Date: Fri, 23 Oct 2020 14:14:39 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 250559] security/openssh-portable: support self-generated moduli in opensshd-portable Message-ID: <bug-250559-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D250559 Bug ID: 250559 Summary: security/openssh-portable: support self-generated moduli in opensshd-portable Product: Ports & Packages Version: Latest Hardware: Any URL: https://mastodon.social/@mpts/105044922334515993 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: bdrewery@FreeBSD.org Reporter: rysiek@isnic.is Flags: maintainer-feedback?(bdrewery@FreeBSD.org) Assignee: bdrewery@FreeBSD.org Created attachment 219000 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D219000&action= =3Dedit the moduli.sample patch Currently , if the moduli file is self-generated, pkg complains about the f= ile having been changed: [root@abox /etc]# pkg check -s openssh-portable Checking openssh-portable: 0% openssh-portable-8.2.p1_1,1: checksum mismatch for /usr/local/etc/ssh/moduli Checking openssh-portable: 100% The patch installs the moduli file as `/usr/local/etc/ssh/moduli.sample` instead, and symlinks it as `/usr/local/etc/ssh/moduli`. the `moduli.sample= ` is added to `pkg-plist`, but `moduli` is not -- making it possible to self-generate a moduli file without having pkg complain about checksum mism= atch for it. This is a bit improved version of a patch created by @mpts here: https://mastodon.social/@mpts/105044922334515993 (credit where credit's due) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-250559-7788>