notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
Port details
py-ssh-audit SSH server auditing
3.3.0 security on this many watch lists=3 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.2.0_1Version of this port present on the latest quarterly branch.
Maintainer: pkubaj@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2017-11-24 21:32:13
Last Update: 2024-10-16 13:21:06
Commit Hash: 15d639c
People watching this port, also watch:: isc-cron, cronic, monit, fusefs-sshfs, fusefs-unionfs
License: MIT
WWW:
https://github.com/jtesta/ssh-audit
Description:
ssh-audit is a tool for ssh server & client configuration auditing. Features: * SSH1 and SSH2 protocol server support; * analyze SSH client configuration; * grab banner, recognize device or software and operating system, detect compression; * gather key-exchange, host-key, encryption and message authentication code algorithms; * output algorithm information (available since, removed/disabled, unsafe/weak/legacy, etc); * output algorithm recommendations (append or remove based on recognized software version); * output security information (related issues, assigned CVE list, etc); * analyze SSH version compatibility based on algorithm information; * historical information from OpenSSH, Dropbear SSH and libssh; * no dependencies, compatible with Python 2.6+, Python 3.x and PyPy.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
There is no configure plist information for this port.
Dependency lines:
  • ${PYTHON_PKGNAMEPREFIX}ssh-audit>0:security/py-ssh-audit@${PY_FLAVOR}
To install the port:
cd /usr/ports/security/py-ssh-audit/ && make install clean
To add the package, run one of these commands:
  • pkg install security/py-ssh-audit
  • pkg install py311-ssh-audit
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
NOTE: This is a Python port. Instead of py311-ssh-audit listed in the above command, you can pick from the names under the Packages section.
PKGNAME: py311-ssh-audit
Package flavors (<flavor>: <package>)
  • py311: py311-ssh-audit
distinfo:
TIMESTAMP = 1729078924 SHA256 (jtesta-ssh-audit-v3.3.0_GH0.tar.gz) = e533c9ff2c1e655576b78a7732cdb01cf765e002716e5c086322ba4737c5e63b SIZE (jtesta-ssh-audit-v3.3.0_GH0.tar.gz) = 172808

Packages (timestamps in pop-ups are UTC):
py37-ssh-audit
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest--2.3.1_1---2.3.1_1-
FreeBSD:13:quarterly--------
FreeBSD:14:latest--------
FreeBSD:14:quarterly--------
FreeBSD:15:latest--n/a-n/a---
 
py39-ssh-audit
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest--------
FreeBSD:13:quarterly--2.9.0--3.1.03.1.03.1.0
FreeBSD:14:latest--2.5.0--2.9.0-2.9.0
FreeBSD:14:quarterly-----3.1.03.1.03.1.0
FreeBSD:15:latest--n/a-n/a3.1.0_13.1.0_13.1.0_1
 
py311-ssh-audit
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.3.03.3.0-3.3.03.3.0---
FreeBSD:13:quarterly3.2.0_13.2.0_1-3.2.0_13.2.0_1---
FreeBSD:14:latest3.3.03.3.0-3.3.03.3.0---
FreeBSD:14:quarterly3.2.0_13.2.0_1-3.2.0_13.2.0_1---
FreeBSD:15:latest3.3.03.3.0n/a3.3.0n/a---
 
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. py311-setuptools>0 : devel/py-setuptools@py311
  2. py311-wheel>0 : devel/py-wheel@py311
  3. python3.11 : lang/python311
  4. py311-build>=0 : devel/py-build@py311
  5. py311-installer>=0 : devel/py-installer@py311
Test dependencies:
  1. python3.11 : lang/python311
Runtime dependencies:
  1. python3.11 : lang/python311
There are no ports dependent upon this port

Configuration Options:
No options to configure
Options name:
security_py-ssh-audit
USES:
python
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://codeload.github.com/jtesta/ssh-audit/tar.gz/v3.3.0?dummy=/
Collapse this list.

