mirror of
https://github.com/freebsd/freebsd-src.git
synced 2026-11-07 04:36:52 -10:00
Ed Maste
8e28d84935
Full release notes are available at https://www.openssh.com/txt/release-10.0 Selected highlights from the release notes: Potentially-incompatible changes - This release removes support for the weak DSA signature algorithm. [This change was previously merged to FreeBSD main.] - This release has the version number 10.0 and announces itself as "SSH-2.0-OpenSSH_10.0". Software that naively matches versions using patterns like "OpenSSH_1*" may be confused by this. - sshd(8): this release removes the code responsible for the user authentication phase of the protocol from the per-connection sshd-session binary to a new sshd-auth binary. Security - sshd(8): fix the DisableForwarding directive, which was failing to disable X11 forwarding and agent forwarding as documented. [This change was previously merged to FreeBSD main.] New features - ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement. Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D51630
53 lines
1.4 KiB
Bash
Executable File
53 lines
1.4 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
# ssh-debug
|
|
|
|
# A wrapper script around sshd to invoke when debugging to debug the
|
|
# work-in-progress versions of sshd-auth and sshd-session, instead
|
|
# of debugging the installed ones that probably don't have the change
|
|
# you are working on.
|
|
#
|
|
# Placed in the Public Domain.
|
|
|
|
unset DIR SSHD SSHD_AUTH SSHD_SESSION
|
|
|
|
fatal() {
|
|
echo >&2 $@
|
|
exit 1
|
|
}
|
|
|
|
case "$0" in
|
|
/*) DIR="`dirname $0`" ;;
|
|
./sshd-debug.sh) DIR="`pwd`" ;;
|
|
*) echo "Need full path or working directory."; exit 1 ;;
|
|
esac
|
|
|
|
for i in sshd/obj/sshd sshd/sshd sshd; do
|
|
if [ -f "${DIR}/$i" ] && [ -x "${DIR}/$i" ]; then
|
|
SSHD="${DIR}/$i"
|
|
fi
|
|
done
|
|
[ -z "${SSHD}" ] && fatal "Could not find sshd"
|
|
|
|
for i in sshd-auth/obj/sshd-auth sshd-auth/sshd-auth sshd-auth; do
|
|
if [ -f "${DIR}/$i" ] && [ -x "${DIR}/$i" ]; then
|
|
SSHD_AUTH="${DIR}/$i"
|
|
fi
|
|
done
|
|
[ -z "${SSHD_AUTH}" ] && fatal "Could not find sshd-auth"
|
|
|
|
for i in sshd-session/obj/sshd-session sshd-session/sshd-session sshd-session; do
|
|
if [ -f "${DIR}/$i" ] && [ -x "${DIR}/$i" ]; then
|
|
SSHD_SESSION="${DIR}/$i"
|
|
fi
|
|
done
|
|
[ -z "${SSHD_SESSION}" ] && fatal "Could not find sshd-session"
|
|
|
|
echo >&2 Debugging ${SSHD} auth ${SSHD_AUTH} session ${SSHD_SESSION}
|
|
|
|
# Append SshdSessionPath and SshdAuthPath pointing to the build directory.
|
|
# If you explicitly specify these in the command line, the first-match
|
|
# keyword semantics will override these.
|
|
exec "${SSHD}" $@ \
|
|
-oSshdAuthPath="${SSHD_AUTH}" -oSshdSessionPath="${SSHD_SESSION}"
|