polynomial-c 14/09/08 20:26:57
Added: openssh-6.6.1_p1-x509-glue.patch
openssh-6.6.1_p1-x509-hpn14v5-glue.patch
Log:
Bumped hpn patch to 14v5 and X509 patch to version 8.0
(Portage version: 2.2.12/cvs/Linux x86_64, signed Manifest commit with key
0x981CA6FC)
Revision Changes Path
1.1 net-misc/openssh/files/openssh-6.6.1_p1-x509-glue.patch
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/openssh/files/openssh-6.6.1_p1-x509-glue.patch?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/openssh/files/openssh-6.6.1_p1-x509-glue.patch?rev=1.1&content-type=text/plain
Index: openssh-6.6.1_p1-x509-glue.patch
===================================================================
Make x509 apply after openssh-5.9_p1-sshd-gssapi-multihomed.patch.
--- openssh-6.6p1+x509-8.0.diff
+++ openssh-6.6p1+x509-8.0.diff
@@ -16337,10 +16337,10 @@
.It Cm ChallengeResponseAuthentication
Specifies whether challenge-response authentication is allowed (e.g. via
PAM or though authentication styles supported in
-@@ -499,6 +576,16 @@
+@@ -514,6 +591,16 @@
+ This facility is provided to assist with operation on multi homed machines.
The default is
.Dq yes .
- Note that this option applies to protocol version 2 only.
+.It Cm HostbasedAlgorithms
+Specifies the protocol version 2 algorithms used in
+.Dq hostbased
1.1
net-misc/openssh/files/openssh-6.6.1_p1-x509-hpn14v5-glue.patch
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/openssh/files/openssh-6.6.1_p1-x509-hpn14v5-glue.patch?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/openssh/files/openssh-6.6.1_p1-x509-hpn14v5-glue.patch?rev=1.1&content-type=text/plain
Index: openssh-6.6.1_p1-x509-hpn14v5-glue.patch
===================================================================
make the hpn patch apply when the x509 patch has also been applied
--- openssh-6.6.1p1-hpnssh14v5.diff
+++ openssh-6.6.1p1-hpnssh14v5.diff
@@ -1742,18 +1742,14 @@
if (options->ip_qos_interactive == -1)
options->ip_qos_interactive = IPTOS_LOWDELAY;
if (options->ip_qos_bulk == -1)
-@@ -345,9 +392,10 @@
+@@ -345,6 +392,7 @@
sUsePrivilegeSeparation, sAllowAgentForwarding,
sHostCertificate,
sRevokedKeys, sTrustedUserCAKeys, sAuthorizedPrincipalsFile,
-+ sTcpRcvBufPoll, sHPNDisabled, sHPNBufferSize,
++ sTcpRcvBufPoll, sHPNDisabled, sHPNBufferSize, sNoneEnabled,
sKexAlgorithms, sIPQoS, sVersionAddendum,
sAuthorizedKeysCommand, sAuthorizedKeysCommandUser,
-- sAuthenticationMethods, sHostKeyAgent,
-+ sAuthenticationMethods, sNoneEnabled, sHostKeyAgent,
- sDeprecated, sUnsupported
- } ServerOpCodes;
-
+ sAuthenticationMethods, sHostKeyAgent,
@@ -468,6 +516,10 @@
{ "revokedkeys", sRevokedKeys, SSHCFG_ALL },
{ "trustedusercakeys", sTrustedUserCAKeys, SSHCFG_ALL },