Portable OpenSSH
Go to file
djm@openbsd.org 15bfafc1db upstream: make mktestdata.sh generate old/new format keys that we
expect. This script was written before OpenSSH switched to new-format private
keys by default and was never updated to the change (until now) From Michael
Forney

OpenBSD-Regress-ID: 38cf354715c96852e5b71c2393fb6e7ad28b7ca7
2020-05-04 18:42:13 +10:00
contrib spelling mistakes 2020-03-13 14:23:07 +11:00
openbsd-compat Sync rev 1.49. 2020-04-21 18:28:19 +10:00
regress upstream: make mktestdata.sh generate old/new format keys that we 2020-05-04 18:42:13 +10:00
.depend Update .depend. 2020-05-02 18:34:47 +10:00
.gitignore Add config.log to .gitignore 2020-01-16 13:27:23 +11:00
.skipped-commit-ids upstream: Drop leading space from line count that was confusing 2020-02-28 12:27:41 +11:00
CREDITS
INSTALL fix some typos and sentence 2020-02-21 12:29:05 +11:00
LICENCE
Makefile.in Remove use of tail for 'make depend'. 2020-05-02 18:29:40 +10:00
OVERVIEW
PROTOCOL upstream: Fix some typos and an incorrect word in docs. Patch from 2020-02-21 12:27:23 +11:00
PROTOCOL.agent
PROTOCOL.certkeys upstream: document the "no-touch-required" certificate extension; 2019-11-25 12:25:53 +11:00
PROTOCOL.chacha20poly1305 upstream: Fix some typos and an incorrect word in docs. Patch from 2020-02-21 12:27:23 +11:00
PROTOCOL.key
PROTOCOL.krl
PROTOCOL.mux upstream: spelling errors in comments; no code change from 2020-03-14 19:39:09 +11:00
PROTOCOL.sshsig
PROTOCOL.u2f upstream: when signing a challenge using a FIDO toke, perform the 2020-05-01 13:13:29 +10:00
README Mailing list is now closed to non-subscribers. 2020-04-22 14:07:00 +10:00
README.dns Minor documentation update: 2020-02-11 12:51:24 +11:00
README.md typo; reported by Phil Pennock 2020-02-07 15:13:26 +11:00
README.platform
README.privsep
README.tun
TODO
aclocal.m4
addrmatch.c
atomicio.c
atomicio.h
audit-bsm.c
audit-linux.c
audit.c
audit.h
auth-bsdauth.c
auth-krb5.c
auth-options.c upstream: fix null-deref on calloc failure; ok djm 2020-03-13 13:13:30 +11:00
auth-options.h upstream: add a "no-touch-required" option for authorized_keys and 2019-11-25 12:23:40 +11:00
auth-pam.c Fix a couple of mysig_t leftovers. 2020-01-23 21:06:45 +11:00
auth-pam.h
auth-passwd.c
auth-rhosts.c upstream: make IgnoreRhosts a tri-state option: "yes" ignore 2020-04-17 14:03:36 +10:00
auth-shadow.c
auth-sia.c
auth-sia.h
auth.c upstream: Add a sshd_config "Include" directive to allow inclusion 2020-02-01 10:20:24 +11:00
auth.h
auth2-chall.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
auth2-gss.c
auth2-hostbased.c upstream: Add new structure for signature options 2019-11-25 12:23:33 +11:00
auth2-kbdint.c
auth2-none.c
auth2-passwd.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
auth2-pubkey.c upstream: Replace "security key" with "authenticator" in program 2020-02-07 09:52:59 +11:00
auth2.c upstream: exit on parse failures in input_service_request; ok djm 2020-03-13 13:13:30 +11:00
authfd.c upstream: ssh_fetch_identitylist() returns the return value from 2020-03-13 13:18:09 +11:00
authfd.h upstream: Allow forwarding a different agent socket to the path 2019-12-21 13:22:07 +11:00
authfile.c upstream: refactor out some duplicate private key loading code; 2020-04-17 17:17:47 +10:00
authfile.h upstream: factor out reading/writing sshbufs to dedicated 2020-01-26 10:18:42 +11:00
bitmap.c
bitmap.h
buildpkg.sh.in
canohost.c
canohost.h
chacha.c
chacha.h
channels.c upstream: We've standardized on memset over bzero, replace a couple 2020-05-01 13:13:28 +10:00
channels.h upstream: add a comment describing the ranges of channel IDs that 2020-01-26 10:15:13 +11:00
cipher-aes.c
cipher-aesctr.c
cipher-aesctr.h