Number of commits found: 27

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
3.3.0
16 Oct 2024 13:21:06
commit hash: 15d639c256c320b673d1484ae57fe6f9813752c6commit hash: 15d639c256c320b673d1484ae57fe6f9813752c6commit hash: 15d639c256c320b673d1484ae57fe6f9813752c6commit hash: 15d639c256c320b673d1484ae57fe6f9813752c6 files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: update to 3.3.0

Also remove whitespaces from pkg-plist.

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v3.3.0
3.2.0_1
16 Aug 2024 11:54:25
commit hash: f02e397c3be1c20d736e3412ca82f14ba14b9e8ccommit hash: f02e397c3be1c20d736e3412ca82f14ba14b9e8ccommit hash: f02e397c3be1c20d736e3412ca82f14ba14b9e8ccommit hash: f02e397c3be1c20d736e3412ca82f14ba14b9e8c files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: fix hang on runtime

PR:	280827
Submitted by:	michaelo
3.2.0
24 Apr 2024 21:21:20
commit hash: 21bd4414bb581b69dc27514ba019fda5a473a0a9commit hash: 21bd4414bb581b69dc27514ba019fda5a473a0a9commit hash: 21bd4414bb581b69dc27514ba019fda5a473a0a9commit hash: 21bd4414bb581b69dc27514ba019fda5a473a0a9 files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: update to 3.2.0

Also switch to static pkg-plist.

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v3.2.0
3.1.0_1
21 Jan 2024 22:51:33
commit hash: 149c91b1a1e6184339275756426d8b6b75df226acommit hash: 149c91b1a1e6184339275756426d8b6b75df226acommit hash: 149c91b1a1e6184339275756426d8b6b75df226acommit hash: 149c91b1a1e6184339275756426d8b6b75df226a files touched by this commit
Muhammad Moinur Rahman (bofh) search for other commits by this committer
security/py-ssh-audit: Sanitize MANPREFIX

Approved by:    portmgr (blanket)
3.1.0
21 Dec 2023 22:01:31
commit hash: 2a93e8e5b3b160fa9cc99bb5bd2dd688b02fda44commit hash: 2a93e8e5b3b160fa9cc99bb5bd2dd688b02fda44commit hash: 2a93e8e5b3b160fa9cc99bb5bd2dd688b02fda44commit hash: 2a93e8e5b3b160fa9cc99bb5bd2dd688b02fda44 files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: update to 3.1.0

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v3.1.0
3.0.0_1
09 Nov 2023 08:39:51
commit hash: bd9b8f1f0dcda0b05616e3b7b9011896ea4d0f5ccommit hash: bd9b8f1f0dcda0b05616e3b7b9011896ea4d0f5ccommit hash: bd9b8f1f0dcda0b05616e3b7b9011896ea4d0f5ccommit hash: bd9b8f1f0dcda0b05616e3b7b9011896ea4d0f5c files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: add manpage

PR:	274842
Reported by:	dclarke@blastwave.org
3.0.0
09 Sep 2023 13:41:21
commit hash: 17be6f8d916717ff85175dd159efd2083a984336commit hash: 17be6f8d916717ff85175dd159efd2083a984336commit hash: 17be6f8d916717ff85175dd159efd2083a984336commit hash: 17be6f8d916717ff85175dd159efd2083a984336 files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: update to 3.0.0

