Subversion Repositories lsh

Compare Revisions

Ignore whitespace Rev 147 → Rev 139

/tags/2.1-10/debian/lsh-utils.docs
File deleted
/tags/2.1-10/debian/lsh-server.postinst
File deleted
/tags/2.1-10/debian/NEWS
File deleted
/tags/2.1-10/debian/lsh-server.postrm
File deleted
/tags/2.1-10/debian/lsh-utils.manpages
File deleted
/tags/2.1-10/debian/lsh-server.init.d
File deleted
/tags/2.1-10/debian/README.Debian
File deleted
/tags/2.1-10/debian/po/da.po
File deleted
/tags/2.1-10/debian/po/ru.po
File deleted
/tags/2.1-10/debian/po/sv.po
File deleted
/tags/2.1-10/debian/po/de.po
File deleted
/tags/2.1-10/debian/po/ja.po
File deleted
/tags/2.1-10/debian/po/cs.po
File deleted
/tags/2.1-10/debian/po/pt_BR.po
File deleted
/tags/2.1-10/debian/po/fr.po
File deleted
/tags/2.1-10/debian/po/es.po
File deleted
/tags/2.1-10/debian/po/nl.po
File deleted
/tags/2.1-10/debian/po/pl.po
File deleted
/tags/2.1-10/debian/po/nn.po
File deleted
/tags/2.1-10/debian/po/it.po
File deleted
/tags/2.1-10/debian/po/POTFILES.in
File deleted
/tags/2.1-10/debian/po/sk.po
File deleted
/tags/2.1-10/debian/po/vi.po
File deleted
/tags/2.1-10/debian/po/templates.pot
File deleted
/tags/2.1-10/debian/po/pt.po
File deleted
/tags/2.1-10/debian/lsh-doc.docs
File deleted
/tags/2.1-10/debian/control
File deleted
/tags/2.1-10/debian/lsh-doc.info
File deleted
/tags/2.1-10/debian/compat
File deleted
/tags/2.1-10/debian/lsh-doc.manpages
File deleted
/tags/2.1-10/debian/lsh-server.manpages
File deleted
/tags/2.1-10/debian/patches/skip-argp.patch
File deleted
/tags/2.1-10/debian/patches/rl_completion-segfault.patch
File deleted
/tags/2.1-10/debian/patches/sftp-server-mansection.patch
File deleted
Property changes:
Deleted: svn:executable
## -1 +0,0 ##
-*
\ No newline at end of property
Index: 2.1-10/debian/patches/nettle3.patch
===================================================================
--- 2.1-10/debian/patches/nettle3.patch (revision 147)
+++ 2.1-10/debian/patches/nettle3.patch (nonexistent)
@@ -1,341 +0,0 @@
-Description: Support Nettle 3.x
-Author: Magnus Holmgren <holmgren@debian.org>
-Forwarded: yes
-
---- a/src/spki/verify.c
-+++ b/src/spki/verify.c
-@@ -25,7 +25,7 @@
- #endif
-
- #include <nettle/bignum.h>
--#include <nettle/dsa.h>
-+#include <nettle/dsa-compat.h>
- #include <nettle/rsa.h>
-
- #include "certificate.h"
-@@ -74,7 +74,7 @@ spki_verify_dsa(const uint8_t *digest,
- dsa_public_key_init(&dsa);
- dsa_signature_init(&rs);
-
-- res = (dsa_keypair_from_sexp_alist(&dsa, NULL,
-+ res = (dsa_keypair_from_sexp_alist((struct dsa_params *)&dsa, dsa.y, NULL,
- RSA_KEYSIZE_LIMIT, DSA_SHA1_Q_BITS, &key->sexp)
- && spki_parse_type(key)
- && dsa_signature_from_sexp(&rs, &signature->sexp, DSA_SHA1_Q_BITS)
---- a/src/crypto.c
-+++ b/src/crypto.c
-@@ -322,7 +322,7 @@ make_cast128_cbc_instance(struct crypto_
- ? do_cast128_encrypt
- : do_cast128_decrypt);
-
-- cast128_set_key(&self->ctx.ctx, algorithm->key_size, key);
-+ cast5_set_key(&self->ctx.ctx, algorithm->key_size, key);
- CBC_SET_IV(&self->ctx, iv);
-
- return(&self->super);
---- a/src/dsa.c
-+++ b/src/dsa.c
-@@ -28,7 +28,7 @@
- #include <assert.h>
-
- #include <nettle/bignum.h>
--#include <nettle/dsa.h>
-+#include <nettle/dsa-compat.h>
- #include <nettle/sexp.h>
- #include <nettle/sha.h>
-
-@@ -322,7 +322,7 @@ make_dsa_verifier(struct signature_algor
- NEW(dsa_verifier, res);
- init_dsa_verifier(res);
-
-- if (dsa_keypair_from_sexp_alist(&res->key, NULL, DSA_MAX_BITS, DSA_SHA1_Q_BITS, i))
-+ if (dsa_keypair_from_sexp_alist((struct dsa_params *)&res->key, res->key.y, NULL, DSA_MAX_BITS, DSA_SHA1_Q_BITS, i))
- return &res->super;
-
- KILL(res);
-@@ -341,7 +341,7 @@ make_dsa_signer(struct signature_algorit
-
- dsa_private_key_init(&res->key);
-
-- if (dsa_keypair_from_sexp_alist(&verifier->key, &res->key, DSA_MAX_BITS, DSA_SHA1_Q_BITS, i))
-+ if (dsa_keypair_from_sexp_alist((struct dsa_params *)&verifier->key, verifier->key.y, res->key.x, DSA_MAX_BITS, DSA_SHA1_Q_BITS, i))
- {
- res->random = self->random;
- res->verifier = verifier;
---- a/src/dummy.c
-+++ b/src/dummy.c
-@@ -41,84 +41,84 @@
- #include "lsh.h"
-
- /* Referenced by ssh_format.c */
--unsigned
-+size_t
- nettle_mpz_sizeinbase_256_s(const mpz_t x UNUSED)
- { abort(); }
-
--unsigned
-+size_t
- nettle_mpz_sizeinbase_256_u(const mpz_t x UNUSED)
- { abort(); }
-
- void
--cbc_encrypt(void *ctx UNUSED, nettle_crypt_func f UNUSED,
-- unsigned block_size UNUSED, uint8_t *iv UNUSED,
-- unsigned length UNUSED, uint8_t *dst UNUSED,
-+cbc_encrypt(const void *ctx UNUSED, nettle_cipher_func *f UNUSED,
-+ size_t block_size UNUSED, uint8_t *iv UNUSED,
-+ size_t length UNUSED, uint8_t *dst UNUSED,
- const uint8_t *src UNUSED)
- { abort(); }
-
- void
--cbc_decrypt(void *ctx UNUSED, nettle_crypt_func f UNUSED,
-- unsigned block_size UNUSED, uint8_t *iv UNUSED,
-- unsigned length UNUSED, uint8_t *dst UNUSED,
-+cbc_decrypt(const void *ctx UNUSED, nettle_cipher_func *f UNUSED,
-+ size_t block_size UNUSED, uint8_t *iv UNUSED,
-+ size_t length UNUSED, uint8_t *dst UNUSED,
- const uint8_t *src UNUSED)
- { abort(); }
-
- void
--ctr_crypt(void *ctx UNUSED, nettle_crypt_func f UNUSED,
-- unsigned block_size UNUSED, uint8_t *iv UNUSED,
-- unsigned length UNUSED, uint8_t *dst UNUSED,
-+ctr_crypt(const void *ctx UNUSED, nettle_cipher_func *f UNUSED,
-+ size_t block_size UNUSED, uint8_t *iv UNUSED,
-+ size_t length UNUSED, uint8_t *dst UNUSED,
- const uint8_t *src UNUSED)
- { abort(); }
-
- void
- hmac_digest(const void *outer UNUSED, const void *inner UNUSED, void *state UNUSED,
- const struct nettle_hash *hash UNUSED,
-- unsigned length UNUSED, uint8_t *digest UNUSED)
-+ size_t length UNUSED, uint8_t *digest UNUSED)
- { abort(); }
-
--unsigned
-+size_t
- sexp_vformat(struct nettle_buffer *buffer UNUSED,
- const char *format UNUSED, va_list args UNUSED)
- { abort(); }
-
--unsigned
-+size_t
- sexp_transport_vformat(struct nettle_buffer *buffer UNUSED,
- const char *format UNUSED, va_list args UNUSED)
- { abort(); }
-
- int
- sexp_transport_iterator_first(struct sexp_iterator *iterator UNUSED,
-- unsigned length UNUSED, uint8_t *input UNUSED)
-+ size_t length UNUSED, uint8_t *input UNUSED)
- { abort(); }
-
- void
- nettle_buffer_init_size(struct nettle_buffer *buffer UNUSED,
-- unsigned length UNUSED, uint8_t *space UNUSED)
-+ size_t length UNUSED, uint8_t *space UNUSED)
-
- { abort(); }
-
-
- /* Referenced by lsh_string.c */
--uint8_t *
--memxor(uint8_t *dst UNUSED, const uint8_t *src UNUSED, size_t n UNUSED)
-+void *
-+memxor(void *dst UNUSED, const void *src UNUSED, size_t n UNUSED)
- { abort(); }
-
- void
--nettle_mpz_get_str_256(unsigned length UNUSED, uint8_t *s UNUSED, const mpz_t x UNUSED)
-+nettle_mpz_get_str_256(size_t length UNUSED, uint8_t *s UNUSED, const mpz_t x UNUSED)
- { abort(); }
-
- void
- base64_encode_init(struct base64_encode_ctx *ctx UNUSED)
- { abort(); }
-
--unsigned
-+size_t
- base64_encode_update(struct base64_encode_ctx *ctx UNUSED,
- uint8_t *dst UNUSED,
-- unsigned length UNUSED,
-+ size_t length UNUSED,
- const uint8_t *src UNUSED)
- { abort(); }
-
--unsigned
-+size_t
- base64_encode_final(struct base64_encode_ctx *ctx UNUSED,
- uint8_t *dst UNUSED)
- { abort(); }
-@@ -129,9 +129,9 @@ base64_decode_init(struct base64_decode_
-
- int
- base64_decode_update(struct base64_decode_ctx *ctx UNUSED,
-- unsigned *dst_length UNUSED,
-+ size_t *dst_length UNUSED,
- uint8_t *dst UNUSED,
-- unsigned src_length UNUSED,
-+ size_t src_length UNUSED,
- const uint8_t *src UNUSED)
- { abort(); }
-
-@@ -142,7 +142,7 @@ base64_decode_final(struct base64_decode
- /* Referenced by parse.c */
- void
- nettle_mpz_set_str_256_s(mpz_t x UNUSED,
-- unsigned length UNUSED, const uint8_t *s UNUSED)
-+ size_t length UNUSED, const uint8_t *s UNUSED)
- { abort(); }
-
- /* Referenced by werror.c */
---- a/src/lsh-keygen.c
-+++ b/src/lsh-keygen.c
-@@ -39,7 +39,7 @@
- #include <unistd.h>
- #endif
-
--#include <nettle/dsa.h>
-+#include <nettle/dsa-compat.h>
- #include <nettle/rsa.h>
-
- #include "crypto.h"
-@@ -214,7 +214,7 @@ dsa_generate_key(struct randomness *r, u
-
- assert(r->quality == RANDOM_GOOD);
-
-- if (dsa_generate_keypair(&public, &private,
-+ if (dsa_compat_generate_keypair(&public, &private,
- r, lsh_random,
- NULL, progress,
- 512 + 64 * level, DSA_SHA1_Q_BITS))
---- a/src/lsh_string.c
-+++ b/src/lsh_string.c
-@@ -367,10 +367,10 @@ lsh_string_format_sexp(int transport, co
- {
- struct lsh_string *s;
- va_list args;
-- unsigned length;
-+ size_t length;
- struct nettle_buffer buffer;