cipher-chachapoly-libcrypto.c Fix conditional for openssl-based chacha20. 2020-05-01 09:21:52 +10:00
cipher-chachapoly.c Include openssl-compat.h before checking ifdefs. 2020-04-06 20:54:34 +10:00
cipher-chachapoly.h upstream: make Chacha20-POLY1305 context struct opaque; ok tb@ as 2020-04-03 15:36:57 +11:00
cipher-ctr.c
cipher.c upstream: make Chacha20-POLY1305 context struct opaque; ok tb@ as 2020-04-03 15:36:57 +11:00
cipher.h upstream: Make zlib optional. This adds a "ZLIB" build time option 2020-01-23 21:53:54 +11:00
cleanup.c
clientloop.c upstream: Remove leave_non_blocking() which is now dead code 2020-04-24 12:58:13 +10:00
clientloop.h upstream: make failures when establishing "Tunnel" forwarding terminate 2020-04-03 13:42:33 +11:00
compat.c
compat.h
config.guess
config.sub
configure.ac Use LONG_LONG_MAX and friends if available. 2020-05-01 18:41:40 +10:00
crypto_api.h
defines.h Use LONG_LONG_MAX and friends if available. 2020-05-01 18:41:40 +10:00
dh.c
dh.h
digest-libc.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
digest-openssl.c Remove configure test & compat code for ripemd160. 2020-01-14 12:05:00 +11:00
digest.h
dispatch.c
dispatch.h
dns.c
dns.h
ed25519.c
entropy.c Fix a couple of mysig_t leftovers. 2020-01-23 21:06:45 +11:00
entropy.h
fatal.c
fe25519.c
fe25519.h
fixalgorithms
fixpaths
ge25519.c
ge25519.h
ge25519_base.data
groupaccess.c
groupaccess.h
gss-genr.c
gss-serv-krb5.c
gss-serv.c upstream: spelling errors in comments; no code change from 2020-03-14 19:39:09 +11:00
hash.c Wrap sha2.h include in ifdef. 2019-11-29 20:21:36 +11:00
hmac.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
hmac.h
hostfile.c upstream: fix possible null-deref in check_key_not_revoked; ok 2020-03-13 13:18:09 +11:00
hostfile.h
includes.h
install-sh
kex.c upstream: use sshpkt_fatal() for kex_exchange_identification() 2020-03-14 19:39:30 +11:00
kex.h
kexc25519.c
kexdh.c
kexecdh.c
kexgen.c upstream: Add new structure for signature options 2019-11-25 12:23:33 +11:00
kexgex.c
kexgexc.c upstream: Add new structure for signature options 2019-11-25 12:23:33 +11:00
kexgexs.c
kexsntrup4591761x25519.c
krl.c upstream: avoid another compiler warning spotted in -portable 2020-04-03 16:53:50 +11:00
krl.h upstream: give ssh-keygen the ability to dump the contents of a 2020-04-03 13:33:25 +11:00
log.c
log.h
loginrec.c
loginrec.h
logintest.c
mac.c
mac.h
match.c
match.h
md5crypt.c
md5crypt.h
mdoc2man.awk
misc.c See if SA_RESTART signals will interrupt select(). 2020-05-01 15:09:26 +10:00
misc.h upstream: add xextendf() to extend a string with a format 2020-01-25 11:27:29 +11:00
mkinstalldirs
moduli Import regenerated moduli. 2020-02-20 16:42:50 +11:00
moduli.5
moduli.c upstream: remove most uses of BN_CTX 2019-11-17 09:44:43 +11:00
monitor.c upstream: spelling errors in comments; no code change from 2020-03-14 19:39:09 +11:00
monitor.h
monitor_fdpass.c
monitor_fdpass.h
monitor_wrap.c upstream: allow security keys to act as host keys as well as user 2019-12-16 14:19:41 +11:00
monitor_wrap.h upstream: Add new structure for signature options 2019-11-25 12:23:33 +11:00
msg.c upstream: some __func__ and strerror(errno) here; no functional 2020-01-22 17:17:51 +11:00
msg.h
mux.c upstream: bring back debug() removed in rev 1.74; noted by pradeep 2020-05-01 13:13:29 +10:00
myproposal.h upstream: remove ssh-rsa (SHA1) from the list of allowed CA 2020-01-25 11:27:29 +11:00
nchan.c
nchan.ms
nchan2.ms
openssh.xml.in
opensshd.init.in
packet.c upstream: consistently check packet_timeout_ms against 0; ok djm 2020-03-13 13:18:09 +11:00
packet.h upstream: sshpkt_fatal() does not return; ok djm 2020-03-13 13:13:30 +11:00
pathnames.h
pkcs11.h
platform-misc.c
platform-pledge.c
