summaryrefslogtreecommitdiff
path: root/configure.ac
Commit message (Collapse)AuthorAgeFilesLines
* upstream commitdjm@openbsd.org2015-03-271-6/+7
| | | | | | Compile-time disable SSH protocol 1. You can turn it back on using the Makefile.inc knob if you need it to talk to ancient devices.
* check for crypt and DES_crypt in openssl blockDamien Miller2015-03-041-1/+2
| | | | | fixes builds on systems that use DES_crypt; based on patch from Roumen Petrov
* Add null declaration of AI_NUMERICINFO.Darren Tucker2015-02-211-0/+7
| | | | | | Some platforms (older FreeBSD and DragonFly versions) do have getaddrinfo() but do not have AI_NUMERICINFO. so define it to zero in those cases.
* support --without-openssl at configure timeDamien Miller2015-01-151-422/+465
| | | | | | | | Disables and removes dependency on OpenSSL. Many features don't work and the set of crypto options is greatly restricted. This will only work on system with native arc4random or /dev/urandom. Considered highly experimental for now.
* add --without-ssh1 option to configureDamien Miller2015-01-131-2/+17
| | | | Allows disabling support for SSH protocol 1.
* Add reallocarray to compat libraryDarren Tucker2014-12-101-0/+1
|
* include version number in OpenSSL-too-old errorDamien Miller2014-10-301-1/+1
|
* - (djm) [openbsd-compat/explicit_bzero.c] implement explicit_bzero()Damien Miller2014-08-271-2/+3
| | | | | | using memset_s() where possible; improve fallback to indirect bzero via a volatile pointer to give it more of a chance to avoid being optimised away.
* - (djm) [configure.ac] We now require a working vsnprintf everywhere (notDamien Miller2014-08-231-12/+18
| | | | | just for systems that lack asprintf); check for it always and extend test to catch more brokenness. Fixes builds on Solaris <= 9
* - (djm) [configure.ac] double braces to appease autoconfDamien Miller2014-08-221-3/+3
|
* - (djm) [configure.ac] include leading zero characters in OpenSSL versionDamien Miller2014-08-221-4/+4
| | | | number; fixes test for unsupported versions
* - (djm) [configure.ac] Check OpenSSL version is supported at configure time;Damien Miller2014-08-201-3/+11
| | | | suggested by Kevin Brott
* - (djm) [configure.ac] Delay checks for arc4random* until after libcryptoDamien Miller2014-07-151-6/+9
| | | | has been located; fixes builds agains libressl-portable
* - (djm) [digest-openssl.c configure.ac] Disable RIPEMD160 if libcryptoDamien Miller2014-07-031-2/+10
| | | | doesn't support it.
* - (dtucker) [configure.ac] Remove tcpwrappers support, support has alreadyDarren Tucker2014-06-131-59/+2
| | | | been removed from sshd.c.
* - (djm) [configure.ac openbsd-compat/bsd-cygwin_util.c]Damien Miller2014-05-271-5/+17
| | | | | | [openbsd-compat/bsd-cygwin_util.h] On Cygwin, determine privilege separation user at runtime, since it may need to be a domain account. Patch from Corinna Vinschen.
* - (djm) [commit configure.ac defines.h sshpty.c] don't attempt to useDamien Miller2014-05-211-3/+2
| | | | | vhangup on Linux. It doens't work for non-root users, and for them it just messes up the tty settings.
* - (djm) [Makefile.in configure.ac sshbuf-getput-basic.c]Damien Miller2014-05-151-2/+3
| | | | [sshbuf-getput-crypto.c sshbuf.c] compilation and portability fixes
* - (djm) [configure.ac] Unconditionally define WITH_OPENSSL until we writeDamien Miller2014-05-151-2/+5
| | | | portability glue to support building without libcrypto
* 20140221Tim Rice2014-02-211-3/+3
| | | | - (tim) [configure.ac] Fix cut-and-paste error. Patch from Bryan Drewery.
* - (dtucker) [configure.ac openbsd-compat/openssl-compat.{c,h}] Add compatDarren Tucker2014-02-131-2/+3
| | | | code for older OpenSSL versions that don't have EVP_MD_CTX_copy_ex.
* - tedu@cvs.openbsd.org 2014/01/31 16:39:19Damien Miller2014-02-041-2/+3
| | | | | | | | | | [auth2-chall.c authfd.c authfile.c bufaux.c bufec.c canohost.c] [channels.c cipher-chachapoly.c clientloop.c configure.ac hostfile.c] [kexc25519.c krl.c monitor.c sandbox-systrace.c session.c] [sftp-client.c ssh-keygen.c ssh.c sshconnect2.c sshd.c sshlogin.c] [openbsd-compat/explicit_bzero.c openbsd-compat/openbsd-compat.h] replace most bzero with explicit_bzero, except a few that cna be memset ok djm dtucker
* - (djm) [configure.ac atomicio.c] Kludge around NetBSD offeringDamien Miller2014-01-301-2/+4
| | | | | | different symbols for 'read' when various compiler flags are in use, causing atomicio.c comparisons against it to break and read/write operations to hang; ok dtucker
* - (djm) [configure.ac] Only check for width-specified integer typesDamien Miller2014-01-301-5/+11
| | | | | in headers that actually exist. patch from Tom G. Christensen; ok dtucker@
* - (djm) [configure.ac] Fix broken shell test '==' vs '='; patch fromDamien Miller2014-01-291-3/+3
| | | | Tom G. Christensen
* - (djm) [configure.ac] Search for inet_ntop in libnsl and libresovl;Damien Miller2014-01-281-2/+5
| | | | ok dtucker
* - (djm) [configure.ac] correct AC_DEFINE for previous.Damien Miller2014-01-261-3/+4
|
* - (djm) [configure.ac sandbox-capsicum.c sandbox-rlimit.c] DisableDamien Miller2014-01-261-2/+5
| | | | | | RLIMIT_NOFILE pseudo-sandbox on FreeBSD. In some configurations, libc will attempt to open additional file descriptors for crypto offload and crash if they cannot be opened.
* - (djm) [configure.ac] autoconf sets finds to 'yes' not '1', so testDamien Miller2014-01-251-6/+6
| | | | against the correct thing.
* - (djm) [configure.ac] Do not attempt to use capsicum sandbox unlessDamien Miller2014-01-251-8/+10
| | | | | | sys/capability.h exists and cap_rights_limit is in libc. Fixes build on FreeBSD9x which provides the header but not the libc support.
* - (djm) [configure.ac] Fix detection of capsicum sandbox on FreeBSDDamien Miller2014-01-251-9/+9
|
* - (dtucker) [configure.ac] NetBSD's (and FreeBSD's) strnvis is gratuitouslyDarren Tucker2014-01-231-3/+6
| | | | | incompatible with OpenBSD's despite post-dating it by more than a decade. Declare it as broken, and document FreeBSD's as the same. ok djm@
* - (djm) [configure.ac aclocal.m4] More tests to detect fallout fromDamien Miller2014-01-221-3/+20
| | | | | | | platform hardening options: include some long long int arithmatic to detect missing support functions for -ftrapv in libgcc and equivalents, actually test linking when -ftrapv is supplied and set either both -pie/-fPIE or neither. feedback and ok dtucker@
* - (djm) [configure.ac] Unless specifically requested, only attemptDamien Miller2014-01-221-9/+28
| | | | to build Position Independent Executables on gcc >= 4.x; ok dtucker
* - (dtucker) [configure.ac] Make PIE a configure-time option which defaultsDarren Tucker2014-01-211-4/+21
| | | | | | to on platforms where it's known to be reliably detected and off elsewhere. Works around platforms such as FreeBSD 9.1 where it does not interop with -ftrapv (it seems to work but fails when trying to link ssh). ok djm@
* - (dtucker) [configure.ac] On Cygwin the getopt variables (like optargs,Darren Tucker2014-01-181-3/+6
| | | | | | | | | | | optind) are defined in getopt.h already. Unfortunately they are defined as "declspec(dllimport)" for historical reasons, because the GNU linker didn't allow auto-import on PE/COFF targets way back when. The problem is the dllexport attributes collide with the definitions in the various source files in OpenSSH, which obviousy define the variables without declspec(dllimport). The least intrusive way to get rid of these warnings is to disable warnings for GCC compiler attributes when building on Cygwin. Patch from vinschen at redhat.com.
