[ 19:25 Bryan Drewery (bdrewery)  ]

• ae66cffc19f357cbd51d5841c9b110a9ffd63e32 security/openssh-portable/Makefile
• ae66cffc19f357cbd51d5841c9b110a9ffd63e32 security/openssh-portable/distinfo
• ae66cffc19f357cbd51d5841c9b110a9ffd63e32 security/openssh-portable/files/extra-patch-gssapi-auth2-gss.c
• ae66cffc19f357cbd51d5841c9b110a9ffd63e32 security/openssh-portable/files/extra-patch-gssapi-sshconnect2.c
• ae66cffc19f357cbd51d5841c9b110a9ffd63e32 security/openssh-portable/files/extra-patch-hpn
• ae66cffc19f357cbd51d5841c9b110a9ffd63e32 security/openssh-portable/files/extra-patch-tcpwrappers
• ae66cffc19f357cbd51d5841c9b110a9ffd63e32 security/openssh-portable/files/openssh.in
• ae66cffc19f357cbd51d5841c9b110a9ffd63e32 security/openssh-portable/files/patch-platform-tracing.c
• ae66cffc19f357cbd51d5841c9b110a9ffd63e32 security/openssh-portable/files/patch-ssh-agent.c

security/openssh-portable: Update to 8.9p1

- Unbreak GSSAPI [1]
- rc.d/openssh: Allow modifying host key generation [2]

Changes: https://www.openssh.com/txt/release-8.9
PR:     	259909 [1]
PR:		202169 [2]
Submitted by:	Rick Miller [1]
Submitted by:	Chad Jacob Milios [2]

[ 03:41 bdrewery  ]

• 555734 security/openssh-portable/Makefile
• 555734 security/openssh-portable/files/extra-patch-gssapi-sshconnect2.c
• 555734 security/openssh-portable/files/extra-patch-libfido2-configure.ac
• 555734 security/openssh-portable/files/patch-session.c

- Add pkg-config dependency which avoids some maintainer testing errors
  and also removes a few unneeded library links such as -lcurses.
- libfido2 package is broken with pkg-config and base ssl. Workaround this
  by not using pkg-config for that library for now.
- Add USES=localbase to simplify some options
- Make crypt(3) MD5 password support optional but still on-by-default.  The
  default in FreeBSD changed in 10.0 but that does not mean
- Enable -Werror
- Remove some old baggage from the port build
 o The zlib version check has not been needed for a while.
 o sshd.8 has not had %%PREFIX%% or %$RC_SCRIPT_NAME%% since 2011
   and is not worth more patches/complexity.
 o The strnvis(3) problem noted in r311891 was fixed in OpenSSH 7.4.
 o autoreconf is run so it makes no sense to patch configure for -ldes
 o --with-md5-passwords is not needed as our crypt(3) supports it
   natively.  This is only relevant without PAM.