[Bug 250559] security/openssh-portable: support self-generated moduli in opensshd-portable

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250559

            Bug ID: 250559
           Summary: security/openssh-portable: support self-generated
                    moduli in opensshd-portable
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://mastodon.social/@mpts/105044922334515993
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: bdrewery at FreeBSD.org
          Reporter: rysiek at isnic.is
             Flags: maintainer-feedback?(bdrewery at FreeBSD.org)
          Assignee: bdrewery at FreeBSD.org

Created attachment 219000
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=219000&action=edit
the moduli.sample patch

Currently , if the moduli file is self-generated, pkg complains about the file
having been changed:

[root at abox /etc]# pkg check -s openssh-portable
Checking openssh-portable:   0%
openssh-portable-8.2.p1_1,1: checksum mismatch for /usr/local/etc/ssh/moduli
Checking openssh-portable: 100%

The patch installs the moduli file as `/usr/local/etc/ssh/moduli.sample`
instead, and symlinks it as `/usr/local/etc/ssh/moduli`. the `moduli.sample` is
added to `pkg-plist`, but `moduli` is not -- making it possible to
self-generate a moduli file without having pkg complain about checksum mismatch
for it.

This is a bit improved version of a patch created by @mpts here:
https://mastodon.social/@mpts/105044922334515993
(credit where credit's due)

-- 
You are receiving this mail because:
You are the assignee for the bug.