Portable OpenSSH
Go to file
Damien Miller 2eb4236d86 - (djm) [openbsd-compat/bsd-cygwin_util.c] Recent versions of Cygwin allow
change of user context without a password, so relax auth method
   restrictions; from vinschen AT redhat.com; ok dtucker@
2004-04-18 21:15:43 +10:00
contrib
openbsd-compat - (djm) [openbsd-compat/bsd-cygwin_util.c] Recent versions of Cygwin allow 2004-04-18 21:15:43 +10:00
regress - (dtucker) [regress/sftp-cmds.sh] Skip quoting test on Cygwin, since 2004-04-16 17:58:28 +10:00
scard
.cvsignore
CREDITS
ChangeLog - (djm) [openbsd-compat/bsd-cygwin_util.c] Recent versions of Cygwin allow 2004-04-18 21:15:43 +10:00
INSTALL
LICENCE
Makefile.in
OVERVIEW
README update relnotes URL for release 2004-04-18 20:32:56 +10:00
README.dns
README.platform
README.privsep
README.smartcard
RFC.nroff
TODO
WARNING.RNG
acconfig.h Typo fix in comment 2004-04-16 09:22:40 +10:00
aclocal.m4
acss.c
acss.h
atomicio.c
atomicio.h
auth-bsdauth.c
auth-chall.c
auth-krb5.c - (djm) [auth-krb5.c auth.h session.c] Explicitly refer to Kerberos ccache 2004-04-16 22:47:55 +10:00
auth-options.c
auth-options.h
auth-pam.c - (dtucker) [auth-pam.c] Log username and source host for failed PAM 2004-04-18 11:00:26 +10:00
auth-pam.h
auth-passwd.c
auth-rh-rsa.c
auth-rhosts.c
auth-rsa.c
auth-shadow.c
auth-sia.c
auth-sia.h
auth-skey.c - (dtucker) [auth-skey.c defines.h monitor.c] Make skeychallenge explicitly 2004-04-14 17:24:30 +10:00
auth.c
auth.h - (djm) [auth-krb5.c auth.h session.c] Explicitly refer to Kerberos ccache 2004-04-16 22:47:55 +10:00
auth1.c
auth2-chall.c
auth2-gss.c
auth2-hostbased.c
auth2-kbdint.c
auth2-none.c
auth2-passwd.c
auth2-pubkey.c
auth2.c
authfd.c
authfd.h
authfile.c
authfile.h
bufaux.c
bufaux.h
buffer.c
buffer.h
canohost.c
canohost.h
channels.c
channels.h
cipher-3des1.c
cipher-acss.c
cipher-aes.c
cipher-bf1.c
cipher-ctr.c
cipher.c
cipher.h
cleanup.c
clientloop.c
clientloop.h
compat.c
compat.h
compress.c
compress.h
config.guess
config.sub
configure.ac - (tim) [configure.ac] Set SETEUID_BREAKS_SETUID, BROKEN_SETREUID and 2004-04-16 20:03:07 -07:00
crc32.c
crc32.h
deattack.c
deattack.h
defines.h - (dtucker) [auth-skey.c defines.h monitor.c] Make skeychallenge explicitly 2004-04-14 17:24:30 +10:00
dh.c
dh.h
dispatch.c
dispatch.h
dns.c
dns.h
entropy.c
entropy.h
fatal.c
fixpaths
fixprogs
getput.h
groupaccess.c
groupaccess.h
gss-genr.c
gss-serv-krb5.c
gss-serv.c
hostfile.c
hostfile.h
includes.h
install-sh
kex.c
kex.h
kexdh.c
kexdhc.c
kexdhs.c
kexgex.c
kexgexc.c
kexgexs.c
key.c
key.h
log.c
log.h
loginrec.c
loginrec.h
logintest.c
mac.c
mac.h
match.c
match.h
md5crypt.c
md5crypt.h
mdoc2man.awk
misc.c
misc.h
mkinstalldirs
moduli
moduli.c
moduli.h
monitor.c - (dtucker) [auth-skey.c defines.h monitor.c] Make skeychallenge explicitly 2004-04-14 17:24:30 +10:00
monitor.h
monitor_fdpass.c
monitor_fdpass.h
monitor_mm.c
monitor_mm.h
monitor_wrap.c - (bal) [monitor.c monitor_wrap.c] Ok.. Last time. Promise. Tim suggested 2004-04-08 16:12:30 +00:00
monitor_wrap.h
mpaux.c
mpaux.h
msg.c
msg.h
myproposal.h
nchan.c
nchan.ms
nchan2.ms
packet.c
packet.h
pathnames.h
progressmeter.c
progressmeter.h
readconf.c
readconf.h
readpass.c
readpass.h
rijndael.c
rijndael.h
rsa.c
rsa.h
scard-opensc.c
scard.c
scard.h
scp.1
scp.c
servconf.c
servconf.h
serverloop.c
serverloop.h
session.c - (djm) [auth-krb5.c auth.h session.c] Explicitly refer to Kerberos ccache 2004-04-16 22:47:55 +10:00
session.h
sftp-client.c
sftp-client.h
sftp-common.c
sftp-common.h
sftp-glob.c
sftp-server.8
sftp-server.c
sftp.1
sftp.c
sftp.h
ssh-add.1
ssh-add.c
ssh-agent.1
ssh-agent.c
ssh-dss.c
ssh-gss.h
ssh-keygen.1
ssh-keygen.c
ssh-keyscan.1
ssh-keyscan.c
ssh-keysign.8
ssh-keysign.c
ssh-rand-helper.8
ssh-rand-helper.c
ssh-rsa.c
ssh.1
ssh.c
ssh.h
ssh1.h
ssh2.h
ssh_config
ssh_config.5
ssh_prng_cmds.in
sshconnect.c
sshconnect.h
sshconnect1.c
sshconnect2.c
sshd.8
sshd.c
sshd_config
sshd_config.5 - (dtucker) [sshd_config.5] Add PermitRootLogin without-password warning 2004-04-14 13:04:35 +10:00
sshlogin.c
sshlogin.h
sshpty.c
sshpty.h
sshtty.c
sshtty.h
tildexpand.c
tildexpand.h
ttymodes.c
ttymodes.h
uidswap.c
uidswap.h
uuencode.c
uuencode.h
version.h
xmalloc.c
xmalloc.h

