IMPORT openssh-9.8p1

* Fixes CVE-2024-6387-openssh

* NOTE that DragonFly is not known to be vulnerable to this CVE, but
because it is a general signal race we are updating sshd anyway,
just in

IMPORT openssh-9.8p1

* Fixes CVE-2024-6387-openssh

* NOTE that DragonFly is not known to be vulnerable to this CVE, but
because it is a general signal race we are updating sshd anyway,
just in case.

show more ...

openssh: Adjustments after import

- Adjust README.DELETED and README.DRAGONFLY
- Update openbsd-compat
- Regen config.h , adjusting several defines manually because the
configure script seems

openssh: Adjustments after import

- Adjust README.DELETED and README.DRAGONFLY
- Update openbsd-compat
- Regen config.h , adjusting several defines manually because the
configure script seems to not detect everything correctly.
- Add some required source files to SRCS in various programs.

Basic testing done:
- sshd runs and works, i.e. accepts incoming connections, allows different
auth methods (interactive, key).
- X-Forwarding works.
- Can ssh to other OSes.

show more ...

Inline Makefile.ssh.common

This fixes path, include and libraries order sequences and will be needed
for further PRIV changes.

Requested-by: swildner

build - Rewire secure, remove conflicts from libmd, libcrypt

* Remove /usr/src/secure, folding all of its subsystems into
/usr/src. There's no point having a /usr/src/secure any more,
the syste

build - Rewire secure, remove conflicts from libmd, libcrypt

* Remove /usr/src/secure, folding all of its subsystems into
/usr/src. There's no point having a /usr/src/secure any more,
the system won't run without the secure stuff, the idea that some foreign
actor could segregate it in order to legally download code without crypto
is absurd on the modern internet, and the U.S. government stopped caring
decades ago.

* Remove conflicts from libmd and libcrypt. Essentially this removes
the SHA*_*() and MD5_*() APIs from libmd because these APIs already
exist in lib[re]ssl.

The older SHA*() and MD5*() APIs are partially retained for legacy base
code, but will be removed in a later stage (moved to direct-linking the
needed support source).

Conflicting routines in libcrypt have been renamed and internalized to
be libcrypt-only.

* Major rewiring of the Makefile's to support the changes.

show more ...