en Copyright 2025 Java http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#dc5ba6b8b4f028eb944434be82838d272330f26f Remove MK_GSSAPIFor MIT Kerberos, MK_GSSAPI has no meaning: GSSAPI is a required part ofKerberos and is always built if MK_KERBEROS is enabled. Backport thisbehaviour to Heimdal so it works the same way.While here, change Heimdal's libcom_err and compile_et to be selected byMK_KERBEROS, not MK_KERBEROS_SUPPORT, since these are part of Kerberosand third-party users might need it even if Kerberos support is disabledin the base system. This means MK_KERBEROS_SUPPORT installs the samefiles with both MIT and Heimdal.Reviewed by: cyDifferential Revision: https://reviews.freebsd.org/D51859 List of files: /src/secure/usr.bin/ssh/Makefile Wed, 20 Aug 2025 18:42:20 +0000 Lexi Winter <ivy@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#e26259f48afe98022d885f02fbb8abcd7878e41a gssapi,krb5: Replace libgssapi with the MIT versionlib/libgssapi is based on Heimdal. As on Linux systems, the MITlibgssapi_krb5 replaces it. With both gssapi libraries and header filesinstalled results in broken buildworld (gssd) and ports that will notbuild without modifications to support the MIT gssapi in an alternatelocation.73ed0c7992fd removed the MIT GSSAPI headers from /usr/include. Apps usingMIT KRB5 gssapi functions and structures will fail to build without thispatch.This patch includes a temporary patch to usr.sbin/gssd to allow itto build with this patch. rmacklem@ has a patch for this and forkgssapi that uses this patch to resolve kgssapi issues for NFS withKerberos.This patch is an updated version of D51661 to allow it to build followingadditional patchs to the tree.This should have been implmented with 7e35117eb07f.Fixes: 7e35117eb07f, 73ed0c7992fdDifferential Revision: https://reviews.freebsd.org/D51661 List of files: /src/secure/usr.bin/ssh/Makefile Thu, 31 Jul 2025 16:51:20 +0000 Cy Schubert <cy@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#65d8491719bbc88ed45637d2381931c2d29cfe87 secure: Adapt Makefile to ssh-sk-client everywhereUpstream commit 7b47b40b1 ("adapt Makefile to ssh-sk-client everywhere")adapted the Makefiles to ssh-sk-client. Do the same here.Reviewed by: emasteApproved by: emaste (mentor)Differential Revision: https://reviews.freebsd.org/D49795 List of files: /src/secure/usr.bin/ssh/Makefile Thu, 17 Apr 2025 19:08:02 +0000 Jose Luis Duran <jlduran@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#d71e7e57fc1472e3ea6d31c44e187c2819d2c71e ssh: Consolidate HAVE_LDNS / LIBWRAP in ssh.mkCommit 9d63429fa163 ("ssh: move common Makefile boilerplate to a newssh.mk") introduced ssh.mk for common OpenSSH paths and flags, as partof enabling FIDO/U2F. Move duplicated MK_LDNS and MK_TCP_WRAPPERShandling there.Reviewed by: kevansSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D31896 List of files: /src/secure/usr.bin/ssh/Makefile Tue, 12 Apr 2022 13:18:20 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#7f916236044d9a733de8b3c47b5dcbf71988cb03 ssh: tidy include handlingCentralize optional krb5_config.h handling in ssh.mk. Do not addheaders (that are committed to the src tree) to SRCS as there is noneed.Reviewed by: imp, jlduran, kevans (all earlier)MFC after: 1 monthSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D34409 List of files: /src/secure/usr.bin/ssh/Makefile Wed, 02 Mar 2022 14:45:23 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#a63701848fe5462c4e8bbff0131bb42979e603ec ssh: Move XAUTH_PATH setting to ssh.mkXAUTH_PATH is normally set (in the upstream build infrastructure) inconfig.h. We previously set it in ssh and sshd's Makefiles if LOCALBASEis set, and over time have sometimes also defined it in config.h.Leave it unset in config.h and move the CFLAGS logic to to ssh.mk sothat it will be set when building all ssh libraries and programs butstill be set by LOCALBASE.Reviewed by: jlduranSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D48907 List of files: /src/secure/usr.bin/ssh/Makefile Sun, 09 Feb 2025 20:37:24 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /src/secure/usr.bin/ssh/Makefile Mon, 15 Jul 2024 04:46:32 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /src/secure/usr.bin/ssh/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#9d63429fa16352f58037ac2aa6ddc734b25e8331 ssh: move common Makefile boilerplate to a new ssh.mkThis moves SSHDIR and ssh_namespace.h handling to a common location,and will simplify future work such as adding U2F support (D32509).Reviewed by: kevansMFC after: 1 weekSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D32808 List of files: /src/secure/usr.bin/ssh/Makefile Tue, 02 Nov 2021 18:48:33 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#d55bf492f8f587e4a99f4dcb39a96159b4431782 Revert "Add workaround for a QoS-related bug in VMWare Workstation."This reverts commit 77c2fe20df6a9a7c1a353e1a4ab2ba80fefab881.The VMware Workstation issue was fixed in 2019[1], and we'd rather notcarry unnecessary local changes in OpenSSH.