-
-- unsigned (*vformat)(struct nettle_buffer *, const char *, va_list)
-+ size_t (*vformat)(struct nettle_buffer *, const char *, va_list)
- = transport ? sexp_transport_vformat : sexp_vformat;
-
- va_start(args, format);
-@@ -415,7 +415,7 @@ int
- lsh_string_base64_decode(struct lsh_string *s)
- {
- struct base64_decode_ctx ctx;
-- uint32_t done = s->length;
-+ size_t done = s->length;
-
- base64_decode_init(&ctx);
-
---- a/src/randomness.c
-+++ b/src/randomness.c
-@@ -35,7 +35,7 @@
- /* Wrapper for using lsh's randomness generator with nettle
- * functions. */
- void
--lsh_random(void *x, unsigned length, uint8_t *data)
-+lsh_random(void *x, size_t length, uint8_t *data)
- {
- CAST_SUBTYPE(randomness, r, x);
- RANDOM(r, length, data);
---- a/src/randomness.h
-+++ b/src/randomness.h
-@@ -84,6 +84,6 @@ make_system_random(void);
-
- /* Randomness function matching nettle's expectations. */
- void
--lsh_random(void *x, unsigned length, uint8_t *data);
-+lsh_random(void *x, size_t length, uint8_t *data);
-
- #endif /* LSH_RANDOMNESS_H_INCLUDED */
---- a/src/sexp.c
-+++ b/src/sexp.c
-@@ -97,7 +97,7 @@ lsh_sexp_to_string(struct sexp_iterator
- struct lsh_string *
- lsh_sexp_copy(struct sexp_iterator *i)
- {
-- unsigned length;
-+ size_t length;
- const uint8_t *subexpr = sexp_iterator_subexpr(i, &length);
-
- return subexpr ? ssh_format("%ls", length, subexpr) : NULL;
---- a/src/lsh.c
-+++ b/src/lsh.c
-@@ -524,8 +524,8 @@ do_lsh_lookup(struct lookup_verifier *c,
- }
-
- acl = lsh_string_format_sexp(0, "(acl(entry(subject%l)%l))",
-- subject->key_length, subject->key,
-- STRING_LD(self->access));
-+ (size_t)subject->key_length, subject->key,
-+ (size_t)STRING_LD(self->access));
-
- /* FIXME: Seems awkward to pick the acl apart again. */
- if (!spki_iterator_first(&i, STRING_LD(acl)))
-@@ -540,7 +540,7 @@ do_lsh_lookup(struct lookup_verifier *c,
- A_WRITE(self->file,
- ssh_format("\n; ACL for host %lz\n"
- "%lfS\n",
-- self->host, lsh_string_format_sexp(1, "%l", STRING_LD(acl))));
-+ self->host, lsh_string_format_sexp(1, "%l", (size_t)STRING_LD(acl))));
-
- lsh_string_free(acl);
- }
---- a/src/spki.c
-+++ b/src/spki.c
-@@ -98,7 +98,7 @@ make_ssh_hostkey_tag(const char *host)
- }
-
- tag = lsh_string_format_sexp(0, "(tag(ssh-hostkey%s))",
-- STRING_LD(reversed));
-+ (size_t)STRING_LD(reversed));
- lsh_string_free(reversed);
-
- return tag;
-@@ -207,7 +207,7 @@ spki_hash_data(const struct hash_algorit
-
- out = lsh_string_format_sexp(0, "(hash%0s%s)",
- "hash", get_atom_name(algorithm_name),
-- STRING_LD(digest));
-+ (size_t)STRING_LD(digest));
- KILL(hash);
- lsh_string_free(digest);
-
-@@ -376,13 +376,13 @@ spki_pkcs5_encrypt(struct randomness *r,
- value = lsh_string_format_sexp(0, "(password-encrypted%s(Xpkcs5v2%0s"
- "(iterations%i)(salt%s))"
- "(%0s(iv%s)(data%s)))",
-- STRING_LD(label),
-+ (size_t)STRING_LD(label),
- get_atom_name(prf_name),
- iterations,
-- STRING_LD(salt),
-+ (size_t)STRING_LD(salt),
- get_atom_name(crypto_name),
-- STRING_LD(iv),
-- STRING_LD(encrypted));
-+ (size_t)STRING_LD(iv),
-+ (size_t)STRING_LD(encrypted));
-
- lsh_string_free(key);
- lsh_string_free(salt);
---- a/src/srp_exchange.c
-+++ b/src/srp_exchange.c
-@@ -112,7 +112,7 @@ srp_make_verifier(const struct zn_group
- zn_exp(G, x, G->generator, x);
-
- expr = lsh_string_format_sexp(0, "(srp-verifier ssh-ring1%s%b)",
-- STRING_LD(salt),
-+ (size_t)STRING_LD(salt),
- x);
-
- mpz_clear(x);
Index: 2.1-10/debian/patches/bsd_connreset_test_fail.patch
===================================================================
--- 2.1-10/debian/patches/bsd_connreset_test_fail.patch (revision 147)
+++ 2.1-10/debian/patches/bsd_connreset_test_fail.patch (nonexistent)
@@ -1,17 +0,0 @@
-Description: In testsuite/tcpconnect, treat ECONNRESET as a correct connection shutdown.
- Seems to be necessary on BSD kernels.
-
-diff --git a/src/testsuite/tcpconnect.c b/src/testsuite/tcpconnect.c
-index 73398ae..c7dfa02 100644
---- a/src/testsuite/tcpconnect.c
-+++ b/src/testsuite/tcpconnect.c
-@@ -307,7 +307,8 @@ main (int argc, char **argv)
- wait_stdin_eof = 0;
- if (!wait_remote_eof)
- break;
-- if (shutdown (fd, SHUT_WR) < 0 && errno != ENOTCONN)
-+ if (shutdown (fd, SHUT_WR) < 0
-+ && errno != ENOTCONN && errno != ECONNRESET)
- die("shutdown failed: %s\n", strerror(errno));
- }
- else
Index: 2.1-10/debian/patches/new-readline-completion-function-typedef.patch
===================================================================
--- 2.1-10/debian/patches/new-readline-completion-function-typedef.patch (revision 147)
+++ 2.1-10/debian/patches/new-readline-completion-function-typedef.patch (nonexistent)
@@ -1,11 +0,0 @@
---- a/src/sftp/rl.c
-+++ b/src/sftp/rl.c
-@@ -116,7 +116,7 @@ void lsftp_rl_init()
- rl_basic_word_break_characters =" \n\t"; /* Only whitespace break words */
-
- RL_CHAR_IS_QUOTED = char_quoted;
-- rl_attempted_completion_function = (CPPFunction *)lsftp_rl_completion;
-+ rl_attempted_completion_function = (rl_completion_func_t *)lsftp_rl_completion;
-
-
- interactive = 1; /* Set the interactive flag in the main program */
Index: 2.1-10/debian/patches/mit-kerberos.patch
===================================================================
--- 2.1-10/debian/patches/mit-kerberos.patch (revision 147)
+++ 2.1-10/debian/patches/mit-kerberos.patch (nonexistent)
@@ -1,61 +0,0 @@
-Description: Modify lsh-krb-checkpw to work with MIT Kerberos instead of Heimdal.
- Building with the latest release of Heimdal (as of February 2016)
- fails and their maintainers want to orphan it.
-Bug: https://bugs.debian.org/812813
-
---- a/configure.ac
-+++ b/configure.ac
-@@ -475,7 +475,7 @@ if test x$enable_kerberos = xyes; then
- LSH_CHECK_KRB_LIB(asn1, der_get_octet_string)
- # Check for krb5_cc_gen_new too?
- # krb5_verify_user_lrealm seems to be unique to heimdal
-- LSH_CHECK_KRB_LIB(krb5, krb5_verify_user_lrealm,, [enable_kerberos=no])
-+ LSH_CHECK_KRB_LIB(krb5, krb5_get_init_creds_password,, [enable_kerberos=no])
- fi
-
- AH_TEMPLATE([WITH_KERBEROS], [For kerberos])
---- a/src/lsh-krb-checkpw.c
-+++ b/src/lsh-krb-checkpw.c
-@@ -97,6 +97,8 @@ main(int argc, char **argv)
- krb5_context context;
- krb5_ccache ccache;
- krb5_principal p;
-+ krb5_creds creds;
-+ krb5_principal server;
- char *name;
- char *pw;
-
-@@ -121,18 +123,31 @@ main(int argc, char **argv)
- if (krb5_init_context (&context))
- die("krb5_init_context failed.");
-
-- if (krb5_make_principal(context, &p, NULL, name, NULL))
-- die("krb5_make_principal failed.");
-+ if (krb5_parse_name(context, name, &p)) {
-+ die("krb5_parse_name failed.");
-+ }
-+
-+ if (krb5_get_init_creds_password(context, &creds, p, pw,
-+ NULL, NULL, 0, NULL, NULL)) {
-+ die("krb5_get_init_creds_password failed.");
-+ }
-+
-+ if (krb5_verify_init_creds(context, &creds, server,
-+ NULL, NULL, NULL)) {
-+ die("krb5_verify_init_creds failed");
-+ }
-
- if (!krb5_kuserok(context, p, name))
- die("krb5_kuserok doesn't know the user.");
-
-+ /*
- if (krb5_cc_gen_new(context, &krb5_mcc_ops, &ccache))
- die("krb5_cc_gen_new failed.");
-
- if (krb5_verify_user_lrealm(context, p, ccache, pw, TRUE, NULL))
- die("krb5_verify_user_lrealm failed.");
-
-+ */
- /* Authentication successful. */
-
- /* TODO: Keep the credential cache in some way. Perhaps write it to
Index: 2.1-10/debian/patches/series
===================================================================
--- 2.1-10/debian/patches/series (revision 147)
+++ 2.1-10/debian/patches/series (nonexistent)
@@ -1,8 +0,0 @@
-sftp-server-mansection.patch
-new-readline-completion-function-typedef.patch
-rl_completion-segfault.patch
-bsd_connreset_test_fail.patch
-skip-argp.patch
-nettle3.patch
-missing_include.patch
-mit-kerberos.patch
Index: 2.1-10/debian/patches/missing_include.patch
===================================================================
--- 2.1-10/debian/patches/missing_include.patch (revision 147)
+++ 2.1-10/debian/patches/missing_include.patch (nonexistent)
@@ -1,10 +0,0 @@
---- a/src/io_commands.c
-+++ b/src/io_commands.c
-@@ -36,6 +36,7 @@
- #include "command.h"
- #include "connection.h"
- /* For lsh_get_cstring */
-+#include "lsh_string.h"
- #include "format.h"
- #include "io.h"
- #include "queue.h"
Index: 2.1-10/debian/changelog
===================================================================
--- 2.1-10/debian/changelog (revision 147)
+++ 2.1-10/debian/changelog (nonexistent)
@@ -1,737 +0,0 @@
-lsh-utils (2.1-10) unstable; urgency=low
-
- * Add missing lsb-base dependency.
- * missing_include.patch: Add a missing include to fix FTBFS with bindnow
- and PIE enabled (Closes: #837665, LP: #1628178).
- * Increase Debhelper compat level to 9.
- * Add Brazilian Portuguese debconf templates translation (Closes:
- #816948).
- * Drop the blacklisting of vulnerable SSH keys. OpenSSH did so three
- years ago; the vulnerability was eight years ago.
- * Bump Standards-Version to 3.9.8.
-
- -- Magnus Holmgren <holmgren@debian.org> Tue, 18 Oct 2016 19:55:20 +0200
-
-lsh-utils (2.1-9) unstable; urgency=medium
-
- * nettle3.patch: also cast length arguments to nettle_sexp_vformat() to
- size_t.
-
- -- Magnus Holmgren <holmgren@debian.org> Thu, 25 Feb 2016 00:16:44 +0100
-
-lsh-utils (2.1-8) unstable; urgency=low
-
- * Build with MIT Kerberos instead of Heimdal (Closes: #806266, #812813).
- Note: the Kerberos password helper has limited functionality and is
- not recommended to use.
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 07 Feb 2016 21:11:10 +0100
-
-lsh-utils (2.1-7) unstable; urgency=low
-
- * nettle3.patch: fix pointer type mismatches, mainly changing length
- variables from unsigned to size_t.
-
- -- Magnus Holmgren <holmgren@debian.org> Wed, 03 Jun 2015 00:06:24 +0200
-
-lsh-utils (2.1-6) unstable; urgency=low
-
- * skip-argp.patch (new): Make sure we don't touch the embedded argp copy
- when not needed. It fails to build with GCC 5, which defaults to C99,
- which has different inline function rules, and we don't need it.
- (Closes: #777990).
- * nettle3.patch (new): Adapt to API changes in Nettle 3.0 using the
- compat layer.
-
- -- Magnus Holmgren <holmgren@debian.org> Tue, 02 Jun 2015 16:10:53 +0200
-
-lsh-utils (2.1-5) unstable; urgency=low
-
- * bsd_connreset_test_fail.patch (new): Fix random test failures on kFreeBSD.
- * Bump Standards-Version to 3.9.6.
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 19 Oct 2014 23:41:33 +0200
-
-lsh-utils (2.1-4) unstable; urgency=low
-
- * Drop the Scheme interpreters (guile-1.6 | scsh) from Build-Depends;
- everything generated by Scheme code comes pre-built in the upstream
- tarball.
- * Also override Lintian error concerning doc/srp-spec.txt, generated
- from srp-spec.nroff (see 2.1-2 below).
- * lsh-server.service: Remove obsolete syslog.target from Unit.After
- option (it runs lsh-server non-forking anyway, which means that
- lsh-server doesn't call syslog itself).
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 05 Oct 2014 17:53:00 +0200
-
-lsh-utils (2.1-3) unstable; urgency=low
-
- * Add systemd unit file, which should behave similarly to the init
- script.
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 31 Aug 2014 20:14:18 +0200
-
-lsh-utils (2.1-2) unstable; urgency=low
-
- * new-readline-completion-function-typedef.patch: switch to new-style
- readline typedef for lsftp_rl_completion pointer cast (Closes:
- #741771).
- * Dutch Debconf translation update from Vincent Zweije and the
- debian-l10n-dutch team (Closes: #692831).
- * Override Lintian error concerning non-free IETF document
- doc/srp-spec.nroff. See debian/copyright for details.
- * rl_completion-segfault.patch (new): Avoid crashing when tab-completing
- an empty command line in lsftp.
- * lsh-doc: Drop dependency on dpkg (>= 1.15.4) | install-info (change in
- policy § 12.2).
- * With the above, raise Standards-Version to 3.9.5.
-
- -- Magnus Holmgren <holmgren@debian.org> Tue, 01 Apr 2014 22:30:06 +0200
-
-lsh-utils (2.1-1) unstable; urgency=low
-
- * New upstream release.
- * Upstream distribution no longer embeds old version of the Nettle
- library containing non-free RFC document; drop nonettle.patch.
- * Also drop better-errmsg-when-dotlsh-missing.patch, nettle-2.0.patch,
- nettle-2.1.patch, terminate-on-connection-failure.patch,
- ipv6-v6only.patch, and serpent-byteorder.patch, all incorporated
- upstream; and testsuite-mini-inetd-localhost.patch, made unneeded by
- new included version of mini-inetd.
- * Update and improve watch file, dropping dversionmangle option.
- * Bump Standards-Version to 3.9.4.
-
- -- Magnus Holmgren <holmgren@debian.org> Thu, 15 Aug 2013 22:12:15 +0200
-
-lsh-utils (2.0.4-dfsg-11) unstable; urgency=low
-
- * Review templates and package description by the debian-l10n-english team
- (Closes: #686212). Thanks to David Prévot for coordinating.
-
- [ Debconf translations ]
- * Portuguese, Rui Branco (Closes: #687146).
- * Russian, Yuri Kozlov (Closes: #687188).
- * Czech, Martin Šín (Closes: #687263).
- * Polish, Michał Kułach (Closes: #687549).
- * Italian, Beatrice Torracca (Closes: #687773).
- * French, David Prévot (Closes: #687810).
- * Danish, Joe Hansen (Closes: #687833).
- * German, Holger Wansing (Closes: #687979).
- * Japanese, Hideki Yamane.
- * Vietnamese, Nguyen Vu Hung (Closes: #688175).
- * Slovak, Slavko (Closes: #688193).
- * Swedish, Martin Bagge (edited slightly by me) (Closes: #688419).
- * Spanish, Javier Fernández-Sanguino (Closes: #688925).
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 30 Sep 2012 22:54:03 +0200
-
-lsh-utils (2.0.4-dfsg-10) unstable; urgency=low
-
- * Default to deleting host key on purge (Closes: #670433). It's only a
- host key, not significant amounts of user-generated data, so there's
- no good reason that a purge shouldn't delete it.
- * Correct misspelling of debconf key, which caused the host key never to
- be deleted.
- * Add Italian debconf localization. (Closes: #666425). Thanks to
- Beatrice Torracca and the Italian localization team.
- * Read settings from /etc/default/lsh-server in the config script
- (Closes: #620809) and add an EXTRA_ARGS variable that can be used to
- specify additional arguments to lshd (Closes: #592595).
- * Bump Standards-Version to 3.9.3.
-
- -- Magnus Holmgren <holmgren@debian.org> Sat, 30 Jun 2012 17:58:46 +0200
-
-lsh-utils (2.0.4-dfsg-9) unstable; urgency=low
-
- * serpent-byteorder.patch: Correct Serpent test case that depended on
- broken Serpent implementation in Nettle prior to 2.2 (Closes: #646653,
- I hope). Build-depend on nettle-dev >= 2.2 for the same reason.
- * Build-depend on libgmp-dev, which is now the real package, instead of
- libgmp10-dev.
- * Use dpkg-buildflags.
- * Bump Standards-Version to 3.9.2.
-
- -- Magnus Holmgren <holmgren@debian.org> Thu, 10 Nov 2011 23:19:52 +0100
-
-lsh-utils (2.0.4-dfsg-8) unstable; urgency=low
-
- * Change source format to 3.0 (quilt), renaming all patches
- from *.dpatch to *.patch and dropping the numbers.
- * While 30_nonettle.dpatch was a script that used sed to modify
- instances of Makefile.in, nonettle.patch patches Makefile.am files as
- well as configure.ac. dh-autoremake is used to call autoremake before
- configure and to restore the effects in the clean target. The
- src/nettle subdirectory still needs to be renamed to avoid its header
- files from being found; that is now done in debian/rules.
- * Switch from CDBS to a more old-style debian/rules to get better
- control over the build process.
- * Increase Debhelper compat level to 7.
- * blacklist.patch: Don't reject when blacklisted_key() returns -1,
- indicating no blacklist file for the key type and/or size in question
- exists.
- * nettle-2.1.patch (new): Build with Nettle 2.1.
- * Enable tests.
- testsuite-mini-inetd-localhost.patch (new): When told to bind to
- "localhost", mini-inetd, which is used in certain (optional) tests,
- seems to bind to 255.255.255.255, which is of course no good. Tell it
- to bind to 127.0.0.1 instead.
- * debian/lsh-doc.doc-base: Change section to the new `Network/Remote Access'.
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 20 Mar 2011 01:30:08 +0100
-
-lsh-utils (2.0.4-dfsg-7) unstable; urgency=low
-
- * terminate_on_connection_failure.dpatch (new): Make sure that lsh exits
- if it fails to connect to the remote host (Closes: #485812).
- * ipv6_v6only.dpatch (new): Set the IPV6_V6ONLY socket option on
- AF_INET6 sockets; since lshd by default enumerates available address
- families and calls bind() once for each, conflicts will occur
- otherwise.
- * lsh-server.postinst: If openssh-server is installed and lsh-server is
- configured to use port 22, shut down sshd in addition to disabling it
- (Closes: #567945).
- * lsh-server.postinst: Close fd 3 (opened by debconf) to avoid "Closed
- spurious fd" warnings.
- * debian/control: Declare Breaks instead of Conflicts for files moved
- between packages.
- * Upgraded to Standards-Version 3.9.1 with the preceding change.
- * debian/control (lsh-server): Drop old Conflicts: lsh-utils (<<
- 1.0.2-3).
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 01 Aug 2010 20:52:37 +0200
-
-lsh-utils (2.0.4-dfsg-6) unstable; urgency=low
-
- * Change libreadline build dependency to just libreadline-dev
- (Closes: #553804).
- * Add new debconf template translations:
- + Japanese from Hideki Yamane (Closes: #558082)
- + Spanish from Shukoh (Closes: #557008)
- Credit to the respective Debian translation teams.
- * Fix a spelling error in one of the debconf templates, run
- debconf-updatepo, clean out the old obsolete translation entries, and
- perform some trivial maintenance on the Nynorsk file.
-
- -- Magnus Holmgren <holmgren@debian.org> Sat, 28 Nov 2009 17:57:30 +0100
-
-lsh-utils (2.0.4-dfsg-5) unstable; urgency=low
-
- * lsh-server.init.d: Don't suppress start/stop messages when $VERBOSE =
- "no". /etc/init.d/skeleton is not a good example in this matter.
- * blacklist.dpatch: Check keys against openssh-blacklist before
- accepting for pubkey authentication as well as on conversion by
- lsh-writekey and lsh-decode-key.
- * lsh-server: Depend on openssh-blacklist, recommend -blacklist-extra.
- lsh-utils: Recommend openssh-blacklist and -blacklist-extra.
- * Move seed and key creation back to postinst and import RSA key from
- openssh-server if it exists (Closes: #211252).
- * debian/mans/lcp.1: Fix errors.
-
- -- Magnus Holmgren <holmgren@debian.org> Sun, 08 Nov 2009 20:18:17 +0100
-
-lsh-utils (2.0.4-dfsg-4) unstable; urgency=high
-
- * lsh-server.init.d: Fix critical exit status ($?) handling mistake
- (Closes: #545090).
-
- -- Magnus Holmgren <holmgren@debian.org> Sat, 05 Sep 2009 00:44:45 +0200
-
-lsh-utils (2.0.4-dfsg-3) unstable; urgency=low
-
- * lsh-doc: Depend on dpkg (>= 1.15.4) | install-info as recommended for
- the transition to triggerized install-info.
- * Add ${misc:Depends} to Depends in case Debhelper needs it in the
- future.
- * Increase Debhelper compat level to 5.
- * Build with Nettle 2.0 (nettle-dev) (Closes: #543131).
- * nettle_2.0.dpatch created to adapt to API changes.
- * 30_nonettle.dpatch modified to add -lhogweed to LDADD where
- appropriate.
- * Add ANNOUNCE to lsh-doc.
- * Rewrite lsh-server.init.d a bit:
- * Use LSB logging functions.
- * Let lshd daemonize and create/delete its pid file by itself.
- * Change the Provides: line in the LSB header to "lsh-server" and
- declare that it should start before the services that depend on an
- SSH server (Closes: #542689). Thanks to Petter Reinholdtsen.
- * Support the status action.
- * Drop the no longer useful lsh-server-config script.
- * Upgrade to Standards-Version 3.8.3:
- * Add README.source.
- * Drop obsolete manpages from debian/mans.
-
- -- Magnus Holmgren <holmgren@debian.org> Thu, 03 Sep 2009 00:55:45 +0200
-
-lsh-utils (2.0.4-dfsg-2) unstable; urgency=low
-
- * 40_better_errmsg_when_dotlsh_missing.dpatch (new): In unix_random.c,
- check whether the seed file exists before trying to lock it, and give
- the hint about running lsh-make-seed if it doesn't (Closes: #485856).
- * Update doc-base section of lsh-doc to match current structure.
- * Remove inactive maintainer as requested by the MIA team and put myself
- in charge (Closes: #487137).
- * Upgrade lsh-client's Recommends of lsh-utils to a Depends. It's not
- huge and lsh-client is almost useless without it in most cases
- (Closes: #481073).
- * Use --as-needed to avoid unnecessary dependencies.
-
- -- Magnus Holmgren <holmgren@debian.org> Wed, 25 Jun 2008 16:40:16 +0200
-
-lsh-utils (2.0.4-dfsg-1) unstable; urgency=low
-
- * New upstream release (Closes: #422199)
- - Repackaged without non-free RFC (src/nettle/testsuite/rfc1750.txt)
- (Closes: #408490).
- - Drop 01_fix_manpages.dpatch; incorporated upstream.
- - Fixes X11 forwarding bug.
- * New co-maintainer added.
- * Rename lsh-utils-doc as lsh-doc. We'll rename the source package after
- Sarge is gone.
- * Drop the tarball-in-tarball format and ship a "normal" .orig.tar.gz.
- - Drop 02_fix_perms.dpatch.
- - Add some extra cleanup in debian/rules.
- * Increase Standards-Version to 3.7.3. No changes needed.
- * Put some more docs in the packages: README and ChangeLog is now in all
- packages, AUTHORS in lsh-utils. Update debian/copyright to refer to
- /usr/share/doc/lsh-utils/AUTHORS (Closes: #421108).
- * debian/control: Use ${binary:Version} substitution variable instead of
- ${source-version}.
- * Review Build-depends: Drop patchutils, comerr-dev (redundant),
- po-debconf (redundant), xutils (makes no difference); add
- autotools-dev, scsh-0.6 (as alternative to guile-1.6).
- * Drop lshc, the deprecated alias for lsh (Closes: #417426).
- * 30_nonettle.dpatch: Link dynamically with libnettle-dev instead of
- statically with the bundled nettle (Closes: #412138).
- * Don't provide sexp-conv; let lsh-client depend on nettle-bin instead.
- * Move lsftp and lcp to lsh-client.
- * Put sftp-server in /usr/lib/lsh-server and put the manpage in section
- 8lsh instead of renaming it (new 20_sftp-server_mansection.dpatch).
- * Ship lsh.html in lsh-doc.
- * Add doc-base entry.
- * debian/control: Add Homepage field.
- * debian/watch: Update dversionmangle to strip -dfsg suffix.
-
- -- Magnus Holmgren <holmgren@debian.org> Thu, 01 May 2008 19:22:18 +0200
-
-lsh-utils (2.0.2-1.1) unstable; urgency=low
-
- * Non-maintainer upload to fix longstanding l10n issues
- * Debconf templates translations:
- - Swedish added. Closes: #351641
- - Portuguese added. Sent during the call for updates of the NMU campaign.
- * Lintian fixes:
- - Do not Build-depend on build-essential
- - Add a very basic LSB header to the init script
-
- -- Christian Perrier <bubulle@debian.org> Wed, 13 Dec 2006 22:02:11 +0100
-
-lsh-utils (2.0.2-1) unstable; urgency=low
-
- * New upstream release
- * The fd leak in the server is known as CVE-2006-0353
- * Support for aes256-ctr.
- * Newer nettle library.
- * Fix for some more fd leaks, but none in the debian default
- configuration.
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Sat, 28 Jan 2006 05:42:16 +0100
-
-lsh-utils (2.0.1cdbs-4) unstable; urgency=high
-
- * Remove silly debconf questions and correct others. (Closes: Bug#337026)
- * Switch to dpatch.
- * Make lsh-utils build on a grsecurity system.
- * Remove /var/spool/lsh upon purge.
- * Update Vietnamese debconf translation.
- * Update German debconf translation.
- * Update Danish debconf translation.
- * Update Czech debconf translation.
- * Update Dutch debconf translation.
- * Update Russian debconf translation. (Closes: Bug#349180)
- * Update French debconf translation. (Closes: Bug#348822)
- * Have lsh-server provide ssh-server. (Closes: Bug#348844)
- * Update the watch file format version to the latest (3).
- * Have uscan remove the "cdbs" version extension.
- * Fix fd leak in the lsh-server.
- This is to be security related, so upload it with a high urgency.
- (Closes: Bug#349303)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Sun, 22 Jan 2006 06:30:43 +0100
-
-lsh-utils (2.0.1cdbs-3) unstable; urgency=low
-
- * The 2.0 release removed the "pesky" identity file error.
- (Closes: Bug#214167)
- * Update Danish debconf translation.
- * Update Vietnamese debconf translation.
- * Update French debconf translation. (Closes: Bug#347543)
- * Update Russian debconf translation. (Closes: Bug#348138)
- * Do not regenerate debian/rules. (Closes: Bug#347891)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Sun, 15 Jan 2006 21:02:36 +0100
-
-lsh-utils (2.0.1cdbs-2) unstable; urgency=low
-
- * No longer build-depend on xlibs-dev, use libxau-dev instead.
- (Closes: Bug#347143)
- * Depend on comerr-dev too, otherwise kerberos support would be broken.
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Thu, 12 Jan 2006 19:34:23 +0100
-
-lsh-utils (2.0.1cdbs-1) unstable; urgency=low
-
- * Change the build system to cdbs.
- (And hopefully don't introduce any new bugs.)
- * Make lintian happy with the odieresis in the manpages.
- * Fix debian/control, so it can be autogenerated by cdbs.
- * Conflict lsh, and rename lshc to lsh.
- * Include a small shell script to notify users.
- * Make stop act the same way graceful-stop was doing already.
- This helps not to accidently kill your own lsh connection.
- * Update debconf po files.
- * Update the German debconf translation.
- * Remove the SSH1 notice from lsh-server's package description.
- * Make the lsh-server package suggest lsh-client or openssh-client.
- * Add a small note on how to use the lsh client. (Closes: Bug#109899)
- * No longer FTBFS because of wrong debian/rules. (Closes: Bug#344747)
- * Update Czech translation. (Closes: Bug#345141)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Mon, 9 Jan 2006 00:36:44 +0100
-
-lsh-utils (2.0.1-5) unstable; urgency=low
-
- * Make lsh-utils depend on lsh-client. (Closes: Bug#338014)
- * Fix lshg to look for lshc instead of lsh. (Closes: Bug#320554)
- * Fix lcp to look for lshc instead of lsh. (Closes: Bug#338015)
- * Add lcp manpage. (Closes: Bug#338017)
- * Clarify package description. lsh should be considered stable now.
- (Closes: Bug#211317)
- * Update Russian debconf translation. (Closes: Bug#338170)
- * Update French debconf translation. (Closes: Bug#338104)
- * Update Danish debconf translation. (Closes: Bug#337017)
- * Change guile1.4-slib to guile-1.6 since slib.scm is included
- with guile-1.6-libs, and we need the scheme interpreter.
- * Add myself to the uploaders list.
- * Approve NMUs.
- (Closes: Bug#300496,Bug#318211,Bug#326328,Bug#326329,Bug#332012)
- (Closes: Bug#271911,Bug#312617,Bug#313975,Bug#304697,Bug#319933)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Thu, 10 Nov 2005 21:36:44 +0100
-
-lsh-utils (2.0.1-4.2) unstable; urgency=low
-
- * NMU.
- * Make sftp support availible via debconf. (Closes: Bug#304697)
- * Rebuild against libreadline5 and change build-deps.
- (Closes: Bug#326328,Bug#326329)
- * Rebuild with fixed debconf deps. (Closes: Bug#332012)
- * Update FSF address in debian/copyright.
- * Add czech po file. (Closes: Bug#319933)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Mon, 31 Oct 2005 14:21:54 +0100
-
-lsh-utils (2.0.1-4.1) unstable; urgency=low
-
- * NMU.
- * Trigger a rebuild to build against libgmp3c2. (Closes: Bug#318211)
- * Make lsh-server suggest openssh-client or ssh.
- * Fix Package description (Closes: Bug#271911)
- * Add vietnamese debconf localization. (Closes: Bug#312617)
- * Update german debconf localization. (Closes: Bug#313975)
- * Rebuild fixes lshc host-acls (Closes: Bug#300496)
- * Bump standards-version, no changes needed. (make lintian happy)
-
- -- Stefan Pfetzing <dreamind@dreamind.de> Sun, 14 Aug 2005 17:04:55 +0200
-
-lsh-utils (2.0.1-4) unstable; urgency=high
-
- * Trigger a rebuild, because the i386 package wasn't built properly.
- (Closes: Bug#309365)
-
- -- Simon Law <sfllaw@debian.org> Mon, 16 May 2005 16:54:00 -0400
-
-lsh-utils (2.0.1-3) unstable; urgency=high
-
- * Remove the unnecessary nettle-lfib-stream program. (Closes: Bug#308233)
-
- -- Simon Law <sfllaw@debian.org> Mon, 9 May 2005 19:25:56 -0400
-
-lsh-utils (2.0.1-2.1) unstable; urgency=high
-
- * NMU
- * Remove --nist-level option to lsh-keygen since it has changed to using RSA
- keys now and the old --nist-level setting breaks it. Closes: #301968
- * High urgency upload since 2.0.1 is needed in testing due to the security
- fix.
-
- -- Joey Hess <joeyh@debian.org> Sat, 9 Apr 2005 15:02:22 -0400
-
-lsh-utils (2.0.1-2) unstable; urgency=high
-
- * Fix up path resolution problems. (Closes: Bug#301039)
- Thanks to Stefan Pfetzing <dreamind@dreamind.de>
- * Added a build-depends on m4. (Closes: Bug#300874)
- * Denial of service attack is now known as CAN-2005-0814.
-
- -- Simon Law <sfllaw@debian.org> Sat, 26 Mar 2005 13:29:27 -0500
-
-lsh-utils (2.0.1-1) unstable; urgency=high
-
- * New upstream release
- - Fix denial of service attack documented in CAN-2005-0389
-
- -- Simon Law <sfllaw@debian.org> Fri, 18 Mar 2005 17:24:10 -0500
-
-lsh-utils (2.0-1) unstable; urgency=high
-
- * New upstream release.
- * Remove extraneous symlinks. (Closes: Bug#291010)
- * Acknowledge NMUs. (Closes: Bug#293020, Bug#255643)
-
- -- Simon Law <sfllaw@debian.org> Thu, 17 Mar 2005 18:51:12 -0500
-
-lsh-utils (1.4.2-8.2) unstable; urgency=low
-
- * Non-maintainer upload with maintainer"s agreement
- * Fix FTBFS with gcc-4.0 for amd64 builds
- Thanks to Andreas Jochens for providing the patch
- Closes: #293020
-
- -- Christian Perrier <bubulle@debian.org> Tue, 1 Feb 2005 07:10:17 +0100
-
-lsh-utils (1.4.2-8.1) unstable; urgency=low
-
- * Non-maintainer upload with maintainer's agreement
- for fixing longstanding l10n issues
- * Translations:
- - French added. Closes: #255643
- - Danish added. Thanks to Claus Hindsgaul
- - Russian added. Thanks to Yuri Kozlov
- - Norwegian Nynorsk added. Thanks to Håvard Korsvoll
- - Dutch added. Thanks to Luk Claes.
- * Typo fixes in templates (translations unfuzzied):
- - s/woul dlike/would like
- - s/ifyou/if you
-
- -- Christian Perrier <bubulle@debian.org> Thu, 13 Jan 2005 23:29:09 +0100
-
-lsh-utils (1.4.2-8) unstable; urgency=medium
-
- * Register sexp-conv with the alternatives system so that it doesn't
- conflict with the binary of the same name (and function) shipped with
- nettle-bin (Closes: Bug#274772)
- - This kludge brought to you by Marek Habersack <grendel@debian.org>.
-
- -- Simon Law <sfllaw@debian.org> Sun, 5 Dec 2004 15:15:59 -0500
-
-lsh-utils (1.4.2-7) unstable; urgency=low
-
- * New maintainer.
- * Fix build problem. (Closes: Bug#242040)
- * Use gettext-based Debconf templates. Thanks to Martin Quinson.
- (Closes: Bug#239870)
- * Upgraded to Policy 3.6.1.
- * Upgraded to Debhelper 4.
-
- -- Simon Law <sfllaw@debian.org> Wed, 2 Jun 2004 17:56:39 -0400
-
-lsh-utils (1.4.2-6) unstable; urgency=HIGH
-
- * Applied patch to fix root security hole (closes: #211662)
- * Build kerberos support against heimdal rather than krb (closes: #199067)
-
- -- Timshel Knoll <timshel@debian.org> Sat, 20 Sep 2003 11:42:27 +1000
-
-lsh-utils (1.4.2-5) unstable; urgency=low
-
- * debian/control: Removed alternative of scsh in place of guile1.4-slib from
- Build-Depends, we really need the latter to build lsh. (closes: #192771)
-
- -- Timshel Knoll <timshel@debian.org> Sun, 8 Jun 2003 17:44:58 +1000
-
-lsh-utils (1.4.2-4) unstable; urgency=low
-
- * Just Build-Depend on liboop-dev, not liboop4-dev | liboop-dev (there is
- no liboop4-dev, whoops!) (closes: #192172)
- * lsh-server: Added lintian override for missing-debconf-dependency
- (lsh-server falls back to asking the user if debconf isn't installed)
-
- -- Timshel Knoll <timshel@debian.org> Thu, 8 May 2003 02:24:52 +1000
-
-lsh-utils (1.4.2-3) unstable; urgency=low
-
- * debian/control: Priority: extra; lsh-utils-doc changed to Section: doc
- * Policy 3.5.9
- * Re-compile against liboop4
-
- -- Timshel Knoll <timshel@debian.org> Wed, 30 Apr 2003 23:08:41 +1000
-
-lsh-utils (1.4.2-2) unstable; urgency=low
-
- * debian/control: Build-Depend on xutils (closes: #160666)
- * Rename sftp-server to sftp-server.lsh to work around name conflict with
- ssh's sftp-server. (closes: #160611) Maybe this should eventually be
- handled with alternatives?
-
- -- Timshel Knoll <timshel@debian.org> Fri, 13 Sep 2002 11:14:43 +1000
-
-lsh-utils (1.4.2-1) unstable; urgency=low
-
- * New upstream release, a number of new programs come in this release
- * debian/control: Added lots of new Build-Depends: for 1.4.x series:
- + liboop-dev required for main lsh servers
- + xlibs-dev the lshc client now supports X11 forwarding and hence
- links with libXau: yay!
- + libkrb5-dev for the lsh-krb-checkpw password helper program. This is
- still not working however, see README.Debian for details,
- but I've left the Build-Dep here in stubborn hope :-)
- + libwrap-dev For lots of the lsh programs to use the TCP wrappers
- + libpam-dev Required for the lsh-pam-checkpw password helper program
- + libreadline-dev Required for lsftp's the interactive mode
- * debian/lsh-server.{config,templates,postrm}: ask whether to remove
- host keys when lsh-server is purged, all versions of lshd from now on
- should not disconnect users when the server is restarted - very useful
- when lsh'd into a box doing an "apt-get install lsh-server" !!! :-)
- * debian/lsh-server.config: modularised. Now uses a function
- for each debconf question, and has an array of function references.
- Check it out :-)
- * debian/mans/<lots-of-stuff>:
- Added manpages for new programs, updated some existing manpages
- * lshd now needs a random seed file, which needs to be generated before lshd
- can be run. Unfortunately, this operation requires user input, so this
- can't really be done in the postinst (problems with debconf etc.). This
- also means that the host key can't be generated in the postinst, since
- lsh-keygen and lsh-writekey both need the random seed to exist.
- * debian/lsh-server.init.d: generate the host key here if the random seed
- exists, fail if it doesn't.
-
- -- Timshel Knoll <timshel@debian.org> Wed, 11 Sep 2002 12:42:56 +1000
-
-lsh-utils (1.2.5-3) unstable; urgency=low
-
- * debian/control:
- - Updated description to remove "export from US is illegal" information
- - Removed France from the list of countries where crypto may be illegal
- * debian/mans/{srp-gen.1,sexp-conv.1}: manpage neatened / errors fixed
- * debian/scripts/lsh-server-config, debian/lsh-server.postrm:
- Also create / remove /etc/ssh/sshd_not_to_be_run at appropriate times to
- prevent sshd from being run, not just /etc/ssh/NOSERVER
- * debian/lsh-server.init.d: fixed issues with ssh1 fallback, it didn't work
- before (typo in variable names)
-
- -- Timshel Knoll <timshel@debian.org> Mon, 15 Apr 2002 22:41:58 +1000
-
-lsh-utils (1.2.5-2) unstable; urgency=low
-
- * Packages moved into main from non-US, yay! Now Section: net
- * Fixed &>/dev/null bash-ism redirects in upstream's lsh-authorize
- replaced with >/dev/null 2>&1
- * debian/control: fixed misspelling in -doc package description
- (closes: #125097)
- * src/lsh.c: changed "lsh" references to "lshc" (closes: #109898)
-
- -- Timshel Knoll <timshel@debian.org> Wed, 27 Mar 2002 01:07:34 +1100
-
-lsh-utils (1.2.5-1) unstable; urgency=low
-
- * New upstream release
- * Added German debconf translation (thanks to Sebastian Feltel)
- (closes: #114339)
- * debian/copyright: fixed misspelling, common-licences -> common-licenses
-
- -- Timshel Knoll <timshel@debian.org> Tue, 30 Oct 2001 15:44:43 +1100
-
-lsh-utils (1.2.3-1) unstable; urgency=low
-
- * New upstream release
- * debian/control: Don't Build-Depend on libgmp2-dev (closes: #104285)
-
- -- Timshel Knoll <timshel@debian.org> Thu, 12 Jul 2001 11:26:47 +1000
-
-lsh-utils (1.2.2-2) unstable; urgency=low
-
- * Applied Niel's IPv6 patch, to get lshd working on systems without IPv6
- (closes: Bug#97623)
-
- -- Timshel Knoll <timshel@debian.org> Wed, 23 May 2001 09:38:03 +1000
-
-lsh-utils (1.2.2-1) unstable; urgency=low
-
- * New upstream release
-
- -- Timshel Knoll <timshel@debian.org> Sat, 12 May 2001 23:58:20 +1000
-
-lsh-utils (1.2.1-1) unstable; urgency=low
-
- * New upstream release
-
- -- Timshel Knoll <timshel@debian.org> Sat, 21 Apr 2001 21:52:01 +1000
-
-lsh-utils (1.2-1) unstable; urgency=low
-
- * New upstream release
- * Fixes do debian/installmans.pl's manpage section regex and sanity
- checking
- * Added manpage for new binary lshg (in lsh-client package), did
- some updates for the lshc binary as options have been added.
- * Heaps of packaging fixes/updates.
-
- -- Timshel Knoll <timshel@debian.org> Thu, 12 Apr 2001 13:02:27 +1000
-
-lsh-utils (1.0.2-3) unstable; urgency=low
-
- * debian/control: Split into 4 packages, lsh-utils, lsh-client,
- lsh-server and lsh-utils-doc, Standards-Version: 3.5.2,
- Build-Depends: zlib1g-dev -> libz-dev, added guile1.4-slib | scsh
- * Pulled original upstream configure script back in and modified that
- rather than re-generating with autoconf, which made for a huge .diff.gz.
- * lsh-server package debconf-ized, lsh-server-config script added
- to configure lshd.
- * debian/rules: Added support for DEB_BUILD_OPTIONS=nostrip,debug
-
- -- Timshel Knoll <timshel@debian.org> Mon, 9 Apr 2001 23:59:47 -0700
-
-lsh-utils (1.0.2-2) unstable; urgency=low
-
- * Changed order of ./configure checks for gmp.h and gmp2/gmp.h to fix
- compile failure - this now checks for gmp2/gmp.h first and thus fixes
- the problem. This compile is against libgmp3.
- * debian/installmans.pl: perl Debian::Debhelper program to install manpages
- properly - this replaces the dh_installmanpages call in debian/rules
- which will mean that manpages are installed under their correct names.
- (ie. lsh.1 will be installed as lshc.1) (closes: Bug#88197).
- * debian/control: Standards-Version: 3.1.1, Build-Depends: added
- (including texinfo and libgmp2-dev | libgmp3-dev
- - (closes: Bug#79645, Bug#84532)).
- * debian/rules: Removed call to obsolete dh_suidregister.
- * debian/init.d: changed default port of lshd from 2223 to 2222 (it should
- have been this from the start, since ssh runs on port 22 _not_ 23). :-)
-
- -- Timshel Knoll <timshel@debian.org> Tue, 13 Mar 2001 09:54:33 +1100
-
-lsh-utils (1.0.2-1) unstable; urgency=low
-
- * New upstream release (closes: Bug#75042)
-
- -- Timshel Knoll <timshel@debian.org> Tue, 12 Dec 2000 11:38:13 +1100
-
-lsh-utils (1.0.1-2) unstable; urgency=low
-
- * Fixed typo in debian/postinst (lsh_writekey needs -o before output
- filename) (closes: Bug#71240)
-
- -- Timshel Knoll <timshel@debian.org> Mon, 18 Sep 2000 23:52:02 +1100
-
-lsh-utils (1.0.1-1) unstable; urgency=low
-
- * New upstream release
-
- -- Timshel Knoll <timshel@debian.org> Tue, 18 Jul 2000 19:10:12 +1000
-
-lsh-utils (0.9.9-1) unstable; urgency=low
-
- * Initial Release.
-
- -- Timshel Knoll <timshel@debian.org> Thu, 15 Jun 2000 16:30:33 +1000
-
Index: 2.1-10/debian/lsh-server.templates
===================================================================
--- 2.1-10/debian/lsh-server.templates (revision 147)
+++ 2.1-10/debian/lsh-server.templates (nonexistent)
@@ -1,41 +0,0 @@
-# These templates have been reviewed by the debian-l10n-english
-# team
-#
-# If modifications/additions/rewording are needed, please ask
-# debian-l10n-english@lists.debian.org for advice.
-#
-# Even minor modifications require translation updates and such
-# changes should be coordinated with translators and reviewers.
-
-Template: lsh-server/lshd_port
-Type: string
-Default: 22
-_Description: lsh server port:
- The default port for lshd is 22. If lshd should run on a different port,
- please specify the alternative port here. If you specify 22, you will
- need to manually disable any other SSH servers running on port 22, other
- than OpenSSH (from the package openssh-server), which will be disabled
- automatically if you choose 22 here.
-
-Template: lsh-server/sftp
-Type: boolean
-Default: false
-_Description: Enable the SFTP subsystem?
- Please choose whether you want to use the EXPERIMENTAL lsh SFTP support.
- .
- Since it is experimental, the default is for it to be disabled, but it
- can be enabled now or later by manually changing /etc/default/lsh-server.
-
-Template: lsh-server/purge_hostkey
-Type: boolean
-Default: true
-_Description: Remove host key on purge?
- When this package is installed, a host key is generated to authenticate
- your host.
- .
- Please choose whether you want to purge the host key when the package
- is removed.
-
-Template: lsh-server/extra_args
-Type: string
-_Description: Additional arguments to pass to lshd:
Index: 2.1-10/debian/lsh-server.service
===================================================================
--- 2.1-10/debian/lsh-server.service (revision 147)
+++ 2.1-10/debian/lsh-server.service (nonexistent)
@@ -1,21 +0,0 @@
-[Unit]
-Description=Secure Shell v2 (SSH2) protocol server
-Documentation=man:lshd(8)
-After=local-fs.target remote-fs.target network.target nss-lookup.target
-
-[Service]
-Type=simple
-ExecStart=/bin/sh -c "case \"$ENABLE_SFTP\" in \
- true|y*|Y*) ;; \
- *) SFTP_FLAG='';; esac; \
- exec /usr/sbin/lshd --port \"$LSHD_PORT\" $SFTP_FLAG $EXTRA_ARGS"
-Environment="LSHD_PORT=22" "SFTP_FLAG=--subsystems sftp=/usr/lib/lsh-server/sftp-server"
-EnvironmentFile=-/etc/default/lsh-server
-KillSignal=SIGHUP
-KillMode=process
-SendSIGKILL=no
-SyslogIdentifier=lshd
-TimeoutStopSec=1
-
-[Install]
-WantedBy=multi-user.target
Index: 2.1-10/debian/lsh-utils.install
===================================================================
--- 2.1-10/debian/lsh-utils.install (revision 147)
+++ 2.1-10/debian/lsh-utils.install (nonexistent)
@@ -1,11 +0,0 @@
-usr/bin/lsh-authorize
-usr/bin/lsh-decode-key
-usr/bin/lsh-decrypt-key
-usr/bin/lsh-export-key
-usr/bin/lsh-keygen
-usr/bin/lsh-make-seed
-usr/bin/lsh-upgrade
-usr/bin/lsh-upgrade-key
-usr/bin/lsh-writekey
-usr/bin/srp-gen
-usr/bin/ssh-conv
Index: 2.1-10/debian/rules
===================================================================
--- 2.1-10/debian/rules (revision 147)
+++ 2.1-10/debian/rules (nonexistent)
@@ -1,117 +0,0 @@
-#!/usr/bin/make -f
-# -*- makefile -*-
-# Sample debian/rules that uses debhelper.
-# GNU copyright 1997 to 1999 by Joey Hess.
-
-# Uncomment this to turn on verbose mode.
-#export DH_VERBOSE=1
-
-# These are used for cross-compiling and for saving the configure script
-# from having to guess our platform (since we know it already)
-DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
-DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
-
-ifeq ($(DEB_BUILD_GNU_TYPE), $(DEB_HOST_GNU_TYPE))
- buildflags = --build=$(DEB_BUILD_GNU_TYPE)
-else
- buildflags = --build=$(DEB_BUILD_GNU_TYPE) --host=$(DEB_HOST_GNU_TYPE)
-endif
-
-parallel = $(patsubst parallel=%,%,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
-ifneq (,$(parallel))
-jobsflag = -j$(parallel)
-endif
-
-config.status: configure.ac
- dh_testdir
- # Add here commands to configure the package.
- dh_autoreconf
- ./configure $(buildflags) \
- --prefix=/usr \
- --disable-dependency-tracking \
- --enable-pam --enable-kerberos --enable-srp \
- --with-pty --enable-tcp-forward --enable-x11-forward \
- --enable-agent-forward --enable-ipv6 --enable-utmp \
- --with-zlib --with-tcpwrappers --with-sshd1=/usr/sbin/sshd \
- --with-x XAUTH_PROGRAM=/usr/bin/xauth \
- $(shell DEB_LDFLAGS_MAINT_PREPEND="-Wl,-z,defs -Wl,--as-needed" dpkg-buildflags --export=configure)
-
-build: build-stamp
-build-stamp: config.status
- dh_testdir
-
- # Add here commands to compile the package.
- $(MAKE) $(jobsflag) MAKEINFO='makeinfo --enable-encoding'
-ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
- $(MAKE) check
-endif
-
- touch build-stamp
-
-clean:
- dh_testdir
- dh_testroot
- rm -f build-stamp
-
- # Add here commands to clean up after the build process.
- [ ! -f Makefile ] || $(MAKE) distclean
- dh_autoreconf_clean
- dh_clean
-
-install: build
- dh_testdir
- dh_testroot
- dh_prep
- dh_installdirs
-
- # Add here commands to install the package into debian/tmp
- $(MAKE) install DESTDIR=$(CURDIR)/debian/tmp
-
-build-indep build-arch: build
-
-# Build architecture-independent files here.
-binary-indep: build-indep install
- dh_testdir
- dh_testroot
- dh_install -i --sourcedir=debian/tmp
- dh_link -i
- dh_installchangelogs -i ChangeLog
- dh_installdocs -i -A README
- dh_installinfo -i
- dh_installman -i
- dh_installdebconf -i
- dh_compress -i
- dh_fixperms -i
- dh_makeshlibs -i
- dh_installdeb -i
- dh_shlibdeps -i
- dh_gencontrol -i
- dh_md5sums -i
- dh_builddeb -i
-
-# Build architecture-dependent files here.
-binary-arch: build-arch install
- dh_testdir
- dh_testroot
- dh_install -a --sourcedir=debian/tmp
- dh_link -a
- dh_installchangelogs -a ChangeLog
- dh_installdocs -a -A README
- dh_installexamples -a
- dh_installman -a
- dh_systemd_enable -a
- dh_installinit -a
- dh_systemd_start -a
- dh_installdebconf -a
- dh_strip -a
- dh_compress -a
- dh_fixperms -a
- dh_makeshlibs -a
- dh_installdeb -a
- dh_shlibdeps -a
- dh_gencontrol -a
- dh_md5sums -a
- dh_builddeb -a
-
-binary: binary-arch binary-indep
-.PHONY: build-indep build-arch build clean clean-patched binary-indep binary-arch binary install
/2.1-10/debian/rules
Property changes:
Deleted: svn:executable
## -1 +0,0 ##
-*
\ No newline at end of property
Index: 2.1-10/debian/lsh-client.manpages
===================================================================
--- 2.1-10/debian/lsh-client.manpages (revision 147)
+++ 2.1-10/debian/lsh-client.manpages (nonexistent)
@@ -1,4 +0,0 @@
-debian/mans/lcp.1
-doc/lsh.1
-doc/lshg.1
-src/sftp/lsftp.1
Index: 2.1-10/debian/lsh-server.config
===================================================================
--- 2.1-10/debian/lsh-server.config (revision 147)
+++ 2.1-10/debian/lsh-server.config (nonexistent)
@@ -1,119 +0,0 @@
-#!/usr/bin/perl -w
-#
-# debconf config script for lsh-server
-#
-# Copyright (c) 2000, 2001, 2002 Timshel Knoll <timshel@debian.org>
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-#
-# On Debian systems, see /usr/share/common-licenses/GPL for the GNU GPL.
-#
-use strict;
-use Debconf::Client::ConfModule ':all';
-
-
-sub ask_whether_to_purge_hostkey {
- &input ("medium", "lsh-server/purge_hostkey");
- my @ret = &go ();
-
- return ($ret[0] == 30 ? -1 : 1);
-}
-
-
-sub get_lshd_port {
- &input ("medium", "lsh-server/lshd_port");
- my @ret = &go ();
-
- my $port = &get ("lsh-server/lshd_port");
-
- if ($port and $port !~ m/^\d+$/) {
- $port = (getservbyname ($port, "tcp"))[2];
- }
-
- unless ($port) {
- # invalid service entered: wasn't a number, and
- # getservbyname failed, try again ...
- # FIXME: try putting some sort of error message here?
- &reset ("lsh-server/lshd_port");
- return 0;
- }
-
- return ($ret[0] == 30 ? -1 : 1);
-}
-
-
-
-sub ask_whether_to_enable_sftp {
- &input ("medium", "lsh-server/sftp");
- my @ret = &go ();
-
- return ($ret[0] == 30 ? -1 : 1);
-}
-
-
-sub configure () {
- my $state = 0;
-
- # The list of things to do, in order
- # Aren't really long, descriptive function names fun ;-)
- my @states = (
- \&ask_whether_to_purge_hostkey,
- \&get_lshd_port,
- \&ask_whether_to_enable_sftp
- );
-
- # This is 1 or -1, depending on whether we're going forward or backward
- # Required because otherwise when we back up to a question doesn't need
- # to be asked, the engine will go forward again :-(
- my $step = 1;
-
- until ($state > $#states) {
- if ($state < 0) {
- $state = 0;
- # We may have got here because of "backing up" to a question which
- # was skipped, so make sure we're going forward from here to avoid
- # an infinite loop
- $step = 1;
- }
-
- $step = &{ $states[$state] } ($step);
-
- $state += $step;
- }
-}
-
-
-
-die "Syntax error: no argument" if (@ARGV <= 0);
-
-version ('2.0');
-
-my $capb = &capb ('backup');
-
-system {'sh'} 'sh', '-c', <<'EOF';
-[ -e /etc/default/lsh-server ] || exit 0
-. /etc/default/lsh-server
-. /usr/share/debconf/confmodule
-
-db_set lsh-server/lshd_port "$LSHD_PORT" || true
-db_set lsh-server/sftp "$ENABLE_SFTP" || true
-db_set lsh-server/extra_args "$EXTRA_ARGS" || true
-EOF
-
-if ($ARGV[0] eq "configure" || $ARGV[0] eq "reconfigure") {
- &configure ();
-}
-
-
-
Index: 2.1-10/debian/mans/lcp.1
===================================================================
--- 2.1-10/debian/mans/lcp.1 (revision 147)
+++ 2.1-10/debian/mans/lcp.1 (nonexistent)
@@ -1,73 +0,0 @@
-.\" -*- nroff -*-
-.\"
-.\" lcp.1
-.\"
-.Dd November 8, 2005
-.Dt LCP 1
-.Os
-.Sh NAME
-.Nm lcp
-.Nd Secure remote file copy
-.Sh SYNOPSIS
-.Nm lcp
-.Bk -words
-.Op Fl fvn
-.Sm off
-.Oo
-.Op Ar user No @
-.Ar host1 No :
-.Oc Ns Ar file1
-.Sm on
-.Sm off
-.Oo
-.Op Ar user No @
-.Ar host2 No :
-.Oc Ar file2
-.Sm on
-.Ek
-.\"
-.Sh DESCRIPTION
-.Nm
-is a program that securely copies files between two hosts on a
-network. This is intended as a secure replacement for
-.Xr rcp 1 .
-Note
-that both the source and the destination can be on remote machines.
-.\"
-.Sh OPTIONS
-Available options:
-.\"
-.Bl -tag -width Ds
-.It Fl \-help
-Show summary of options.
-.It Fl f, \-force
-Overwrite existing files.
-.It Fl v, \-version
-Display commands before they are executed.
-.It Fl n, \-dry\-run
-Don't execute any commands. Implies -v.
-.El
-.\"
-.\"
-.Sh ENVIRONMENT
-.Bl -tag -width ".Ev LSFTP_RSH"
-.It Ev LSFTP_RSH
-The program to use for the SSH tunnel. If the variable is not set, lcp
-defaults to using lsh.
-.El
-.\"
-.Sh "REPORTING BUGS"
-Report bugs to <bug-lsh@gnu.org>.
-.\"
-.Sh AUTHOR
-The lsh program suite is written mainly by Niels M\[:o]ller <nisse@lysator.liu.se>.
-.\"
-This man-page was written for
-the Debian GNU/Linux system by Charles Fry <debian@frogcircus.org>.
-.\"
-.Sh "SEE ALSO"
-.Xr rcp 1 ,
-.Xr scp 1 ,
-.Xr lsftp 1 ,
-.Xr lsh 1 ,
-.Xr lshd 8
Index: 2.1-10/debian/mans/lsh_proxy.8
===================================================================
--- 2.1-10/debian/mans/lsh_proxy.8 (revision 147)
+++ 2.1-10/debian/mans/lsh_proxy.8 (nonexistent)
@@ -1,129 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH_PROXY 1 "Apr 19, 2000" lsh_proxy "Lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh_proxy \- Server for the ssh-2 protocol.
-.SH SYNOPSIS
-.B lsh_proxy
-.RI [ options ]
-.SH DESCRIPTION
-This manual page documents briefly the
-.B lsh_proxy
-command.
-.SH OPTIONS
-These programs follow the usual GNU command line syntax, with long
-options starting with two dashes (`-').
-A summary of options is included below.
-For a complete description, see the Info files.
-.TP
-.B \-D, \-\-destination=\fIdestination:port\fP
-Destination ssh server address (transparent if not given).
-.TP
-.B \-h, \-\-host\-key=\fIkey\-file\fP
-Location of the server's public key.
-.TP
-.B \-\-interface=\fIinterface\fP
-Listen on this network interface.
-.TP
-.B \-\-no\-tcp\-forward
-Disable TCP/IP forwarding.
-.TP
-.B \-p, \-\-port=\fIport\fP
-Listen on this port.
-.TP
-.B \-\-tcp\-forward
-Enable TCP/IP forwarding (default).
-.TP
-.B \-c, \-\-crypto=\fIcrypto\-algorithm\fP
-The crypto algorithm to use. Supported types of \fIcrypto\-algorithm\fP (in
-order of preference) are "3des-cbc", "twofish-cbc", "cast128-cbc",
-"serpent-cbc@lysator.liu.se", "rijndael@lysator.liu.se", "blowfish-cbc",
-"arcfour", "none". The default is to use triple-DES in CBC mode ("3des-cbc").
-You may also specify "all" to enable all supported crypto
-algorithms (except "none").
-.TP
-.B \-\-hostkey\-algorithm=\fIhostkey\-algorithm\fP
-The hostkey algorithm to use. Supported types of \fIhostkey\-algorithm\fP (in
-order of preference) are "ssh-dss", "spki", "none".
-.TP
-.B \-m, \-\-mac=\fImac\-algorithm\fP
-The MAC (message authentication) algorithm to use. Supported types of
-\fImac\-algorithm\fP (in order of preference) are "hmac-sha1", "hmac-md5",
-"none".
-.TP
-.B \-z, \-\-compression[=\fIcompression\-algorithm\fP]
-The compression algorithm to use. Supported types of
-\fIcompression\-algorithm\fP are "none", "zlib". The default preference list
-supports zlib compression, but prefers not to use it. If \-z or \-\-compression
-is specified with no argument, the compression algorithm list is changed to
-"zlib", "none", which means that zlib is the preferred method of compression.
-A somewhat unobvious consequence of -z having an optional argument is that if
-you provide an argument, it must follow directly after the option letter, no
-spaces allowed.
-.TP
-.B \-\-list\-algorithms
-List supported crypto, compression, MAC and hostkey algorithms.
-.TP
-.B \-i, \-\-input\-format=\fIformat\fP
-Accept S-expressions of format \fIformat\fP.
-.TP
-.B \-\-daemonic
-Run in the background, redirect stdio to /dev/null, chdir to /.
-.TP
-.B \-\-enable\-core
-Dump core on fatal errors (disabled by default).
-.TP
-.B \-\-no\-daemonic
-Run in the foreground, with messages to stderr (default).
-.TP
-.B \-\-no\-pid\-file
-Don't use any pid file. Default in non-daemonic mode.
-.TP
-.B \-\-pid\-file=\fIpid\-file\fP
-Create pid file \fIpid\-file\fP. When running in daemonic mode, the default is
-/var/run/lsh_proxy.pid.
-.TP
-.B \-\-debug
-Print huge amounts of debug information.
-.TP
-.B \-q, \-\-quiet
-Suppress all warnings and diagnostic messages.
-.TP
-.B \-\-trace
-Print a detailed program trace.
-.TP
-.B \-\-verbose
-Print verbose diagnostic messages.
-.TP
-.B \-?, \-\-help
-Show summary of options.
-.TP
-.B \-\-usage
-Give a short usage message.
-.TP
-.B \-V, \-\-version
-Show version of program.
-.SH SEE ALSO
-.BR lsh (1).
-.BR lshd (8)
-.BR
-The programs are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Robert Bihlmeyer <robbe@orcus.priv.at>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-10/debian/mans/lsh-execuv.8
===================================================================
--- 2.1-10/debian/mans/lsh-execuv.8 (revision 147)
+++ 2.1-10/debian/mans/lsh-execuv.8 (nonexistent)
@@ -1,70 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH-EXECUV 8 "Jul 05 2002" lsh-execuv "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh-execuv \- program to securely execute a program as another user
-.SH SYNOPSIS
-.B lsh-execuv
-.RI [ options ] " program " [ -- ] " real-argv"
-.SH DESCRIPTION
-This manual page documents briefly the
-.B lsh-execuv
-command.
-This manual page was written for the Debian distribution
-because the original program does not have a manual page.
-.PP
-.\" TeX users may be more comfortable with the \fB<whatever>\fP and
-.\" \fI<whatever>\fP escape sequences to invode bold face and italics,
-.\" respectively.
-\fBlsh-execuv\fP is a utility program for the lsh server that securely executes
-a program as a different user.
-another user.
-.SH OPTIONS
-A summary of options is included below.
-.TP
-.B \-u \fIuid\fP
-setuid to numeric \fIuid\fP before running \fIprogram\fP. Usernames are
-not supported, only numeric uids.
-.TP
-.B \-g \fIgid\fP
-setgid to numeric \fIgid\fP before running \fIprogram\fP. Group names are
-not supported, only numeric gids.
-.TP
-.B \-n \fIuser-name\fP
-User name, needed for initgroups
-.TP
-.B \-i
-Call initgroups, requires that -n \fIuser-name\fP be specified.
-.TP
-.B \-c
-Clear the list of supplimentary groups.
-.TP
-.B \-p
-Use $PATH variable to search for program.
-.TP
-.B \-?
-Show summary of options.
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (8).
-.BR
-The programs are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-10/debian/mans/lsh-pam-checkpw.8
===================================================================
--- 2.1-10/debian/mans/lsh-pam-checkpw.8 (revision 147)
+++ 2.1-10/debian/mans/lsh-pam-checkpw.8 (nonexistent)
@@ -1,53 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH-PAM-CHECKPW 8 "Jul 05 2002" lsh-pam-checkpw "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh-pam-checkpw \- program to check a PAM username/password combination
-.SH SYNOPSIS
-.B lsh-pam-checkpw
-.RI username-to-check
-.SH DESCRIPTION
-This manual page documents briefly the
-.B lsh-pam-checkpw
-command.
-This manual page was written for the Debian distribution
-because the original program does not have a manual page.
-Instead, it has documentation in the GNU Info format; see below.
-.PP
-.\" TeX users may be more comfortable with the \fB<whatever>\fP and
-.\" \fI<whatever>\fP escape sequences to invode bold face and italics,
-.\" respectively.
-\fBlsh-pam-checkpw\fP is a program that checks if a username and password
-combination is valid for login by doing a PAM lookup. It is designed to be
-used as a password helper program for \fBlshd (8)\fP, (eg.
-\fB\-\-password\-helper=/usr/sbin/lsh-pam-checkpw\fP.
-.PP
-.B lsh-pam-checkpw
-takes one required argument, which is the username, and reads the password from
-stdin, then returns 0 if the password is valid, or 1 otherwise. Note that the
-password must be supplied exactly, ie. there must be no newline after the
-password, so if invoking from a shell, just type "<your-password><CTRL-D>".
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (8).
-.BR
-The programs are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-10/debian/mans/lsh-export-key.1
===================================================================
--- 2.1-10/debian/mans/lsh-export-key.1 (revision 147)
+++ 2.1-10/debian/mans/lsh-export-key.1 (nonexistent)
@@ -1,77 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH-EXPORT-KEY 1 "Apr 19, 2002" lsh-export-key "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh-export-key \- Converts an s-expression to the OpenSSH/SSH2 encoding format.
-.SH SYNOPSIS
-.B lsh-export-key
-.RI [ options ]
-.SH DESCRIPTION
-\fBlsh-export-key\fP is a utility which reads an s-expression on stdin,
-and writes the same s-expression to stdout, using the OpenSSH/SSH2
-encoding format.
-.SH OPTIONS
-These programs follow the usual GNU command line syntax, with long
-options starting with two dashes (`-').
-A summary of options is included below.
-.TP
-.B \-c, \-\-comment=\fIcomment\fP
-Adds \fIcomment\fP to output key as its comment
-.TP
-.B \-o, \-\-output\-file=\fIfilename\fP
-Write output key to \fIfilename\fP, default is stdout
-.TP
-.B \-r, \-\-input\-file=\fIfilename\fP
-Read input key from \fIfilename\fP, default is stdin
-.TP
-.B \-s, \-\-subject=\fIsubject\fP
-Adds \fIsubject\fP to the output key as its subject
-.TP
-.B \-\-debug
-Prints huge amounts of debug information
-.TP
-.B \-q, \-\-quiet
-Suppress all warnings and diagnostic messages
-.TP
-.B \-\-trace
-Detailed program trace
-.TP
-.B \-\-verbose
-verbose diagnostic messages
-.TP
-.B \-i, \-\-input\-format=\fIformat\fP
-Input is in the \fIformat\fP variant of s-expression syntax, \fIformat\fP must
-be one of "transport", "canonical", "advanced" or "international"
-.TP
-.B \-?, \-\-help
-Show summary of options
-.TP
-.B \-\-usage
-Prints a short usage message
-.TP
-.B \-V, \-\-version
-Prints the program version
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (8),
-.BR sexp-conv (1),
-.BR ssh-conv (1),
-.BR lsh-decode-key (1).
-.br
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-10/debian/mans/srp-gen.1
===================================================================
--- 2.1-10/debian/mans/srp-gen.1 (revision 147)
+++ 2.1-10/debian/mans/srp-gen.1 (nonexistent)
@@ -1,90 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH SRP-GEN 1 "Apr 10, 2002" srp-gen "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-srp-gen \- generate a password verifier for the SRP protocol.
-.SH SYNOPSIS
-.B srp-gen
-.RI [ options ]
-.SH DESCRIPTION
-This manual page documents briefly the
-.B srp-gen
-command.
-This manual page was written for the Debian GNU/Linux distribution
-because the original program does not have a manual page.
-Instead, it has documentation in the GNU Info format; see below.
-.PP
-.\" TeX users may be more comfortable with the \fB<whatever>\fP and
-.\" \fI<whatever>\fP escape sequences to invode bold face and italics,
-.\" respectively.
-\fBsrp-gen\fP is a program that generates a password verifier for the Secure
-Remote Password protocol. The password verifier should be stored as
-~/.lsh/srp-verifier on the target (remote) machine on which you want to
-authenticate using SRP.
-
-For more information about SRP, see the "srp" node of the "Getting started"
-section of the Lsh manual available via the info system.
-.SH OPTIONS
-This program follows the usual GNU command line syntax, with long
-options starting with two dashes (`-').
-A summary of options is included below.
-For a complete description, see the Info files.
-.TP
-.B \-l, \-\-user=\fIusername\fP
-User name.
-.TP
-.B \-o, \-\-output\-file=\fIfilename\fP
-The file to output to. Default is to output to stdout.
-.TP
-.B \-p, \-\-password=\fIpassword\fP
-The password to use.
-.TP
-.B \-\-debug
-Print lots of debug information.
-.TP
-.B \-q, \-\-quiet
-Suppress all warnings and diagnostic messages.
-.TP
-.B \-\-trace
-Detailed trace.
-.TP
-.B \-v, \-\-verbose
-Print verbose diagnostic messages.
-.TP
-.B \-f, \-\-output\-format=format
-The S-expression output format. Valid sexp formats are: transport, canonical,
-advanced and international.
-.TP
-.B \-?, \-\-help
-Show summary of options.
-.TP
-.B \-\-usage
-Show a short usage message.
-.TP
-.B \-V, \-\-version
-Show version of program.
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (1),
-.BR sexp-conv (1).
-.br
-The lsh programs (including this one) are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-10/debian/mans/lsh-krb-checkpw.8
===================================================================
--- 2.1-10/debian/mans/lsh-krb-checkpw.8 (revision 147)
+++ 2.1-10/debian/mans/lsh-krb-checkpw.8 (nonexistent)
@@ -1,53 +0,0 @@
-.\" Hey, EMACS: -*- nroff -*-
-.\" First parameter, NAME, should be all caps
-.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
-.\" other parameters are allowed: see man(7), man(1)
-.TH LSH-KRB-CHECKPW 8 "Nov 15 2005" lsh-krb-checkpw "lsh manuals"
-.\" Please adjust this date whenever revising the manpage.
-.\"
-.\" Some roff macros, for reference:
-.\" .nh disable hyphenation
-.\" .hy enable hyphenation
-.\" .ad l left justify
-.\" .ad b justify to both left and right margins
-.\" .nf disable filling
-.\" .fi enable filling
-.\" .br insert line break
-.\" .sp <n> insert n+1 empty lines
-.\" for manpage-specific macros, see man(7)
-.SH NAME
-lsh-krb-checkpw \- program to check a Kerberos username/password combination
-.SH SYNOPSIS
-.B lsh-krb-checkpw
-.RI username-to-check
-.SH DESCRIPTION
-This manual page documents briefly the
-.B lsh-krb-checkpw
-command.
-This manual page was written for the Debian distribution
-because the original program does not have a manual page.
-Instead, it has documentation in the GNU Info format; see below.
-.PP
-.\" TeX users may be more comfortable with the \fB<whatever>\fP and
-.\" \fI<whatever>\fP escape sequences to invode bold face and italics,
-.\" respectively.
-\fBlsh-krb-checkpw\fP is a program that checks if a username and password
-combination is valid for login by doing a kerberos lookup. It is designed to be
-used as a password helper program for \fBlshd (8)\fP, (eg.
-\fB\-\-password\-helper=/usr/sbin/lsh-krb-checkpw\fP.
-.PP
-.B lsh-krb-checkpw
-takes one required argument, which is the username, and reads the password from
-stdin, then returns 0 if the password is valid, or 1 otherwise. Note that the
-password must be supplied exactly, ie. there must be no newline after the
-password, so if invoking from a shell, just type "<your-password><CTRL-D>".
-.SH SEE ALSO
-.BR lsh (1),
-.BR lshd (8).
-.BR
-The programs are documented fully by
-.IR "Lsh" ,
-available via the Info system.
-.SH AUTHOR
-This manual page was written by Timshel Knoll <timshel@debian.org>,
-for the Debian GNU/Linux system (but may be used by others).
Index: 2.1-10/debian/lsh-server.install
===================================================================
--- 2.1-10/debian/lsh-server.install (revision 147)
+++ 2.1-10/debian/lsh-server.install (nonexistent)
@@ -1,5 +0,0 @@
-usr/sbin/lshd
-usr/sbin/lsh-execuv
-usr/sbin/lsh-krb-checkpw
-usr/sbin/lsh-pam-checkpw
-usr/sbin/sftp-server usr/lib/lsh-server
Index: 2.1-10/debian/source/lintian-overrides
===================================================================
--- 2.1-10/debian/source/lintian-overrides (revision 147)
+++ 2.1-10/debian/source/lintian-overrides (nonexistent)
@@ -1,6 +0,0 @@
-# Internet-draft by LSH author; may be used under free licenseas long
-# as IETF parts are deleted. Contrast with GFDL-licensed documents
-# with invariant sections, where the invariant sections may not be
-# removed.
-lsh-utils source: license-problem-non-free-RFC doc/srp-spec.nroff
-lsh-utils source: license-problem-non-free-RFC doc/srp-spec.txt
Index: 2.1-10/debian/source/format
===================================================================
--- 2.1-10/debian/source/format (revision 147)
+++ 2.1-10/debian/source/format (nonexistent)
@@ -1 +0,0 @@
-3.0 (quilt)
Index: 2.1-10/debian/lsh-doc.doc-base
===================================================================
--- 2.1-10/debian/lsh-doc.doc-base (revision 147)
+++ 2.1-10/debian/lsh-doc.doc-base (nonexistent)
@@ -1,13 +0,0 @@
-Document: lsh
-Title: LSH documentation
-Author: Niels Möller
-Abstract: This document describes `lsh' and related programs.
-Section: Network/Remote Access
-
-Format: HTML
-Index: /usr/share/doc/lsh-doc/lsh.html
-Files: /usr/share/doc/lsh-doc/lsh.html
-
-Format: Info
-Index: /usr/share/info/lsh.info.gz
-Files: /usr/share/info/lsh.info.gz
Index: 2.1-10/debian/watch
===================================================================
--- 2.1-10/debian/watch (revision 147)
+++ 2.1-10/debian/watch (nonexistent)
@@ -1,6 +0,0 @@
-# use the newest watch file format.
-version=3
-# Site+Directory Pattern Version Script
-ftp://ftp.gnu.org/gnu/lsh/lsh-(\d[^-]*)\.(?:tgz|tbz2|txz|tar\.(?:gz|bz2|xz))
-ftp://ftp.lysator.liu.se/pub/security/lsh/lsh-(\d[^-]*)\.(?:tgz|tbz2|txz|tar\.(?:gz|bz2|xz))
-http://www.lysator.liu.se/~nisse/archive/lsh-(\d[^-]*)\.(?:tgz|tbz2|txz|tar\.(?:gz|bz2|xz))
Index: 2.1-10/debian/lsh-client.install
===================================================================
--- 2.1-10/debian/lsh-client.install (revision 147)
+++ 2.1-10/debian/lsh-client.install (nonexistent)
@@ -1,4 +0,0 @@
-usr/bin/lsh
-usr/bin/lshg
-usr/bin/lcp
-usr/bin/lsftp
Index: 2.1-10/debian/copyright
===================================================================
--- 2.1-10/debian/copyright (revision 147)
+++ 2.1-10/debian/copyright (nonexistent)
@@ -1,49 +0,0 @@
-This package was debianized by Timshel Knoll <timshel@debian.org> on
-Thu, 25 May 2000 13:13:39 +1000. Package based on initial work by
-Robert Bihlmeyer <robbe@orcus.priv.at>
-
-It was downloaded from ftp://ftp.lysator.liu.se/pub/security/lsh/
-
-Upstream Authors: Niels Möller <nisse@lysator.liu.se>
- Balázs Scheidler
- Many others, too numerous to list here. See the file
- `/usr/share/doc/lsh-utils/AUTHORS' for a more complete list of
- the authors and licenses the of various lsh components.
-
-Copyright:
-
- Copyright (C) 1999 Niels Möller
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
-
-On Debian GNU/Linux systems, the complete text of the GNU General
-Public License can be found in `/usr/share/common-licenses/GPL'.
-
-Some of the components of lsh are licensed under the GNU Lesser
-General Public License (LGPL) which can be found (on Debian GNU
-systems) in the file `/usr/share/common-licenses/LGPL'
-
-Other components of lsh are from the public domain. For a more
-complete list of the authors and licenses of various components
-within lsh, see the file `/usr/share/doc/lsh-utils/AUTHORS'
-
-doc/srp-spec.nroff (and the plain doc/srp-spec.txt generated from the
-former) is an old IETF Internet draft written by Niels, and as such
-the actual text, from the abstract and up to and including the
-references can be assumed to be freely reusable, which should be good
-enough. Despite what the copyright notice says the IETF doesn't claim
-copyright to the contents of the draft, only the complete draft in its
-special form.
-
-The Debian patch debian/patches/blacklist.patch contains code from
-the openssh package, apparently written by Colin Watson (cjwatson) and
-released under a BSD license.
Index: 2.1-10/debian
===================================================================
--- 2.1-10/debian (revision 147)
+++ 2.1-10/debian (nonexistent)
/2.1-10/debian
Property changes:
Deleted: mergeWithUpstream
## -1 +0,0 ##
-1
\ No newline at end of property