Re: [ptxdist] [PATCH 1/3] openssh: bump version to 7.1p1

2015-08-27 Thread Juergen Borleis
Hi Clemens,

On Wednesday 26 August 2015 23:04:50 Clemens Gruber wrote:
 Bump OpenSSH version to 7.1p1 and remove --without-ssh1 configure flag
 as SSH1 is now disabled by default.

 Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com
 ---
  rules/openssh.make | 6 +++---
  1 file changed, 3 insertions(+), 3 deletions(-)

 diff --git a/rules/openssh.make b/rules/openssh.make
 index 931b207..3c81c11 100644
 --- a/rules/openssh.make
 +++ b/rules/openssh.make
 @@ -17,8 +17,9 @@ PACKAGES-$(PTXCONF_OPENSSH) += openssh
  #
  # Paths and names
  #
 -OPENSSH_VERSION  := 6.9p1
 -OPENSSH_MD5  := 0b161c44fc31fbc6b76a6f8ae639f16f
 +OPENSSH_VERSION  := 7.1p1
 +OPENSSH_MD5  := 8709736bc8a8c253bc4eeb4829888ca5
 +OPENSSH_SHA256 :=
 fc0a6d2d1d063d5c66dffd952493d0cda256cad204f681de0f84ef85b2ad8428
 OPENSSH   := openssh-$(OPENSSH_VERSION)
  OPENSSH_SUFFIX   := tar.gz
  OPENSSH_URL  := \
 @@ -57,7 +58,6 @@ OPENSSH_CONF_OPT:= \
   --disable-pututline \
   --disable-pututxline \
   --with-openssl \
 - --without-ssh1 \

Is this switch now obsolete and invalid? If it is still valid I would vote for 
keeping this switch for security reasons. Sometimes defaults change again and 
again...

jbe

-- 
Pengutronix e.K.                              | Juergen Borleis             |
Industrial Linux Solutions                    | http://www.pengutronix.de/  |

-- 
ptxdist mailing list
ptxdist@pengutronix.de


Re: [ptxdist] [PATCH 1/3] openssh: bump version to 7.1p1

2015-08-27 Thread Clemens Gruber
Hi Jürgen,

On Thu, Aug 27, 2015 at 10:19:22AM +0200, Juergen Borleis wrote:
 Hi Clemens,
 
 On Wednesday 26 August 2015 23:04:50 Clemens Gruber wrote:
  Bump OpenSSH version to 7.1p1 and remove --without-ssh1 configure flag
  as SSH1 is now disabled by default.
 
  Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com
  ---
   rules/openssh.make | 6 +++---
   1 file changed, 3 insertions(+), 3 deletions(-)
 
  diff --git a/rules/openssh.make b/rules/openssh.make
  index 931b207..3c81c11 100644
  --- a/rules/openssh.make
  +++ b/rules/openssh.make
  @@ -17,8 +17,9 @@ PACKAGES-$(PTXCONF_OPENSSH) += openssh
   #
   # Paths and names
   #
  -OPENSSH_VERSION:= 6.9p1
  -OPENSSH_MD5:= 0b161c44fc31fbc6b76a6f8ae639f16f
  +OPENSSH_VERSION:= 7.1p1
  +OPENSSH_MD5:= 8709736bc8a8c253bc4eeb4829888ca5
  +OPENSSH_SHA256 :=
  fc0a6d2d1d063d5c66dffd952493d0cda256cad204f681de0f84ef85b2ad8428
  OPENSSH := openssh-$(OPENSSH_VERSION)
   OPENSSH_SUFFIX := tar.gz
   OPENSSH_URL:= \
  @@ -57,7 +58,6 @@ OPENSSH_CONF_OPT  := \
  --disable-pututline \
  --disable-pututxline \
  --with-openssl \
  -   --without-ssh1 \
 
 Is this switch now obsolete and invalid? If it is still valid I would vote 
 for 
 keeping this switch for security reasons. Sometimes defaults change again and 
 again...

No it is not invalid, just not necessary anymore.
But you are right, keeping it for security reasons is a good idea in case the
defaults change again.
I'll send a new patch.

Clemens

-- 
ptxdist mailing list
ptxdist@pengutronix.de


[ptxdist] [PATCH 1/3] openssh: bump version to 7.1p1

2015-08-26 Thread Clemens Gruber
Bump OpenSSH version to 7.1p1 and remove --without-ssh1 configure flag
as SSH1 is now disabled by default.

Signed-off-by: Clemens Gruber clemens.gru...@pqgruber.com
---
 rules/openssh.make | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/rules/openssh.make b/rules/openssh.make
index 931b207..3c81c11 100644
--- a/rules/openssh.make
+++ b/rules/openssh.make
@@ -17,8 +17,9 @@ PACKAGES-$(PTXCONF_OPENSSH) += openssh
 #
 # Paths and names
 #
-OPENSSH_VERSION:= 6.9p1
-OPENSSH_MD5:= 0b161c44fc31fbc6b76a6f8ae639f16f
+OPENSSH_VERSION:= 7.1p1
+OPENSSH_MD5:= 8709736bc8a8c253bc4eeb4829888ca5
+OPENSSH_SHA256 := 
fc0a6d2d1d063d5c66dffd952493d0cda256cad204f681de0f84ef85b2ad8428
 OPENSSH:= openssh-$(OPENSSH_VERSION)
 OPENSSH_SUFFIX := tar.gz
 OPENSSH_URL:= \
@@ -57,7 +58,6 @@ OPENSSH_CONF_OPT  := \
--disable-pututline \
--disable-pututxline \
--with-openssl \
-   --without-ssh1 \
--with-stackprotect \
--with-hardening \
--without-rpath \
-- 
2.5.0


-- 
ptxdist mailing list
ptxdist@pengutronix.de