[1] https://communities.vmware.com/t5/VMware-Workstation-Pro/Regression-ssh-results-in-broken-pipe-upon-connecting-in-Vmware/m-p/486105/highlight/true#M25470PR: 234426Discussed with: yuripvApproved by: desMFC after: 2 weeksSponsored by: The FreeBSD Foundation List of files: /src/secure/usr.bin/ssh/Makefile Sun, 25 Apr 2021 21:14:23 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#415e34c4d5dff4c334330d58e06644da5c39b0bd MFHead@r345677 List of files: /src/secure/usr.bin/ssh/Makefile Fri, 29 Mar 2019 03:25:20 +0000 Alan Somers <asomers@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#77c2fe20df6a9a7c1a353e1a4ab2ba80fefab881 Add workaround for a QoS-related bug in VMWare Workstation.Submitted by: yuripvDifferential Revision: https://reviews.freebsd.org/D18636 List of files: /src/secure/usr.bin/ssh/Makefile Wed, 27 Mar 2019 15:17:29 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#3611ec604864a7d4dcc9a3ea898c80eb35eef8a0 Merge ^/head r337646 through r338014. List of files: /src/secure/usr.bin/ssh/Makefile Sat, 18 Aug 2018 12:15:54 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#dc5ba6b8b4f028eb944434be82838d272330f26f Remove MK_GSSAPIFor MIT Kerberos, MK_GSSAPI has no meaning: GSSAPI is a required part ofKerberos and is always built if MK_KERBEROS is enabled. Backport thisbehaviour to Heimdal so it works the same way.While here, change Heimdal's libcom_err and compile_et to be selected byMK_KERBEROS, not MK_KERBEROS_SUPPORT, since these are part of Kerberosand third-party users might need it even if Kerberos support is disabledin the base system. This means MK_KERBEROS_SUPPORT installs the samefiles with both MIT and Heimdal.Reviewed by: cyDifferential Revision: https://reviews.freebsd.org/D51859 List of files: /src/secure/usr.bin/ssh/Makefile Wed, 20 Aug 2025 18:42:20 +0000 Lexi Winter <ivy@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#e26259f48afe98022d885f02fbb8abcd7878e41a gssapi,krb5: Replace libgssapi with the MIT versionlib/libgssapi is based on Heimdal. As on Linux systems, the MITlibgssapi_krb5 replaces it. With both gssapi libraries and header filesinstalled results in broken buildworld (gssd) and ports that will notbuild without modifications to support the MIT gssapi in an alternatelocation.73ed0c7992fd removed the MIT GSSAPI headers from /usr/include. Apps usingMIT KRB5 gssapi functions and structures will fail to build without thispatch.This patch includes a temporary patch to usr.sbin/gssd to allow itto build with this patch. rmacklem@ has a patch for this and forkgssapi that uses this patch to resolve kgssapi issues for NFS withKerberos.This patch is an updated version of D51661 to allow it to build followingadditional patchs to the tree.This should have been implmented with 7e35117eb07f.Fixes: 7e35117eb07f, 73ed0c7992fdDifferential Revision: https://reviews.freebsd.org/D51661 List of files: /src/secure/usr.bin/ssh/Makefile Thu, 31 Jul 2025 16:51:20 +0000 Cy Schubert <cy@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#65d8491719bbc88ed45637d2381931c2d29cfe87 secure: Adapt Makefile to ssh-sk-client everywhereUpstream commit 7b47b40b1 ("adapt Makefile to ssh-sk-client everywhere")adapted the Makefiles to ssh-sk-client. Do the same here.Reviewed by: emasteApproved by: emaste (mentor)Differential Revision: https://reviews.freebsd.org/D49795 List of files: /src/secure/usr.bin/ssh/Makefile Thu, 17 Apr 2025 19:08:02 +0000 Jose Luis Duran <jlduran@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#d71e7e57fc1472e3ea6d31c44e187c2819d2c71e ssh: Consolidate HAVE_LDNS / LIBWRAP in ssh.mkCommit 9d63429fa163 ("ssh: move common Makefile boilerplate to a newssh.mk") introduced ssh.mk for common OpenSSH paths and flags, as partof enabling FIDO/U2F. Move duplicated MK_LDNS and MK_TCP_WRAPPERShandling there.Reviewed by: kevansSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D31896 List of files: /src/secure/usr.bin/ssh/Makefile Tue, 12 Apr 2022 13:18:20 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#7f916236044d9a733de8b3c47b5dcbf71988cb03 ssh: tidy include handlingCentralize optional krb5_config.h handling in ssh.mk. Do not addheaders (that are committed to the src tree) to SRCS as there is noneed.Reviewed by: imp, jlduran, kevans (all earlier)MFC after: 1 monthSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D34409 List of files: /src/secure/usr.bin/ssh/Makefile Wed, 02 Mar 2022 14:45:23 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#a63701848fe5462c4e8bbff0131bb42979e603ec ssh: Move XAUTH_PATH setting to ssh.mkXAUTH_PATH is normally set (in the upstream build infrastructure) inconfig.h. We previously set it in ssh and sshd's Makefiles if LOCALBASEis set, and over time have sometimes also defined it in config.h.Leave it unset in config.h and move the CFLAGS logic to to ssh.mk sothat it will be set when building all ssh libraries and programs butstill be set by LOCALBASE.Reviewed by: jlduranSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D48907 List of files: /src/secure/usr.bin/ssh/Makefile Sun, 09 Feb 2025 20:37:24 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/usr.bin/ssh/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /src/secure/usr.bin/ssh/Makefile Mon, 15 Jul 2024 04:46:32 +0000 Warner Losh <imp@FreeBSD.org>