b898cbf5e1
Run ssh-copy-id in the legacy mode when SSH_COPY_ID_LEGACY variable is set
2014-01-23 18:30:03 +01:00
084bc6fca5
FIPS mode - adjust the key echange DH groups and ssh-keygen according to SP800-131A
2014-01-23 18:29:02 +01:00
222dd2e358
6.4p1-3 + 0.9.3-1
2013-12-11 14:32:11 +01:00
2b2955a332
use only rsa and ecdsa host keys by default
2013-12-11 14:28:49 +01:00
545aa0d026
sshd-keygen - create an ecdsa host key with 640 permissions ( #1023945 )
2013-12-09 11:14:59 +01:00
89d920b074
6.4p1-2 + 0.9.3-1
2013-11-26 15:28:39 +01:00
82d2beb4d4
fix fatal() cleanup in the audit patch ( #1029074 )
2013-11-26 13:22:08 +01:00
36a09e37e8
fix parsing logic of ldap.conf file ( #1033662 )
2013-11-26 11:10:04 +01:00
8f439b3006
minor change in HOWTO.ssh-keycat - s/AuthorizedKeysCommandRunAs/AuthorizedKeysCommandUser/
2013-11-25 15:40:42 +01:00
09e9ef3d7c
6.4p1-1 + 0.9.3-1
2013-11-08 14:04:33 +01:00
27189b85ef
rebase audit patch for openssh-6.4p1
2013-11-08 13:33:51 +01:00
3ed6191f56
6.3p1-5 + 0.9.3-7
2013-11-01 17:07:27 +01:00
5795323a53
don't use xfree in pam_ssh_agent_auth sources <geertj@gmail.com> ( #1024965 )
2013-11-01 17:06:02 +01:00
3834483295
adjust gss kex mechanism to the upstream changes ( #1024004 )
2013-10-31 11:30:12 +01:00
7feb965804
6.3p1-4 + 0.9.3-6
2013-10-25 15:46:49 +02:00
2add7a8ff5
rebuild with openssl-1.0.1e-29.fc20 to enable ECC support
2013-10-25 15:19:26 +02:00
f0aa6e5f51
rebuild with openssl-1.0.1e-29.fc20 to enable ECC support
2013-10-25 14:46:48 +02:00
a5e23f2861
6.3p1-3 + 0.9.3-6
2013-10-24 16:45:21 +02:00
265df55bb8
don't use SSH_FP_MD5 for fingerprints in FIPS mode
2013-10-24 16:41:18 +02:00
ff7a26b109
6.3p1-2 + 0.9.3-6
2013-10-23 23:14:38 +02:00
1462de5deb
sshd-keygen to generate ECDSA keys <i.grok@comcast.net> ( #1019222 )
2013-10-23 22:51:32 +02:00
1f36406833
Increase the size of the Diffie-Hellman groups requested for a each
...
symmetric key size. New values from NIST Special Publication 800-57 with
the upper limit specified by RFC4419. Pointed out by Peter Backes, ok
djm@. (#1010607 )
2013-10-23 22:41:53 +02:00
d088f94bd9
use default_ccache_name from /etc/krb5.conf for a kerberos cache ( #991186 )
2013-10-23 22:08:19 +02:00
99076b0f8b
cleanup GSSAPI code
2013-10-23 21:56:25 +02:00
e40d5d19d9
added Obsoletes: *fips
2013-10-15 17:55:40 +02:00
9723b77ff6
bring pam_ssh_agent_auth-0.9.3.tar.bz2 back to sources
2013-10-14 17:46:04 +02:00
bf9d268c1b
upload openssh-6.3p1.tar.gz to cache
2013-10-14 17:38:33 +02:00
c67d841973
upload openssh-6.3p1.tar.gz to cache
2013-10-14 17:34:32 +02:00
a92e916970
6.3p1-1 + 0.9.3-6
2013-10-14 15:55:03 +02:00
84822b5dec
rebase for openssh-6.3p1, remove unused patches ( #1007769 )
2013-10-14 15:54:41 +02:00
c33ef551ca
6.2p2-9 + 0.9.3-5
2013-10-08 17:28:16 +02:00
f12afd6496
use dracut-fips file /etc/system-fips to determine if a FIPS module is installed
2013-10-08 17:24:54 +02:00
2ae5f9ff89
Revert "add -fips subpackages that contains the FIPS module files"
...
This reverts commit 227f4f7628
2013-10-08 17:13:39 +02:00
d4d8299c30
Revert "add missing Requires: openssl-fips in -fips subpackages"
...
This reverts commit a19397fdd2
2013-10-08 17:06:14 +02:00
b61d9c10d3
Revert "use hmac_suffix for ssh{,d} hmac checksums"
...
This reverts commit c6724c72f4
2013-10-08 17:04:53 +02:00
47b1c9e6a4
Revert "adjust openssh-6.2p1-vendor.patch after previous commit"
...
This reverts commit 4936e20991
2013-10-08 17:04:51 +02:00
0cc0054215
Revert "use {?dist} tag in suffixes for hmac checksum files"
...
This reverts commit 15244ec178
2013-10-08 17:04:40 +02:00
f344f8490c
6.2p2-8 + 0.9.3-5
2013-09-25 14:13:01 +02:00
65d16ffe59
sshd-keygen: generate only RSA keys by default ( #1010092 )
2013-09-20 17:25:17 +02:00
15244ec178
use {?dist} tag in suffixes for hmac checksum files
2013-09-20 17:11:49 +02:00
eba55f9c1b
6.2p2-7 + 0.9.3-5
2013-09-11 16:54:14 +02:00
0463fbae2f
automatically restart sshd.service on-failure with 42s interval
2013-09-11 16:52:21 +02:00
4936e20991
adjust openssh-6.2p1-vendor.patch after previous commit
2013-09-11 16:07:19 +02:00
c6724c72f4
use hmac_suffix for ssh{,d} hmac checksums
2013-09-11 16:05:58 +02:00
9acec07a0f
bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A
2013-09-10 09:50:09 +02:00
a19397fdd2
add missing Requires: openssl-fips in -fips subpackages
...
6.2p2-6.1 + 0.9.3-5
2013-08-29 09:32:04 +02:00
f4e927b62d
6.2p2-6 + 0.9.3-5
2013-08-28 21:28:04 +02:00
227f4f7628
add -fips subpackages that contains the FIPS module files
2013-08-28 19:37:08 +02:00
631ffb2c5b
6.2p2-5 + 0.9.3-5
2013-08-01 09:50:41 +02:00
b20efed7e1
gssapi credentials need to be stored before a pam session opened ( #987792 )
2013-08-01 09:35:58 +02:00
Petr Lautrbach