en Copyright 2025 Java http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#8e28d84935f2f0ee081d44f9803f3052b960e50b OpenSSH: Update to 10.0p2Full release notes are available athttps://www.openssh.com/txt/release-10.0Selected highlights from the release notes:Potentially-incompatible changes- This release removes support for the weak DSA signature algorithm. [This change was previously merged to FreeBSD main.]- This release has the version number 10.0 and announces itself as "SSH-2.0-OpenSSH_10.0". Software that naively matches versions using patterns like "OpenSSH_1*" may be confused by this.- sshd(8): this release removes the code responsible for the user authentication phase of the protocol from the per-connection sshd-session binary to a new sshd-auth binary.Security- sshd(8): fix the DisableForwarding directive, which was failing to disable X11 forwarding and agent forwarding as documented. [This change was previously merged to FreeBSD main.]New features- ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement.Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D51630 List of files: /src/crypto/openssh/PROTOCOL.certkeys Tue, 26 Aug 2025 19:04:16 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#19261079b74319502c6ffa1249920079f0f69a72 openssh: update to OpenSSH v8.7p1Some notable changes, from upstream's release notes:- sshd(8): Remove support for obsolete "host/port" syntax.- ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes".- ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm.- ssh(1), sshd(8), ssh-keygen(1): this release removes the "ssh-rsa" (RSA/SHA1) algorithm from those accepted for certificate signatures.- ssh-sk-helper(8): this is a new binary. It is used by the FIDO/U2F support to provide address-space isolation for token middleware libraries (including the internal one).- ssh(1): this release enables UpdateHostkeys by default subject to some conservative preconditions.- scp(1): this release changes the behaviour of remote to remote copies (e.g. "scp host-a:/path host-b:") to transfer through the local host by default.- scp(1): experimental support for transfers using the SFTP protocol as a replacement for the venerable SCP/RCP protocol that it has traditionally used.Additional integration work is needed to support FIDO/U2F in the basesystem.Deprecation Notice------------------OpenSSH will disable the ssh-rsa signature scheme by default in thenext release.Reviewed by: impMFC after: 1 monthRelnotes: YesSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D29985 List of files: /src/crypto/openssh/PROTOCOL.certkeys Wed, 08 Sep 2021 01:05:51 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#3af64f03119a159ac15eb75b92d346705b490385 Merge ^/head r338392 through r338594. List of files: /src/crypto/openssh/PROTOCOL.certkeys Tue, 11 Sep 2018 18:41:00 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#190cef3d52236565eb22e18b33e9e865ec634aa3 Upgrade to OpenSSH 7.8p1.Approved by: re (kib@) List of files: /src/crypto/openssh/PROTOCOL.certkeys Mon, 10 Sep 2018 16:20:12 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#8e28d84935f2f0ee081d44f9803f3052b960e50b OpenSSH: Update to 10.0p2Full release notes are available athttps://www.openssh.com/txt/release-10.0Selected highlights from the release notes:Potentially-incompatible changes- This release removes support for the weak DSA signature algorithm. [This change was previously merged to FreeBSD main.]- This release has the version number 10.0 and announces itself as "SSH-2.0-OpenSSH_10.0". Software that naively matches versions using patterns like "OpenSSH_1*" may be confused by this.- sshd(8): this release removes the code responsible for the user authentication phase of the protocol from the per-connection sshd-session binary to a new sshd-auth binary.Security- sshd(8): fix the DisableForwarding directive, which was failing to disable X11 forwarding and agent forwarding as documented. [This change was previously merged to FreeBSD main.]New features- ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement.Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D51630 List of files: /src/crypto/openssh/PROTOCOL.certkeys Tue, 26 Aug 2025 19:04:16 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#19261079b74319502c6ffa1249920079f0f69a72 openssh: update to OpenSSH v8.7p1Some notable changes, from upstream's release notes:- sshd(8): Remove support for obsolete "host/port" syntax.- ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes".- ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm.- ssh(1), sshd(8), ssh-keygen(1): this release removes the "ssh-rsa" (RSA/SHA1) algorithm from those accepted for certificate signatures.- ssh-sk-helper(8): this is a new binary. It is used by the FIDO/U2F support to provide address-space isolation for token middleware libraries (including the internal one).- ssh(1): this release enables UpdateHostkeys by default subject to some conservative preconditions.- scp(1): this release changes the behaviour of remote to remote copies (e.g. "scp host-a:/path host-b:") to transfer through the local host by default.- scp(1): experimental support for transfers using the SFTP protocol as a replacement for the venerable SCP/RCP protocol that it has traditionally used.Additional integration work is needed to support FIDO/U2F in the basesystem.Deprecation Notice------------------OpenSSH will disable the ssh-rsa signature scheme by default in thenext release.Reviewed by: impMFC after: 1 monthRelnotes: YesSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D29985 List of files: /src/crypto/openssh/PROTOCOL.certkeys Wed, 08 Sep 2021 01:05:51 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#3af64f03119a159ac15eb75b92d346705b490385 Merge ^/head r338392 through r338594. List of files: /src/crypto/openssh/PROTOCOL.certkeys Tue, 11 Sep 2018 18:41:00 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#190cef3d52236565eb22e18b33e9e865ec634aa3 Upgrade to OpenSSH 7.8p1.Approved by: re (kib@) List of files: /src/crypto/openssh/PROTOCOL.certkeys Mon, 10 Sep 2018 16:20:12 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#47dd1d1b619cc035b82b49a91a25544309ff95ae Upgrade to OpenSSH 7.7p1. List of files: /src/crypto/openssh/PROTOCOL.certkeys Fri, 11 May 2018 13:22:43 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#4f52dfbb8d6c4d446500c5b097e3806ec219fbd4 Upgrade to OpenSSH 7.6p1. This will be followed shortly by 7.7p1.This completely removes client-side support for the SSH 1 protocol,which was already disabled in 12 but is still enabled in 11. For thatreason, we will not be able to merge 7.6p1 or newer back to 11. List of files: /src/crypto/openssh/PROTOCOL.certkeys Tue, 08 May 2018 23:13:11 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#076ad2f836d5f49dc1375f1677335a48fe0d4b82 Upgrade to OpenSSH 7.3p1. List of files: /src/crypto/openssh/PROTOCOL.certkeys Thu, 02 Mar 2017 00:11:32 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#e477abf734cc777a55286bfbd6b80a6760c96acf MFC @ r241285 List of files: /src/crypto/openssh/PROTOCOL.certkeys Tue, 27 Nov 2012 18:38:50 +0000 Alexander Motin <mav@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#a10c6f5544ccbab911d786d4b50d50cabd6bb5ab IFC @ r242684 List of files: /src/crypto/openssh/PROTOCOL.certkeys Sun, 11 Nov 2012 03:26:14 +0000 Neel Natu <neel@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#23090366f729c56cab62de74c7a51792357e98a9 Sync from head List of files: /src/crypto/openssh/PROTOCOL.certkeys Sun, 04 Nov 2012 02:52:03 +0000 Simon J. Gerraty <sjg@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#24bf3585ae49955b5d065afd9ae3b8aabe1f04a1 Merge head r233826 through r240095. List of files: /src/crypto/openssh/PROTOCOL.certkeys Tue, 04 Sep 2012 19:49:37 +0000 Gleb Smirnoff <glebius@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#462c32cb8d7a451c999a3f1e7d00f9c89e96700c Upgrade OpenSSH to 6.1p1. List of files: /src/crypto/openssh/PROTOCOL.certkeys Mon, 03 Sep 2012 16:51:41 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#124981e16f7eb2b6f4bc10c9e65b66ff8a8b2c17 MFH OpenSSH 5.4p1 List of files: /src/crypto/openssh/PROTOCOL.certkeys Wed, 21 Apr 2010 06:33:10 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#47dd1d1b619cc035b82b49a91a25544309ff95ae Upgrade to OpenSSH 7.7p1. List of files: /src/crypto/openssh/PROTOCOL.certkeys Fri, 11 May 2018 13:22:43 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#4f52dfbb8d6c4d446500c5b097e3806ec219fbd4 Upgrade to OpenSSH 7.6p1. This will be followed shortly by 7.7p1.This completely removes client-side support for the SSH 1 protocol,which was already disabled in 12 but is still enabled in 11. For thatreason, we will not be able to merge 7.6p1 or newer back to 11. List of files: /src/crypto/openssh/PROTOCOL.certkeys Tue, 08 May 2018 23:13:11 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/crypto/openssh/PROTOCOL.certkeys#076ad2f836d5f49dc1375f1677335a48fe0d4b82 Upgrade to OpenSSH 7.3p1. List of files: /src/crypto/openssh/PROTOCOL.certkeys Thu, 02 Mar 2017 00:11:32 +0000 Dag-Erling Smørgrav <des@FreeBSD.org>