SPECS: openssh.spec - adds hpn and hpn_none "with" bconds (patches...

[mguevara]

Author: mguevara                     Date: Mon Oct 31 09:41:22 2005 GMT
Module: SPECS                         Tag: HEAD
---- Log message:
- adds hpn and hpn_none "with" bconds (patches 11 and 12).

---- Files affected:
SPECS:
   openssh.spec (1.240 -> 1.241) 

---- Diffs:

================================================================
Index: SPECS/openssh.spec
diff -u SPECS/openssh.spec:1.240 SPECS/openssh.spec:1.241
--- SPECS/openssh.spec:1.240	Thu Oct 13 08:28:39 2005
+++ SPECS/openssh.spec	Mon Oct 31 10:41:16 2005
@@ -9,7 +9,12 @@
 %bcond_without	kerberos5	# without kerberos5 support
 %bcond_without	selinux		# build without SELinux support
 %bcond_with	sshagentsh	# with system-wide script for starting ssh-agent
+%bcond_with	hpn		# with High Performance SSH/SCP - HPN-SSH (see patch comment)
+%bcond_with	hpn_none	# with hpn (above) and '-z' none cipher option
 #
+%if %{with hpn_none}
+%undefine       with_hpn
+%endif
 # gtk2-based gnome-askpass means no gnome1-based
 %{?with_gtk:%undefine with_gnome}
 Summary:	OpenSSH free Secure Shell (SSH) implementation
@@ -24,7 +29,7 @@
 Summary(uk):	OpenSSH - ׌ĚŘÎÁ ŇĹÁĚŚÚÁĂŚŃ ĐŇĎÔĎËĎĚŐ Secure Shell (SSH)
 Name:		openssh
 Version:	4.2p1
-Release:	5
+Release:	5%{?with_hpn:hpn}%{?with_hpn_none:hpn_none}
 Epoch:		2
 License:	BSD
 Group:		Applications/Networking
@@ -56,6 +61,12 @@
 Patch8:		%{name}-chroot.patch
 Patch9:		%{name}-selinux.patch
 Patch10:	%{name}-selinux-pld.patch
+# High Performance SSH/SCP - HPN-SSH - http://www.psc.edu/networking/projects/hpn-ssh/ 
+# http://www.psc.edu/networking/projects/hpn-ssh/openssh-4.2p1-hpn11.diff
+Patch11:	%{name}-4.2p1-hpn11.patch
+# Adds HPN (see p11) and an undocumented -z none cipher flag
+# http://www.psc.edu/networking/projects/hpn-ssh/openssh-4.2p1-hpn11-none.diff
+Patch12:	%{name}-4.2p1-hpn11-none.patch
 URL:		http://www.openssh.com/
 BuildRequires:	autoconf
 BuildRequires:	automake
@@ -95,6 +106,22 @@
 This package includes the core files necessary for both the OpenSSH
 client and server. To make this package useful, you should also
 install openssh-clients, openssh-server, or both.
+%if %{with hpn} || %{with hpn_none}
+This release includes High Performance SSH/SCP patches from 
+http://www.psc.edu/networking/projects/hpn-ssh/ which are supposed 
+to increase throughput on fast connections with high RTT (20-150 msec).
+See the website for '-w' values for your connection and /proc/sys TCP
+values. BTW. in a LAN you have got generally RTT < 1 msec.
+%endif
+%if %{with hpn_none}
+It also includes an undocumented '-z' option which switches
+the cipher to none after authentication is completed. Data is 
+still secured from tampering and corruption in transit through 
+the use of the Message Authentication Code (MAC).
+This option will significantly reduce the number of cpu cycles used 
+by the SSH/SCP process. This may allow some users to see significant 
+improvement in (sniffable) data tranfer rates. 
+%endif
 
 %description -l de
 OpenSSH (Secure Shell) stellt den Zugang zu anderen Rechnern her. Es
@@ -143,6 +170,23 @@
 Ten pakiet zawiera podstawowe pliki potrzebne zarówno po stronie
 klienta jak i serwera OpenSSH. Aby był użyteczny, trzeba zainstalować
 co najmniej jeden z pakietów: openssh-clients lub openssh-server.
+%if %{with hpn} || %{with hpn_none}
+Ta wersja zawiera łaty z projektu High Performance SSH/SCP 
+http://www.psc.edu/networking/projects/hpn-ssh/, które mają na celu
+zwiększenie przepustowości transmisji dla szybkich połączeń 
+z dużym RTT (20-150 msec). Na stronie projektu znaleźć można 
+odpowednie dla danego połączenia wartości parametru '-w' oraz 
+opcje /proc/sys dla TCP. Nawiasem mówiąc w sieciach LAN RTT < 1 msec.  
+%endif
+%if %{with hpn_none}
+Obsługiwana jest również nieudokumentowana opcja '-z' odpowiedzialna
+za wyłączenie szyfrowania danych po zakończeniu procesu uwierzytelniania.
+Dane są zabezpieczone przed modyfikacją lub uszkodzeniem przez 
+stosowanie Message Authentication Code (MAC).
+Opcja ta znacznie redukuje liczbę cykli procesora zużywanych przez 
+procesy SSH/SCP. W wybranych zastosowaniach może ona wpłynąć 
+na wyraźne przyspieszenie (podsłuchiwalnej) transmisji danych. 
+%endif
 
 %description -l pt
 OpenSSH (Secure Shell) fornece acesso a um sistema remoto. Substitui o
@@ -416,6 +460,8 @@
 %patch8 -p1
 %{?with_selinux:%patch9 -p1}
 %{?with_selinux:%patch10 -p1}
+%{?with_hpn:%patch11 -p1}
+%{?with_hpn_none:%patch12 -p1}
 
 %build
 cp %{_datadir}/automake/config.sub .
@@ -614,6 +660,9 @@
 All persons listed below can be reached at <cvs_login>@pld-linux.org
 
 $Log$
+Revision 1.241  2005/10/31 09:41:16  mguevara
+- adds hpn and hpn_none "with" bconds (patches 11 and 12).
+
 Revision 1.240  2005/10/13 06:28:39  arekm
 - rel 5; revert openssl req (signle package in ready was broken)
 
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/SPECS/openssh.spec?r1=1.240&r2=1.241&f=u