in sshd_config (with a fallback to creating a full set of key types if no HostKey options are defined, as before). (From OE-Core rev: 2303d795ae96f1a60caf145a0ddf100e89c4b5b0) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

openssh: sync local ssh_config + sshd_config files with upstream 7.7p1

2018-06-15T16:56:25+00:00

Changes are mostly related to the removal of support for SSH v.1 protocol, which was dropped from openssh sshd in 7.4p1: https://www.openssh.com/txt/release-7.4 (From OE-Core rev: b81389c50e0d191e31f71af82d86bfbb37b83acc) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

openssh: minor indent cleanup for sshd init script

2018-06-15T16:56:25+00:00

The openssh sshd init script contains a mix of indent styles, mostly inherited from the Debian script from which it is derived. Leave the indent from Debian as-is, but for lines which are OE specific (e.g. where Debian's log_daemon_msg helper has been replaced with echo) make the indent consistent with surrounding lines. (From OE-Core rev: 68fb7d3b06887e0db3eef0ab231ced37cfa4894c) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

openssh: drop RCONFLICTS for openssh-keygen

2018-06-15T16:56:24+00:00

The "ssh-keygen" package no longer seems to be provided by any recipe in oe-core or meta-oe, so there's no clear reason for the openssh-keygen package to conflict with it. (From OE-Core rev: 0c5567847edba6b5ab24ae505d16375397cf4b40) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

openssh: stop adding -D__FILE_OFFSET_BITS=64 to CFLAGS

2018-06-15T16:56:24+00:00

Openssh takes care of enabling large-file support automatically via the AC_SYS_LARGEFILE in the configure.ac, so additional help from the recipe is not required. Even if it were once required, defining __FILE_OFFSET_BITS (ie with double leading underscores) looks like a typo and probably never had any effect anyway? (From OE-Core rev: 37b1a7bada267b89094ce0c3eb81b1de9f04df8e) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie