mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-10 11:05:54 +02:00
3a6784c065
Previous we had not configured it so the ssh default order was used. Now we define it to disable dsa so we had to give the correct order but in the example cfg rsa is prefered. Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
101 lines
4.4 KiB
Plaintext
101 lines
4.4 KiB
Plaintext
###############################################################################
|
|
# #
|
|
# IPFire.org - A linux based firewall #
|
|
# Copyright (C) 2007-2015 IPFire Team <info@ipfire.org> #
|
|
# #
|
|
# This program is free software: you can redistribute it and/or modify #
|
|
# it under the terms of the GNU General Public License as published by #
|
|
# the Free Software Foundation, either version 3 of the License, or #
|
|
# (at your option) any later version. #
|
|
# #
|
|
# This program is distributed in the hope that it will be useful, #
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
|
|
# GNU General Public License for more details. #
|
|
# #
|
|
# You should have received a copy of the GNU General Public License #
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
|
|
# #
|
|
###############################################################################
|
|
|
|
###############################################################################
|
|
# Definitions
|
|
###############################################################################
|
|
|
|
include Config
|
|
|
|
VER = 7.1p1
|
|
|
|
THISAPP = openssh-$(VER)
|
|
DL_FILE = $(THISAPP).tar.gz
|
|
DL_FROM = $(URL_IPFIRE)
|
|
DIR_APP = $(DIR_SRC)/$(THISAPP)
|
|
TARGET = $(DIR_INFO)/$(THISAPP)
|
|
|
|
###############################################################################
|
|
# Top-level Rules
|
|
###############################################################################
|
|
|
|
objects = $(DL_FILE)
|
|
|
|
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
|
|
|
|
$(DL_FILE)_MD5 = 8709736bc8a8c253bc4eeb4829888ca5
|
|
|
|
install : $(TARGET)
|
|
|
|
check : $(patsubst %,$(DIR_CHK)/%,$(objects))
|
|
|
|
download :$(patsubst %,$(DIR_DL)/%,$(objects))
|
|
|
|
md5 : $(subst %,%_MD5,$(objects))
|
|
|
|
###############################################################################
|
|
# Downloading, checking, md5sum
|
|
###############################################################################
|
|
|
|
$(patsubst %,$(DIR_CHK)/%,$(objects)) :
|
|
@$(CHECK)
|
|
|
|
$(patsubst %,$(DIR_DL)/%,$(objects)) :
|
|
@$(LOAD)
|
|
|
|
$(subst %,%_MD5,$(objects)) :
|
|
@$(MD5)
|
|
|
|
###############################################################################
|
|
# Installation Details
|
|
###############################################################################
|
|
|
|
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
|
|
@$(PREBUILD)
|
|
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
|
|
cd $(DIR_APP) && sed -i "s/lkrb5 -ldes/lkrb5/" configure
|
|
cd $(DIR_APP) && ./configure --prefix=/usr --sysconfdir=/etc/ssh \
|
|
--libexecdir=/usr/lib/openssh --with-md5-passwords \
|
|
--with-privsep-path=/var/empty --disable-nls \
|
|
--with-superuser-path=/sbin:/usr/sbin:/bin:/usr/bin
|
|
cd $(DIR_APP) && make $(MAKETUNING)
|
|
cd $(DIR_APP) && make install
|
|
sed -i -e 's/^#\?Port .*$$/Port 222/' \
|
|
-e 's/^#\?Protocol .*$$/Protocol 2/' \
|
|
-e 's/^#\?LoginGraceTime .*$$/LoginGraceTime 30s/' \
|
|
-e 's/^#\?RSAAuthentication .*$$/RSAAuthentication yes/' \
|
|
-e 's/^#\?PubkeyAuthentication .*$$/PubkeyAuthentication yes/' \
|
|
-e 's/^#\?PasswordAuthentication .*$$/PasswordAuthentication yes/' \
|
|
-e 's/^#\?MaxStartups .*$$/MaxStartups 5/' \
|
|
-e 's/^#\?IgnoreUserKnownHosts .*$$/IgnoreUserKnownHosts yes/' \
|
|
-e 's/^#\?UsePAM .*$$//' \
|
|
-e 's/^#\?X11Forwarding .*$$/X11Forwarding no/' \
|
|
-e 's/^#\?SyslogFacility AUTH .*$$/SyslogFacility AUTH/' \
|
|
-e 's/^#\?LogLevel INFO .*$$/LogLevel INFO/' \
|
|
-e 's/^#\?AllowTcpForwarding .*$$/AllowTcpForwarding no/' \
|
|
-e 's/^#\?PermitRootLogin .*$$/PermitRootLogin yes/' \
|
|
-e 's|^#\?HostKey /etc/ssh/ssh_host_dsa_key$$||' \
|
|
-e 's|^#\?HostKey /etc/ssh/ssh_host_ecdsa_key$$||' \
|
|
-e 's|^#\?HostKey /etc/ssh/ssh_host_ed25519_key$$||' \
|
|
-e 's|^#\?HostKey /etc/ssh/ssh_host_rsa_key$$|HostKey /etc/ssh/ssh_host_ecdsa_key\nHostKey /etc/ssh/ssh_host_ed25519_key\nHostKey /etc/ssh/ssh_host_rsa_key|' \
|
|
/etc/ssh/sshd_config
|
|
@rm -rf $(DIR_APP)
|
|
@$(POSTBUILD)
|