2000-02-02 09:56:20 +00:00
|
|
|
[ A Japanese translation of this document is available at
|
|
|
|
|
[ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html
|
|
|
|
|
[ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
|
|
|
|
|
|
2000-03-07 11:40:57 +00:00
|
|
|
******* IMPORTANT
|
|
|
|
|
* On systmes which lack a /dev/random driver, this port of
|
|
|
|
|
* OpenSSH-1.2.2 was not correctly seeding OpenSSL's random number
|
|
|
|
|
* pool. This resulted in lower quality RSA keys being generated. If
|
|
|
|
|
* you generated host or user keys with v1.2.2, please generate new
|
|
|
|
|
* ones using a more recent version.
|
|
|
|
|
|
1999-11-18 20:56:21 +00:00
|
|
|
This is the port of OpenBSD's excellent OpenSSH to Linux and other
|
|
|
|
|
Unices.
|
1999-10-27 03:42:43 +00:00
|
|
|
|
1999-10-30 01:30:35 +00:00
|
|
|
OpenSSH is based on the last free version of Tatu Ylonen's SSH with
|
2000-01-06 09:28:41 +00:00
|
|
|
all patent-encumbered algorithms removed (to external libraries), all
|
|
|
|
|
known security bugs fixed, new features reintroduced and many other
|
|
|
|
|
clean-ups. More information about SSH itself can be found in the file
|
|
|
|
|
README.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck,
|
|
|
|
|
Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a
|
|
|
|
|
homepage at http://www.openssh.com/
|
1999-10-27 03:42:43 +00:00
|
|
|
|
1999-11-10 23:50:04 +00:00
|
|
|
This port consists of the re-introduction of autoconf support, PAM
|
2000-01-06 09:28:41 +00:00
|
|
|
support (for Linux and Solaris), EGD[1] support, SOCKS support (using
|
|
|
|
|
the Dante [6] libraries and replacements for OpenBSD library functions
|
|
|
|
|
that are (regrettably) absent from other unices. This port has been
|
|
|
|
|
best tested on Linux, Solaris, HPUX, NetBSD and Irix. Support for AIX,
|
|
|
|
|
SCO, NeXT and other Unices is underway. This version actively tracks
|
|
|
|
|
changes in the OpenBSD CVS repository.
|
1999-10-27 03:42:43 +00:00
|
|
|
|
1999-10-30 01:30:35 +00:00
|
|
|
The PAM support is now more functional than the popular packages of
|
|
|
|
|
commercial ssh-1.2.x. It checks "account" and "session" modules for
|
1999-11-12 05:06:47 +00:00
|
|
|
all logins, not just when using password authentication.
|
1999-10-27 03:42:43 +00:00
|
|
|
|
1999-10-30 01:30:35 +00:00
|
|
|
All new code is released under a XFree style license, which is very
|
1999-11-09 04:03:01 +00:00
|
|
|
liberal. Please refer to the source files for details. The code in
|
1999-11-19 04:32:34 +00:00
|
|
|
bsd-*.[ch] is from the OpenBSD project and has its own license (again,
|
|
|
|
|
see the source files for details).
|
1999-11-09 04:03:01 +00:00
|
|
|
|
1999-12-30 04:50:54 +00:00
|
|
|
OpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4] and
|
|
|
|
|
Dante[6]. To build the GNOME[5] pass-phrase requester
|
|
|
|
|
(--with-gnome-askpass), you will need the GNOME libraries installed.
|
|
|
|
|
If you are building OpenSSH on a Unix which lacks a kernel random
|
|
|
|
|
number pool (/dev/random), you will need to install EGD[1].
|
1999-11-09 04:03:01 +00:00
|
|
|
|
2000-01-06 09:28:41 +00:00
|
|
|
There is now several mailing lists for this port of OpenSSH. Please
|
|
|
|
|
refer to http://violet.ibs.com.au/openssh/list.html for details on how
|
|
|
|
|
to join.
|
1999-11-12 03:11:10 +00:00
|
|
|
|
2000-01-06 09:28:41 +00:00
|
|
|
Please send bug reports and patches to the mailing list
|
|
|
|
|
openssh-unix-dev@mindrot.org. The list is currently open to posting by
|
|
|
|
|
unsubscribed users.
|
1999-12-14 04:43:03 +00:00
|
|
|
|
1999-11-12 03:35:58 +00:00
|
|
|
Please refer to the INSTALL document for information on how to install
|
2000-01-06 09:28:41 +00:00
|
|
|
OpenSSH on your system. The UPGRADING document details differences
|
|
|
|
|
between this port of OpenSSH and F-Secure SSH 1.x.
|
1999-11-12 05:06:47 +00:00
|
|
|
|
1999-10-30 01:30:35 +00:00
|
|
|
Damien Miller <djm@ibs.com.au>
|
|
|
|
|
Internet Business Solutions
|
1999-10-27 03:42:43 +00:00
|
|
|
|
1999-10-30 01:30:35 +00:00
|
|
|
Miscellania -
|
1999-10-27 03:42:43 +00:00
|
|
|
|
1999-10-30 01:30:35 +00:00
|
|
|
This version of SSH is based upon code retrieved from the OpenBSD CVS
|
2000-01-06 09:28:41 +00:00
|
|
|
repository which in turn was based on the last free
|
1999-11-09 04:05:11 +00:00
|
|
|
version of SSH released by Tatu Ylonen.
|
1999-10-27 03:42:43 +00:00
|
|
|
|
2000-01-06 09:28:41 +00:00
|
|
|
Code in bsd-misc.[ch] and gnome-ssh-askpass.c is Copyright 1999 Damien
|
|
|
|
|
Miller & Internet Business Solutions and is released under a X11-style
|
1999-11-09 04:05:11 +00:00
|
|
|
license (see source files for details).
|
1999-10-27 03:42:43 +00:00
|
|
|
|
1999-11-08 04:30:59 +00:00
|
|
|
References -
|
|
|
|
|
|
1999-11-10 23:50:04 +00:00
|
|
|
[1] http://www.lothar.com/tech/crypto/
|
|
|
|
|
[2] http://www.cdrom.com/pub/infozip/zlib/
|
|
|
|
|
[3] http://www.openssl.org/
|
|
|
|
|
[4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris)
|
|
|
|
|
[5] http://www.gnome.org/
|
1999-12-30 04:50:54 +00:00
|
|
|
[6] http://www.inet.no/dante
|
1999-11-09 04:05:11 +00:00
|
|
|
|
