| Commit message (Collapse) | Author | Age |
| |
|
|
|
|
|
| |
Remove reference to libredirect for cross builds, as for those the tests are disabled:
https://github.com/NixOS/nixpkgs/blob/4818f809a92b2ef8d8c002c10a29f1080106ee81/pkgs/stdenv/generic/make-derivation.nix#L103
|
|
|
|
|
|
|
| |
- Switch to using patch from the FreeBSD port security/openssh-portable
which is regularly maintained
- Add myself as maintainer for openssh_hpn
|
|
|
|
|
|
|
| |
These tests fail on musl, as encountered by Alpine:
https://github.com/alpinelinux/aports/blob/04d4e07ad8bd54fe49fe32c117c47d91f31ae937/main/openssh/APKBUILD#L132
We can exclude this test category for now, similarly to darwin.
|
|
|
|
| |
this should hopefully make the tests more reliable
|
|\ |
|
| | |
|
|\ \
| |/
|/| |
|
| | |
|
| | |
|
|/ |
|
|\ |
|
| | |
|
|\|
| |
| |
| |
| | |
Conflicts:
nixos/doc/manual/release-notes/rl-2111.section.md
|
| |
| |
| |
| |
| | |
Fix the following error when running `nix run .#openssh`:
error: unable to execute '/nix/store/bzxxfx0a774vqa3cbz66c2172smc317a-openssh-8.6p1/bin/openssh': No such file or directory
|
|/ |
|
|
|
|
| |
This has been synonymous for ~5y.
|
| |
|
|\
| |
| |
| | |
(a trivial conflict in transmission)
|
| |
| |
| |
| |
| | |
It'd certainly be better to have an openssh-specific integration test,
but it's not there yet and this is better than nothing.
|
|/ |
|
|
|
| |
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
|
| |
|
|
|
| |
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
Also split out the variants of the package because I'm sick of waiting
for random patches to be updated before I can update my unpatched
openssh.
Also make pname correspond to the attribute name.
|
| |
|
| |
|
|
|
|
|
|
|
| |
krb5-config from the host platform needs to be added to PATH so it can be run
during build. This works because krb5-config is a platform independent
shell-script. Before #100906, krb5-config was not used, so we didn't run into
this problem.
|
|\
| |
| | |
openssh: fix static build
|
| | |
|
|\ \ |
|
| | | |
|
|/ / |
|
|/
|
|
| |
Fixes CVE-2020-15778, CVE-2020-14145
|
| |
|
|
|
|
| |
compile openssh_hpn with recent openssl
|
|
|
|
|
|
| |
libselinux pulls in openssh transitively, so can’t use fido here
Fixes #89246
|
| |
|
|
|
|
| |
fix build failure
|
|
|
|
|
|
| |
https://www.openssh.com/txt/release-8.2
add libfido2 to enable hardware tokens support added in this release
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Hydra build is failing[1] because of a hash-mismatch of the gss-api
patch from debian.
I updated the patch, and activated the `autoreconfHook` when building
gss support as well, otherwise the build would fail with the following
error:
```
ERROR: configure is out of date; please run autoreconf (and configure)
```
[1] https://hydra.nixos.org/build/109409845
|
|
|
|
|
|
|
|
| |
While 9fe10288f01984963faf47e21bf1bae4d7d37962 ensured that the
ssh-keysign path is searched for in PATH if not absolute,
it doesn't prevent the configure script from defaulting to an
absolute path in $out/libexec, making the whole effort rather
pointless.
|
|
|
|
|
| |
We're hoping to deprecate HPN support, given that as far as we
can tell, nobody is using it, and the patches seem rather unmaintained.
|
|
|
|
| |
https://www.openwall.com/lists/oss-security/2019/04/18/1
|
|
|
|
|
|
|
|
|
| |
treewide replacement of
stdenv.mkDerivation rec {
name = "*-${version}";
version = "*";
to pname
|
|
|
|
|
|
| |
ssh-keysign is used for host-based authentication, and is designed to be used
as SUID-root program. OpenSSH defaults to referencing it from libexec, which
cannot be made SUID in Nix.
|
| |
|
| |
|