* - (dtucker) [configure.ac] Have --without-toolchain-hardening not turn offDarren Tucker2014-01-171-3/+2
| | | | stack-protector since that has a separate flag that's been around a while.
* - (dtucker) [configure.ac] Also look in inttypes.h for uintXX_t types.Darren Tucker2014-01-171-2/+14
|
* - (dtucker) [configure.ac openbsd-compat/bsd-statvfs.cDarren Tucker2014-01-171-2/+3
| | | | | | openbsd-compat/bsd-statvfs.h] Implement enough of statvfs on top of statfs to be useful (and for the regression tests to pass) on platforms that have statfs and fstatfs. ok djm@
* - (dtucker) [configure.ac digest.c openbsd-compat/openssl-compat.cDarren Tucker2014-01-171-2/+6
| | | | | openbsd-compat/openssl-compat.h] Add compatibility layer for older openssl versions. ok djm@
* - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c]Damien Miller2014-01-171-3/+14
| | | | | | | [sandbox-null.c sandbox-rlimit.c sandbox-seccomp-filter.c] [sandbox-systrace.c ssh-sandbox.h sshd.c] Support preauth sandboxing using the Capsicum API introduced in FreeBSD 10. Patch by Dag-Erling Smorgrav, updated by Loganaden Velvindron @ AfriNIC; ok dtucker@
* - (dtucker) [configure.ac] Split AC_CHECK_FUNCS for OpenSSL functions intoDarren Tucker2014-01-171-3/+9
| | | | separate lines and alphabetize for easier diffing of changes.
* - (dtucker) [aclocal.m4 configure.ac] Add some additional compiler/toolchainDarren Tucker2014-01-171-7/+33
| | | | | | hardening flags including -fstack-protector-strong. These default to on if the toolchain supports them, but there is a configure-time knob (--without-hardening) to disable them if necessary. ok djm@
* - (dtucker) [configure.ac] bz#2178: Don't try to use BSM on Solaris versionsDarren Tucker2013-12-191-3/+3
| | | | greater than 11 either rather than just 11. Patch from Tomas Kuthan.
* - [configure.ac openbsd-compat/Makefile.in openbsd-compat/bcrypt_pbkdf.c]Damien Miller2013-12-071-2/+8
| | | | | | [openbsd-compat/blf.h openbsd-compat/blowfish.c] [openbsd-compat/openbsd-compat.h] Start at supporting bcrypt_pbkdf in portable.
* - [Makefile.in] Add ed25519 sourcesDamien Miller2013-12-071-2/+3
|
* - (dtucker) [configure.ac] bz#2173: use pkg-config --libs to include correctDarren Tucker2013-12-051-3/+3
| | | | -L location for libedit. Patch from Serge van den Boom.
* - (dtucker) [configure.ac] Add missing "test".Darren Tucker2013-11-091-3/+3
|
* - (dtucker) [configure.ac] Fix brackets in NID_secp521r1 test.Darren Tucker2013-11-091-4/+4
|
* - (dtucker) [configure.ac kex.c key.c myproposal.h] Test for the presence ofDarren Tucker2013-11-091-21/+101
| | | | | | NID_X9_62_prime256v1, NID_secp384r1 and NID_secp521r1 and test that the latter actually works before using it. Fedora (at least) has NID_secp521r1 that doesn't work (see https://bugzilla.redhat.com/show_bug.cgi?id=1021897).
View Lorry Controller Status