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v3.0.0
2.9.0
27 Jun 2023 19:34:34
commit hash: 3d9a815d9c5acbb71f4bb07738bdeab4879feacbcommit hash: 3d9a815d9c5acbb71f4bb07738bdeab4879feacbcommit hash: 3d9a815d9c5acbb71f4bb07738bdeab4879feacbcommit hash: 3d9a815d9c5acbb71f4bb07738bdeab4879feacb files touched by this commit
Rene Ladan (rene) search for other commits by this committer
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
2.9.0
09 May 2023 19:54:34
commit hash: 31bd18843c8e04f115eed8bd166f9364847ae94acommit hash: 31bd18843c8e04f115eed8bd166f9364847ae94acommit hash: 31bd18843c8e04f115eed8bd166f9364847ae94acommit hash: 31bd18843c8e04f115eed8bd166f9364847ae94a files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: fix build

py-setuptools was missing.
2.9.0
06 May 2023 09:09:59
commit hash: 805ba670c727f370b9bf142e29d0a5048b6baf56commit hash: 805ba670c727f370b9bf142e29d0a5048b6baf56commit hash: 805ba670c727f370b9bf142e29d0a5048b6baf56commit hash: 805ba670c727f370b9bf142e29d0a5048b6baf56 files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: switch to USE_PYTHON=pep517
2.9.0
01 May 2023 09:15:01
commit hash: b7aa703943af3c765f642a15079989d7754802bbcommit hash: b7aa703943af3c765f642a15079989d7754802bbcommit hash: b7aa703943af3c765f642a15079989d7754802bbcommit hash: b7aa703943af3c765f642a15079989d7754802bb files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: update to 2.9.0

Changelog:	https://github.com/jtesta/ssh-audit/releases/tag/v2.9.0
07 Sep 2022 21:58:51
commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4 files touched by this commit
Stefan Eßer (se) search for other commits by this committer
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
2.5.0
07 Sep 2022 21:10:59
commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52 files touched by this commit
Stefan Eßer (se) search for other commits by this committer
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
2.5.0
27 Aug 2021 15:00:39
commit hash: edc1905c1243d4679895f6bfc2998ca9ab37e5becommit hash: edc1905c1243d4679895f6bfc2998ca9ab37e5becommit hash: edc1905c1243d4679895f6bfc2998ca9ab37e5becommit hash: edc1905c1243d4679895f6bfc2998ca9ab37e5be files touched by this commit
Piotr Kubaj (pkubaj) search for other commits by this committer
security/py-ssh-audit: update to 2.5.0

Changelog:
* Fixed crash when running host key tests.
* Handles server connection failures more gracefully.
* Now prints JSON with indents when -jj is used (useful for debugging).
* Added MD5 fingerprints to verbose output.
* Added -d/--debug option for getting debugging output; credit Adam Russell.
* Updated JSON output to include MD5 fingerprints. Note that this results in a
breaking change in the 'fingerprints' dictionary format.
* Updated OpenSSH 8.1 (and earlier) policies to include rsa-sha2-512 and
rsa-sha2-256.
* Added OpenSSH v8.6 & v8.7 policies.
* Added 3 new key exchanges: gss-gex-sha1-eipGX3TCiQSrx573bT1o1Q==,
gss-group1-sha1-eipGX3TCiQSrx573bT1o1Q==, and
gss-group14-sha1-eipGX3TCiQSrx573bT1o1Q==.
* Added 3 new MACs: hmac-ripemd160-96, AEAD_AES_128_GCM, and AEAD_AES_256_GCM.
2.4.0
07 Apr 2021 08:09:01
commit hash: cf118ccf875508b9a1c570044c93cfcc82bd455ccommit hash: cf118ccf875508b9a1c570044c93cfcc82bd455ccommit hash: cf118ccf875508b9a1c570044c93cfcc82bd455ccommit hash: cf118ccf875508b9a1c570044c93cfcc82bd455c files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
One more small cleanup, forgotten yesterday.
Reported by:	lwhsu
2.4.0
06 Apr 2021 14:31:07
commit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344eb files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
Remove # $FreeBSD$ from Makefiles.
2.4.0
24 Feb 2021 02:34:02
Revision:566445Original commit files touched by this commit
pkubaj search for other commits by this committer
security/py-ssh-audit: update to 2.4.0