platform-tracing.c
platform.c
platform.h
poly1305.c
poly1305.h
progressmeter.c upstream: Replace all calls to signal(2) with a wrapper around 2020-01-23 18:51:25 +11:00
progressmeter.h
readconf.c upstream: Fix incorrect error message for "too many known hosts files." 2020-04-24 14:57:52 +10:00
readconf.h upstream: Make with config keywords support which 2020-04-03 13:33:37 +11:00
readpass.c upstream: Replace all calls to signal(2) with a wrapper around 2020-01-23 18:51:25 +11:00
rijndael.c
rijndael.h
sandbox-capsicum.c
sandbox-darwin.c sandbox-darwin.c: fix missing prototypes. 2020-01-21 10:37:25 +11:00
sandbox-null.c
sandbox-pledge.c
sandbox-rlimit.c
sandbox-seccomp-filter.c Add sys/syscall.h for syscall numbers. 2020-04-15 10:58:02 +10:00
sandbox-solaris.c
sandbox-systrace.c upstream: Replace all calls to signal(2) with a wrapper around 2020-01-23 18:51:25 +11:00
sc25519.c
sc25519.h
scp.1 upstream: tweak previous; ok markus 2020-05-01 13:13:29 +10:00
scp.c upstream: when receving a file in sink(), be careful to send at 2020-05-01 16:40:11 +10:00
servconf.c Error out if given RDomain if unsupported. 2020-04-24 15:11:14 +10:00
servconf.h upstream: make IgnoreRhosts a tri-state option: "yes" ignore 2020-04-17 14:03:36 +10:00
serverloop.c upstream: use sshpkt_fatal() instead of plain fatal() for 2020-01-30 18:22:34 +11:00
serverloop.h
session.c upstream: spelling errors in comments; no code change from 2020-03-14 19:39:09 +11:00
session.h
sftp-client.c
sftp-client.h
sftp-common.c
sftp-common.h
sftp-glob.c
sftp-realpath.c
sftp-server-main.c
sftp-server.8 upstream: tweak the Nd lines for a bit of consistency; ok markus 2019-12-11 19:08:22 +11:00
sftp-server.c
sftp.1 upstream: ce examples of "Ar arg Ar arg" with "Ar arg arg" and 2020-04-24 12:57:50 +10:00
sftp.c upstream: sort -N and add it to usage(); 2020-04-03 17:09:42 +11:00
sftp.h
sk-api.h upstream: when signing a challenge using a FIDO toke, perform the 2020-05-01 13:13:29 +10:00
sk-usbhid.c wrap sha2.h inclusion in #ifdef HAVE_SHA2_H 2020-05-01 13:29:16 +10:00
smult_curve25519_ref.c
sntrup4591761.c
sntrup4591761.sh
ssh-add.1 upstream: sync the description of the $SSH_SK_PROVIDER environment 2020-02-07 15:03:20 +11:00
ssh-add.c upstream: Cast lifetime to u_long for comparison to prevent unsigned 2020-03-17 09:48:36 +11:00
ssh-agent.1 upstream: Replace the term "security key" with "(FIDO) 2019-12-30 14:31:40 +11:00
ssh-agent.c upstream: initialize seconds for debug message; ok djm 2020-03-13 13:18:31 +11:00
ssh-dss.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
ssh-ecdsa-sk.c Fix building without openssl. 2020-01-20 21:14:46 +11:00
ssh-ecdsa.c
ssh-ed25519-sk.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
ssh-ed25519.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
ssh-gss.h
ssh-keygen.1 upstream: give ssh-keygen the ability to dump the contents of a 2020-04-03 13:33:25 +11:00
ssh-keygen.c upstream: we have a sshkey_save_public() function to save public keys; 2020-05-02 17:36:39 +10:00
ssh-keyscan.1 upstream: tweak the Nd lines for a bit of consistency; ok markus 2019-12-11 19:08:22 +11:00
ssh-keyscan.c upstream: allow ssh-keyscan to find security key hostkeys 2019-12-16 14:19:41 +11:00
ssh-keysign.8 upstream: tweak the Nd lines for a bit of consistency; ok markus 2019-12-11 19:08:22 +11:00
ssh-keysign.c upstream: additional missing stdarg.h includes when built without 2019-11-20 09:27:29 +11:00
ssh-pkcs11-client.c upstream: expose PKCS#11 key labels/X.509 subjects as comments 2020-01-25 11:35:55 +11:00
ssh-pkcs11-helper.8 upstream: tweak the Nd lines for a bit of consistency; ok markus 2019-12-11 19:08:22 +11:00
