en Copyright 2025 Java http://opengrok.net:8080/history/src/secure/libexec/sshd-auth/Makefile#7238317403b95a8e35cf0bc7cd66fbd78ecbe521 blocklist: Rename blacklist to blocklistFollow up upstream rename from blacklist to blocklist.- Old names and rc scripts are still valid, but emitting an ugly warning- Old firewall rules and anchor names should work, but emitting an ugly warning- Old MK_BLACKLIST* knobs are wired to the new onesAlthough care has been taken not to break current configurations, thisis a large patch containing mostly duplicated code. If issues arise, itwill be swiftly reverted.Reviewed by: ivy (pkgbase)Approved by: emaste (mentor)MFC after: 2 daysRelnotes: yes List of files: /src/secure/libexec/sshd-auth/Makefile Sun, 12 Oct 2025 17:14:27 +0000 Jose Luis Duran <jlduran@FreeBSD.org> http://opengrok.net:8080/history/src/secure/libexec/sshd-auth/Makefile#665bf6ffb500f63b58cf971c99bb9d3f1413af9b sshd-auth: Chase MK_GSSAPI changesFixes: 8e28d84935f2 ("OpenSSH: Update to 10.0p2")Sponsored by: The FreeBSD Foundation List of files: /src/secure/libexec/sshd-auth/Makefile Mon, 18 Aug 2025 16:04:06 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/libexec/sshd-auth/Makefile#8e28d84935f2f0ee081d44f9803f3052b960e50b OpenSSH: Update to 10.0p2Full release notes are available athttps://www.openssh.com/txt/release-10.0Selected highlights from the release notes:Potentially-incompatible changes- This release removes support for the weak DSA signature algorithm. [This change was previously merged to FreeBSD main.]- This release has the version number 10.0 and announces itself as "SSH-2.0-OpenSSH_10.0". Software that naively matches versions using patterns like "OpenSSH_1*" may be confused by this.- sshd(8): this release removes the code responsible for the user authentication phase of the protocol from the per-connection sshd-session binary to a new sshd-auth binary.Security- sshd(8): fix the DisableForwarding directive, which was failing to disable X11 forwarding and agent forwarding as documented. [This change was previously merged to FreeBSD main.]New features- ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement.Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D51630 List of files: /src/secure/libexec/sshd-auth/Makefile Tue, 26 Aug 2025 19:04:16 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/libexec/sshd-auth/Makefile#7238317403b95a8e35cf0bc7cd66fbd78ecbe521 blocklist: Rename blacklist to blocklistFollow up upstream rename from blacklist to blocklist.- Old names and rc scripts are still valid, but emitting an ugly warning- Old firewall rules and anchor names should work, but emitting an ugly warning- Old MK_BLACKLIST* knobs are wired to the new onesAlthough care has been taken not to break current configurations, thisis a large patch containing mostly duplicated code. If issues arise, itwill be swiftly reverted.Reviewed by: ivy (pkgbase)Approved by: emaste (mentor)MFC after: 2 daysRelnotes: yes List of files: /src/secure/libexec/sshd-auth/Makefile Sun, 12 Oct 2025 17:14:27 +0000 Jose Luis Duran <jlduran@FreeBSD.org> http://opengrok.net:8080/history/src/secure/libexec/sshd-auth/Makefile#665bf6ffb500f63b58cf971c99bb9d3f1413af9b sshd-auth: Chase MK_GSSAPI changesFixes: 8e28d84935f2 ("OpenSSH: Update to 10.0p2")Sponsored by: The FreeBSD Foundation List of files: /src/secure/libexec/sshd-auth/Makefile Mon, 18 Aug 2025 16:04:06 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/libexec/sshd-auth/Makefile#8e28d84935f2f0ee081d44f9803f3052b960e50b OpenSSH: Update to 10.0p2Full release notes are available athttps://www.openssh.com/txt/release-10.0Selected highlights from the release notes:Potentially-incompatible changes- This release removes support for the weak DSA signature algorithm. [This change was previously merged to FreeBSD main.]- This release has the version number 10.0 and announces itself as "SSH-2.0-OpenSSH_10.0". Software that naively matches versions using patterns like "OpenSSH_1*" may be confused by this.- sshd(8): this release removes the code responsible for the user authentication phase of the protocol from the per-connection sshd-session binary to a new sshd-auth binary.Security- sshd(8): fix the DisableForwarding directive, which was failing to disable X11 forwarding and agent forwarding as documented. [This change was previously merged to FreeBSD main.]New features- ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement.Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D51630 List of files: /src/secure/libexec/sshd-auth/Makefile Tue, 26 Aug 2025 19:04:16 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/libexec/sshd-auth/Makefile#7238317403b95a8e35cf0bc7cd66fbd78ecbe521 blocklist: Rename blacklist to blocklistFollow up upstream rename from blacklist to blocklist.- Old names and rc scripts are still valid, but emitting an ugly warning- Old firewall rules and anchor names should work, but emitting an ugly warning- Old MK_BLACKLIST* knobs are wired to the new onesAlthough care has been taken not to break current configurations, thisis a large patch containing mostly duplicated code. If issues arise, itwill be swiftly reverted.Reviewed by: ivy (pkgbase)Approved by: emaste (mentor)MFC after: 2 daysRelnotes: yes List of files: /src/secure/libexec/sshd-auth/Makefile Sun, 12 Oct 2025 17:14:27 +0000 Jose Luis Duran <jlduran@FreeBSD.org> http://opengrok.net:8080/history/src/secure/libexec/sshd-auth/Makefile#665bf6ffb500f63b58cf971c99bb9d3f1413af9b sshd-auth: Chase MK_GSSAPI changesFixes: 8e28d84935f2 ("OpenSSH: Update to 10.0p2")Sponsored by: The FreeBSD Foundation List of files: /src/secure/libexec/sshd-auth/Makefile Mon, 18 Aug 2025 16:04:06 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/libexec/sshd-auth/Makefile#8e28d84935f2f0ee081d44f9803f3052b960e50b OpenSSH: Update to 10.0p2Full release notes are available athttps://www.openssh.com/txt/release-10.0Selected highlights from the release notes:Potentially-incompatible changes- This release removes support for the weak DSA signature algorithm. [This change was previously merged to FreeBSD main.]- This release has the version number 10.0 and announces itself as "SSH-2.0-OpenSSH_10.0". Software that naively matches versions using patterns like "OpenSSH_1*" may be confused by this.- sshd(8): this release removes the code responsible for the user authentication phase of the protocol from the per-connection sshd-session binary to a new sshd-auth binary.Security- sshd(8): fix the DisableForwarding directive, which was failing to disable X11 forwarding and agent forwarding as documented. [This change was previously merged to FreeBSD main.]New features- ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement.Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D51630 List of files: /src/secure/libexec/sshd-auth/Makefile Tue, 26 Aug 2025 19:04:16 +0000 Ed Maste <emaste@FreeBSD.org>