README

See http://www.openssh.com/txt/release-3.8.1 for the release notes.

- A Japanese translation of this document and of the OpenSSH FAQ is
- available at http://www.unixuser.org/~haruyama/security/openssh/index.html
- Thanks to HARUYAMA Seigo <haruyama@unixuser.org>

This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's sample
implementation with all patent-encumbered algorithms removed (to
external libraries), all known security bugs fixed, new features
reintroduced and many other clean-ups.  OpenSSH has been created by
Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,
and Dug Song. It has a homepage at http://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support (for Linux and Solaris), EGD[1]/PRNGD[2] support and replacements
for OpenBSD library functions that are (regrettably) absent from other
unices. This port has been best tested on Linux, Solaris, HP-UX, NetBSD,
Irix and AIX. Support for SCO, NeXT and other Unices is underway.
This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[3], OpenSSL[4] and optionally PAM[5].

There is now several mailing lists for this port of OpenSSH. Please
refer to http://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by
unsubscribed users.

If you are a citizen of an USA-embargoed country to which export of
cryptographic products is restricted, then please refrain from sending
crypto-related code or patches to the list. We cannot accept them.
Other code contribution are accepted, but please follow the OpenBSD
style guidelines[6].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system. There are a number of differences between this
port of OpenSSH and F-Secure SSH 1.x, please refer to the OpenSSH FAQ[7]
for details and general tips.

Damien Miller <djm@mindrot.org>

Miscellania -

This version of OpenSSH is based upon code retrieved from the OpenBSD
CVS repository which in turn was based on the last free sample
implementation released by Tatu Ylonen.

References -

[0] http://www.openssh.com/faq.html
[1] http://www.lothar.com/tech/crypto/
[2] http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html
[3] http://www.gzip.org/zlib/
[4] http://www.openssl.org/
[5] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris
    and HP-UX 11)
[6] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9
[7] http://www.openssh.com/faq.html

$Id: README,v 1.54 2004/04/18 10:32:56 djm Exp $