[Midnightbsd-cvs] [MidnightBSD/src] b23b2a: openssh: install sshd-auth

[Lucas Holt]

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: b23b2ad041b2b49ca0446b85dfaa961c6601dc44
      https://github.com/MidnightBSD/src/commit/b23b2ad041b2b49ca0446b85dfaa961c6601dc44
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-23 (Thu, 23 Jul 2026)

  Changed paths:
    M secure/libexec/Makefile
    A secure/libexec/sshd-auth/Makefile

  Log Message:
  -----------
  openssh: install sshd-auth

Build and install the split sshd-auth privilege-separation helper so sshd can start after the OpenSSH 10.3 update.

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: fd0128a8921e5a1ed8e047bc9bcf52fa3559ab75
      https://github.com/MidnightBSD/src/commit/fd0128a8921e5a1ed8e047bc9bcf52fa3559ab75
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-23 (Thu, 23 Jul 2026)

  Changed paths:
    M crypto/openssh/sshd-session.c

  Log Message:
  -----------
  openssh: avoid duplicate SSH banner exchange

The session process was repeating the identification exchange already performed by sshd-auth, causing clients to interpret the second server banner as an encrypted packet.

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 09dfe9b8f72314f94833ec5d59db5f8aae0bd9c9
      https://github.com/MidnightBSD/src/commit/09dfe9b8f72314f94833ec5d59db5f8aae0bd9c9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-24 (Fri, 24 Jul 2026)

  Changed paths:
    R crypto/openssh/PROTOCOL.certkeys
    R crypto/openssh/PROTOCOL.chacha20poly1305
    A crypto/openssh/ed25519-openssl.c
    R crypto/openssh/hash.c
    A crypto/openssh/openbsd-compat/bsd-sha2.h
    R crypto/openssh/openbsd-compat/sha2.h
    A crypto/openssh/regress/connect-bigconf.sh
    A crypto/openssh/regress/dropbear-server.sh
    R crypto/openssh/regress/dsa_ssh2.prv
    R crypto/openssh/regress/dsa_ssh2.pub
    A crypto/openssh/regress/gss-auth.sh
    A crypto/openssh/regress/kbdint.sh
    R crypto/openssh/regress/misc/fuzz-harness/testdata/id_dsa-cert.pub
    A crypto/openssh/regress/password.sh
    A crypto/openssh/regress/proxyjump.sh
    A crypto/openssh/regress/ssh-pkcs11.sh
    A crypto/openssh/regress/ssh-tty.sh
    R crypto/openssh/regress/unittests/hostkeys/testdata/dsa_1.pub
    R crypto/openssh/regress/unittests/hostkeys/testdata/dsa_2.pub
    R crypto/openssh/regress/unittests/hostkeys/testdata/dsa_3.pub
    R crypto/openssh/regress/unittests/hostkeys/testdata/dsa_4.pub
    R crypto/openssh/regress/unittests/hostkeys/testdata/dsa_5.pub
    R crypto/openssh/regress/unittests/hostkeys/testdata/dsa_6.pub
    A crypto/openssh/regress/unittests/misc/test_misc.c
    A crypto/openssh/regress/unittests/misc/test_xextendf.c
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1-cert.fp
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1-cert.pub
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1.fp
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1.fp.bb
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1.param.g
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1.param.priv
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1.param.pub
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1.pub
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_1_pw
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_2
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_2.fp
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_2.fp.bb
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_2.pub
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_n
    R crypto/openssh/regress/unittests/sshkey/testdata/dsa_n_pw
    R crypto/openssh/regress/unittests/sshsig/testdata/dsa
    R crypto/openssh/regress/unittests/sshsig/testdata/dsa.pub
    R crypto/openssh/regress/unittests/sshsig/testdata/dsa.sig
    R crypto/openssh/ssh-xmss.c
    A crypto/openssh/ssherr-libcrypto.c
    A crypto/openssh/ssherr-nolibcrypto.c
    R crypto/openssh/sshkey-xmss.c
    R crypto/openssh/sshkey-xmss.h
    R crypto/openssh/xmss_commons.c
    R crypto/openssh/xmss_commons.h
    R crypto/openssh/xmss_fast.c
    R crypto/openssh/xmss_fast.h
    R crypto/openssh/xmss_hash.c
    R crypto/openssh/xmss_hash.h
    R crypto/openssh/xmss_hash_address.c
    R crypto/openssh/xmss_hash_address.h
    R crypto/openssh/xmss_wots.c
    R crypto/openssh/xmss_wots.h
    M secure/lib/libssh/Makefile

  Log Message:
  -----------
  cleanup some files from old releases.  fix the ed hash


  Commit: f5875b1c146c2b20b60c14b15909ca07f87cfe3a
      https://github.com/MidnightBSD/src/commit/f5875b1c146c2b20b60c14b15909ca07f87cfe3a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-24 (Fri, 24 Jul 2026)

  Changed paths:
    M crypto/openssh/auth-rhosts.c

  Log Message:
  -----------
  bring in some fixes from freebsd and openbsd upstream


  Commit: 9c1b2ccef83bb3595fee99761d2e189d3f23df34
      https://github.com/MidnightBSD/src/commit/9c1b2ccef83bb3595fee99761d2e189d3f23df34
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-24 (Fri, 24 Jul 2026)

  Changed paths:
    M crypto/openssh/configure.ac
    M crypto/openssh/readconf.c

  Log Message:
  -----------
  sync up configure script


  Commit: 74a2d772597175520f02d79f87a46f50a5823fe4
      https://github.com/MidnightBSD/src/commit/74a2d772597175520f02d79f87a46f50a5823fe4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-24 (Fri, 24 Jul 2026)

  Changed paths:
    M crypto/openssh/config.h
    M crypto/openssh/krb5_config.h
    M crypto/openssh/loginrec.c
    M crypto/openssh/midnightbsd-configure.sh
    M crypto/openssh/misc-agent.c
    M crypto/openssh/openbsd-compat/openbsd-compat.h
    M crypto/openssh/regress/knownhosts-command.sh
    M crypto/openssh/regress/unittests/Makefile
    M crypto/openssh/regress/unittests/sshkey/test_sshkey.c
    M crypto/openssh/session.c
    M crypto/openssh/ssh-agent.1
    M crypto/openssh/ssh-agent.c
    M crypto/openssh/ssh-keygen.1
    M crypto/openssh/ssh-keygen.c
    M crypto/openssh/ssh_namespace.h
    M crypto/openssh/sshconnect2.c

  Log Message:
  -----------
  fix a few issues with the merge


Compare: https://github.com/MidnightBSD/src/compare/1b75cfd23b87...74a2d7725971

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications