From owner-freebsd-security@freebsd.org  Fri Jan 27 17:48:16 2017
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1C9B0CBF8DE
 for <freebsd-security@mailman.ysv.freebsd.org>;
 Fri, 27 Jan 2017 17:48:16 +0000 (UTC)
 (envelope-from heas@shrubbery.net)
Received: from guelah.shrubbery.net (guelah.shrubbery.net [198.58.5.1])
 by mx1.freebsd.org (Postfix) with ESMTP id 0EFBB9B3
 for <freebsd-security@freebsd.org>; Fri, 27 Jan 2017 17:48:15 +0000 (UTC)
 (envelope-from heas@shrubbery.net)
Received: by guelah.shrubbery.net (Postfix, from userid 7053)
 id 0BACB442F7; Fri, 27 Jan 2017 17:30:17 +0000 (UTC)
Date: Fri, 27 Jan 2017 17:30:17 +0000
From: heasley <heas@shrubbery.net>
To: freebsd-security@freebsd.org
Subject: fbsd11 & sshv1
Message-ID: <20170127173016.GF12175@shrubbery.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.7.2 (2016-11-26)
X-Mailman-Approved-At: Fri, 27 Jan 2017 18:05:52 +0000
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jan 2017 17:48:16 -0000

I do appreciate fbsd's and openssh's altruism with the removal of v1 support.
But, the fact is that there is equipment in the wild that does not support
v2 and never will and otherwise works perfectly fine, yet sshv1 is still a
better choice than telnet.

So, what is the BCP to support a v1 client for outbound connections on fbsd
11?  Hopefully one that I do not need to maintain by building a special ssh
from ports.  Is there a pkg that I'm missing?

tia