ssh-pkcs11-helper.c upstream: remove unused variables in ssh-pkcs11-helper; ok djm 2020-03-13 13:18:31 +11:00
ssh-pkcs11.c upstream: improve error messages for some common PKCS#11 C_Login 2020-03-14 19:39:30 +11:00
ssh-pkcs11.h upstream: expose PKCS#11 key labels/X.509 subjects as comments 2020-01-25 11:35:55 +11:00
ssh-rsa.c
ssh-sandbox.h
ssh-sk-client.c upstream: Replace all calls to signal(2) with a wrapper around 2020-01-23 18:51:25 +11:00
ssh-sk-helper.8 upstream: Replace the term "security key" with "(FIDO) 2019-12-30 14:31:40 +11:00
ssh-sk-helper.c upstream: improve the error message for u2f enrollment errors by 2020-01-26 10:18:42 +11:00
ssh-sk.c upstream: when signing a challenge using a FIDO toke, perform the 2020-05-01 13:13:29 +10:00
ssh-sk.h upstream: pass the log-on-stderr flag and log level through to 2020-01-21 18:09:09 +11:00
ssh-xmss.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
ssh.1 upstream: mention that /etc/hosts.equiv and /etc/shosts.equiv are 2020-04-17 14:03:36 +10:00
ssh.c upstream: Add TOKEN percent expansion to LocalFoward and RemoteForward 2020-04-10 11:47:19 +10:00
ssh.h
ssh2.h
ssh_api.c
ssh_api.h
ssh_config
ssh_config.5 upstream: add space between macro arg and punctuation; 2020-04-17 14:03:16 +10:00
sshbuf-getput-basic.c upstream: allow sshbuf_put_stringb(buf, NULL); ok markus@ 2019-12-14 07:17:44 +11:00
sshbuf-getput-crypto.c upstream: remove most uses of BN_CTX 2019-11-17 09:44:43 +11:00
sshbuf-io.c upstream: tidy headers; some junk snuck into sshbuf-misc.c and 2020-01-26 10:34:50 +11:00
sshbuf-misc.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
sshbuf.c upstream: change explicit_bzero();free() to freezero() 2020-02-28 12:26:28 +11:00
sshbuf.h upstream: Fix comment typo. Patch from mforney at mforney.org. 2020-05-01 13:13:28 +10:00
sshconnect.c upstream: use sshpkt_fatal() for kex_exchange_identification() 2020-03-14 19:39:30 +11:00
sshconnect.h upstream: when AddKeysToAgent=yes is set and the key contains no 2020-01-25 18:20:01 +11:00
sshconnect2.c upstream: fix reversed test that caused IdentitiesOnly=yes to not 2020-04-17 14:03:36 +10:00
sshd.8 upstream: mention that permitopen=/PermitOpen do no name to address 2020-01-25 17:04:14 +11:00
sshd.c upstream: use sshpkt_fatal() for kex_exchange_identification() 2020-03-14 19:39:30 +11:00
sshd_config
sshd_config.5 upstream: add space beteen macro arg and punctuation; 2020-04-17 17:17:47 +10:00
ssherr.c upstream: improve the error message for u2f enrollment errors by 2020-01-26 10:18:42 +11:00
ssherr.h upstream: improve the error message for u2f enrollment errors by 2020-01-26 10:18:42 +11:00
sshkey-xmss.c
sshkey-xmss.h
sshkey.c upstream: Refactor private key parsing. Eliminates a fair bit of 2020-04-11 20:20:58 +10:00
sshkey.h upstream: add sshkey_parse_pubkey_from_private_fileblob_type() 2020-04-08 10:14:21 +10:00
sshlogin.c Remove unused variable warning. 2020-02-17 22:55:51 +11:00
sshlogin.h
sshpty.c
sshpty.h
sshsig.c upstream: do not leak oprincipals; ok djm 2020-03-13 13:18:31 +11:00
sshsig.h upstream: ssh-keygen -Y find-principals fixes based on feedback 2020-01-25 11:27:29 +11:00
sshtty.c
survey.sh.in
ttymodes.c
ttymodes.h
uidswap.c
uidswap.h
umac.c upstream: spelling errors in comments; no code change from 2020-03-14 19:39:09 +11:00
umac.h
umac128.c
utf8.c upstream: expose vasnmprintf(); ok (as part of other commit) markus 2020-05-01 16:40:11 +10:00
utf8.h upstream: expose vasnmprintf(); ok (as part of other commit) markus 2020-05-01 16:40:11 +10:00
verify.c
version.h upstream: openssh-8.2 2020-02-14 11:40:54 +11:00
xmalloc.c
xmalloc.h
xmss_commons.c
xmss_commons.h
xmss_fast.c
xmss_fast.h
xmss_hash.c
xmss_hash.h
xmss_hash_address.c
xmss_hash_address.h
xmss_wots.c
xmss_wots.h

