Files
gentoo/net-misc/openssh/metadata.xml
Sam James 0147b4dd59 net-misc/openssh: add 9.9_p1
* Add a patch from master for slow X forwarding (bug #929191) with
  the default-on ObscureKeystrokeTiming feature.

* Pull in various patches from upstream's stable branch (V_9_9) and
  add a note to the ebuild about checking it, see
  https://marc.info/?l=openssh-unix-dev&m=172723798122122&w=2.

* Add USE=legacy-ciphers (bug #941255) to support DSA keys. I'll probably
  backport this to 9.8 too.

Bug: https://bugs.gentoo.org/929191
Closes: https://bugs.gentoo.org/940250
Closes: https://bugs.gentoo.org/941255
Signed-off-by: Sam James <sam@gentoo.org>
2024-10-29 01:06:01 +00:00

39 lines
1.9 KiB
XML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="project">
<email>base-system@gentoo.org</email>
<name>Gentoo Base System</name>
</maintainer>
<longdescription>
OpenSSH is a FREE version of the SSH protocol suite of network connectivity tools that
increasing numbers of people on the Internet are coming to rely on. Many users of telnet,
rlogin, ftp, and other such programs might not realize that their password is transmitted
across the Internet unencrypted, but it is. OpenSSH encrypts all traffic (including passwords)
to effectively eliminate eavesdropping, connection hijacking, and other network-level attacks.
Additionally, OpenSSH provides a myriad of secure tunneling capabilities, as well as a variety
of authentication methods.
The OpenSSH suite includes the ssh program which replaces rlogin and telnet, scp which
replaces rcp, and sftp which replaces ftp. Also included is sshd which is the server side of
the package, and the other basic utilities like ssh-add, ssh-agent, ssh-keysign, ssh-keyscan,
ssh-keygen and sftp-server. OpenSSH supports SSH protocol versions 1.3, 1.5, and 2.0.
</longdescription>
<use>
<flag name="ldns">Use LDNS for DNSSEC/SSHFP validation.</flag>
<flag name="legacy-ciphers">
Enable support for deprecated, soon-to-be-dropped DSA keys.
See https://marc.info/?l=openssh-unix-dev&gt;m=170494903207436&gt;w=2.
</flag>
<flag name="livecd">Enable root password logins for live-cd environment.</flag>
<flag name="security-key">Include builtin U2F/FIDO support</flag>
<flag name="ssl">Enable additional crypto algorithms via OpenSSL</flag>
<flag name="xmss">Enable XMSS post-quantum authentication algorithm</flag>
</use>
<upstream>
<remote-id type="cpe">cpe:/a:openbsd:openssh</remote-id>
<remote-id type="github">openssh/openssh-portable</remote-id>
</upstream>
</pkgmetadata>