openssh.git -

Age	Commit message (Collapse)	Author
2017-04-22	Fix purge failure when /etc/ssh has already somehow been removed (LP: #1682817).	Colin Watson

2016-12-26	Start handling /etc/ssh/sshd_config using ucf.	Colin Watson
	* Start handling /etc/ssh/sshd_config using ucf. The immediate motivation for this is to deal with deprecations of options related to protocol 1, but something like this has been needed for a long time (closes: #419574, #848089): - sshd_config is now a slightly-patched version of upstream's, and only contains non-default settings (closes: #147201). - I've included as many historical md5sums of default versions of sshd_config as I could reconstruct from version control, but I'm sure I've missed some. - Explicitly synchronise the debconf database with the current configuration file state in openssh-server.config, to ensure that the PermitRootLogin setting is properly preserved. - UsePrivilegeSeparation now defaults to the stronger "sandbox" rather than "yes", per upstream.
2014-02-10	Generate ED25519 host keys on fresh installations.	Colin Watson
	Upgraders who wish to add such host keys should manually add 'HostKey /etc/ssh/ssh_host_ed25519_key' to /etc/ssh/sshd_config and run 'ssh-keygen -q -f /etc/ssh/ssh_host_ed25519_key -N "" -t ed25519'.
2013-06-13	Use 'set -e' rather than '#! /bin/sh -e' in maintainer scripts and	Colin Watson
	ssh-argv0.
2013-05-22	Switch to new unified layout for Upstart jobs as documented in	Colin Watson
	https://wiki.ubuntu.com/UpstartCompatibleInitScripts: the init script checks for a running Upstart, and we now let dh_installinit handle most of the heavy lifting in maintainer scripts. Ubuntu users should be essentially unaffected except that sshd may no longer start automatically in chroots if the running Upstart predates 0.9.0; but the main goal is simply not to break when openssh-server is installed in a chroot.
2013-05-22	Replace old manual conffile handling code with dpkg-maintscript-helper,	Colin Watson
	via dh_installdeb.
2013-05-21	Drop conffile handling for upgrades from pre-split ssh package; this was	Colin Watson
	originally added in 1:4.3p2-7 / 1:4.3p2-8, and contained a truly ghastly hack around a misbehaviour in sarge's dpkg. Since this is now four Debian releases ago, we can afford to drop this and simplify the packaging.
2011-01-24	Generate ECDSA host keys. These will only be used on fresh	Colin Watson
	installations or if you manually add 'HostKey /etc/ssh/ssh_host_ecdsa_key' to /etc/ssh/sshd_config.
2009-07-31	Use 'which' rather than 'type' in maintainer scripts.	Colin Watson

2008-02-08	* Move /etc/pam.d/ssh to /etc/pam.d/sshd, allowing us to stop defining	Colin Watson
	SSHD_PAM_SERVICE (closes: #255870).
2007-12-03	* Check whether deluser exists in postrm (closes: #454085).	Colin Watson

2006-12-06	* When installing openssh-client or openssh-server from scratch, remove	Colin Watson
	any unchanged conffiles from the pre-split ssh package to work around a bug in sarge's dpkg (thanks, Justin Pryzby and others; closes: #335276).
2004-08-02	Remove /etc/ssh/sshd_not_to_be_run on purge of openssh-server. For now	Colin Watson
	(until sarge+2) it's still honoured to avoid breaking existing configurations, but the right approach is now to remove the openssh-server package if you don't want to run the server. Add a NEWS item to that effect.
2004-07-31	* Split the ssh binary package into openssh-client and openssh-server	Colin Watson
	(closes: #39741). openssh-server depends on openssh-client for some common functionality; it didn't seem worth creating yet another package for this. * New transitional ssh package, depending on openssh-client and openssh-server. May be removed once nothing depends on it. * When upgrading from ssh to openssh-{client,server}, it's very difficult for the maintainer scripts to find out what version we're upgrading from without dodgy dpkg hackery. I've therefore taken the opportunity to move a couple of debconf notes into NEWS files, namely ssh/ssh2_keys_merged and ssh/user_environment_tell. * In general, upgrading to this version directly from woody without first upgrading to the version in sarge is not currently guaranteed to work very smoothly due to the aforementioned version discovery problems.