Changelog:
 - Added multi-threaded scanning support.
 - Added built-in Windows manual page (see `-m`/`--manual`); credit [Adam
Russell](https://github.com/thecliguy).
 - Added version check for OpenSSH user enumeration (CVE-2018-15473).
 - Added deprecation note to host key types based on SHA-1.
 - Added extra warnings for SSHv1.
 - Added built-in hardened OpenSSH v8.5 policy.
 - Upgraded warnings to failures for host key types based on SHA-1.
 - Fixed crash when receiving unexpected response during host key test.
 - Fixed hang against older Cisco devices during host key test & gex test.
 - Fixed improper termination while scanning multiple targets when one target
returns an error.
 - Dropped support for Python 3.5 (which reached EOL in Sept. 2020).
 - Added 1 new key exchange: `sntrup761x25519-sha512@openssh.com`.
2.3.1_1
28 Dec 2020 23:02:15
Revision:559531Original commit files touched by this commit
antoine search for other commits by this committer
Drop python 2.7 support from a few ports

With hat:	portmgr
11 Nov 2020 14:18:41
Revision:554898Original commit files touched by this commit Refresh
pkubaj search for other commits by this committer
security/py-ssh-audit: more fixes
2.3.1_1
11 Nov 2020 13:48:34
Revision:554896Original commit files touched by this commit
pkubaj search for other commits by this committer
security/py-ssh-audit: fix run-time

Traceback (most recent call last):
  File "/usr/local/bin/ssh-audit", line 10, in <module>
    from ssh_audit.ssh_audit import main  # noqa: E402
ModuleNotFoundError: No module named 'ssh_audit'
2.3.1
30 Oct 2020 11:56:09
Revision:553686Original commit files touched by this commit
pkubaj search for other commits by this committer
security/py-ssh-audit: update to 2.3.1

Changelog:
- Now parses public key sizes for rsa-sha2-256-cert-v01@openssh.com and
rsa-sha2-512-cert-v01@openssh.com host key types.
- Flag ssh-rsa-cert-v01@openssh.com as a failure due to SHA-1 hash.
- Fixed bug in recommendation output which suppressed some algorithms
inappropriately.
- Built-in policies now include CA key requirements (if certificates are in
use).
- Lookup function (--lookup) now performs case-insensitive lookups of similar
algorithms; credit Adam Russell.
- Migrated pre-made policies from external files to internal database.
- Split single 3,500 line script into many files (by class).
- Added setup.py support; credit Ganden Schaffner.
- Added 1 new cipher: des-cbc@ssh.com.
2.3.0
28 Sep 2020 22:02:10
Revision:550457Original commit files touched by this commit
pkubaj search for other commits by this committer
security/py-ssh-audit: update to 2.3.0

Changelog:
https://github.com/jtesta/ssh-audit/releases/tag/v2.3.0
2.2.0
05 Jun 2020 12:00:04
Revision:538011Original commit files touched by this commit
pkubaj search for other commits by this committer
security/py-ssh-audit: fix pkg-descr

Move website to the fork that we use, add descriptions of new features from
README.md.
2.2.0
12 Mar 2020 08:39:59
Revision:528274Original commit files touched by this commit
pkubaj search for other commits by this committer
security/py-ssh-audit: update to 2.2.0
2.1.1
06 Jan 2020 12:49:49
Revision:522220Original commit files touched by this commit
pkubaj search for other commits by this committer
security/py-ssh-audit: while here, update maintainer to my @FreeBSD.org address
2.1.1
06 Jan 2020 12:49:09
Revision:522219Original commit files touched by this commit
pkubaj search for other commits by this committer
security/py-ssh-audit: update to 2.1.1, switch to a fork

The original author went MIA, there are many improvements in the fork.

PR:		242408
Submitted by:	ehaupt
1.7.0
24 Nov 2017 21:32:05
Revision:454849Original commit files touched by this commit
yuri search for other commits by this committer
New port: security/py-ssh-audit: SSH server auditing

PR:		223810
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D13207

Number of commits found: 27