README.md

Portable OpenSSH

Fuzzing Status

OpenSSH is a complete implementation of the SSH protocol (version 2) for secure remote login, command execution and file transfer. It includes a client ssh and server sshd, file transfer utilities scp and sftp as well as tools for key generation (ssh-keygen), run-time key storage (ssh-agent) and a number of supporting programs.

This is a port of OpenBSD's OpenSSH to most Unix-like operating systems, including Linux, OS X and Cygwin. Portable OpenSSH polyfills OpenBSD APIs that are not available elsewhere, adds sshd sandboxing for more operating systems and includes support for OS-native authentication and auditing (e.g. using PAM).

Documentation

The official documentation for OpenSSH are the man pages for each tool:

Stable Releases

Stable release tarballs are available from a number of download mirrors. We recommend the use of a stable release for most users. Please read the release notes for details of recent changes and potential incompatibilities.

Building Portable OpenSSH

Dependencies

Portable OpenSSH is built using autoconf and make. It requires a working C compiler, standard library and headers, and zlib. libcrypto from either LibreSSL or OpenSSL may also be used, but OpenSSH may be built without it supporting a subset of crypto algorithms.

FIDO security token support need libfido2 and its dependencies. Also, certain platforms and build-time options may require additional dependencies, see README.platform for details.

Building a release

Releases include a pre-built copy of the configure script and may be built using:

tar zxvf openssh-X.YpZ.tar.gz
cd openssh
./configure # [options]
make && make tests

See the Build-time Customisation section below for configure options. If you plan on installing OpenSSH to your system, then you will usually want to specify destination paths.

Building from git

If building from git, you'll need autoconf installed to build the configure script. The following commands will check out and build portable OpenSSH from git:

git clone https://github.com/openssh/openssh-portable # or https://anongit.mindrot.org/openssh.git
cd openssh-portable
autoreconf
./configure
make && make tests

Build-time Customisation

There are many build-time customisation options available. All Autoconf destination path flags (e.g. --prefix) are supported (and are usually required if you want to install OpenSSH).

For a full list of available flags, run configure --help but a few of the more frequently-used ones are described below. Some of these flags will require additional libraries and/or headers be installed.

Flag Meaning
--with-pam Enable PAM support. OpenPAM, Linux PAM and Solaris PAM are supported.
--with-libedit Enable libedit support for sftp.
--with-kerberos5 Enable Kerberos/GSSAPI support. Both Heimdal and MIT Kerberos implementations are supported.
--with-selinux Enable SELinux support.
--with-security-key-builtin Include built-in support for U2F/FIDO2 security keys. This requires libfido2 be installed.

Development

Portable OpenSSH development is discussed on the openssh-unix-dev mailing list (archive mirror). Bugs and feature requests are tracked on our Bugzilla.

Reporting bugs

Non-security bugs may be reported to the developers via Bugzilla or via the mailing list above. Security bugs should be reported to openssh@openssh.com.