openssh

Portable OpenSSH

Go to file

djm@openbsd.org 71e67fff94 upstream: pass values used in KEX hash computation as sshbuf rather than pointer+len suggested by me; implemented by markus@ ok me OpenBSD-Commit-ID: 994f33c464f4a9e0f1d21909fa3e379f5a0910f0		2019-01-21 23:13:03 +11:00
contrib	…
openbsd-compat	…
regress	…
.depend	…
.gitignore	…
.skipped-commit-ids	…
CREDITS	…
INSTALL	…
LICENCE	…
Makefile.in	…
OVERVIEW	…
PROTOCOL	…
PROTOCOL.agent	…
PROTOCOL.certkeys	…
PROTOCOL.chacha20poly1305	…
PROTOCOL.key	…
PROTOCOL.krl	…
PROTOCOL.mux	…
README	…
README.dns	…
README.platform	…
README.privsep	…
README.tun	…
TODO	…
aclocal.m4	…
addrmatch.c	…
atomicio.c	…
atomicio.h	…
audit-bsm.c	…
audit-linux.c	…
audit.c	…
audit.h	…
auth-bsdauth.c	…
auth-krb5.c	…
auth-options.c	…
auth-options.h	…
auth-pam.c	…
auth-pam.h	…
auth-passwd.c	…
auth-rhosts.c	…
auth-shadow.c	…
auth-sia.c	…
auth-sia.h	…
auth-skey.c	…
auth.c	…
auth.h	…
auth2-chall.c	…
auth2-gss.c	…
auth2-hostbased.c	…
auth2-kbdint.c	…
auth2-none.c	…
auth2-passwd.c	…
auth2-pubkey.c	…
auth2.c	…
authfd.c	…
authfd.h	…
authfile.c	…
authfile.h	…
bitmap.c	…
bitmap.h	…
buildpkg.sh.in	…
canohost.c	…
canohost.h	…
chacha.c	…
chacha.h	…
channels.c	…
channels.h	…
cipher-aes.c	…
cipher-aesctr.c	…
cipher-aesctr.h	…
cipher-chachapoly.c	…
cipher-chachapoly.h	…
cipher-ctr.c	…
cipher.c	…
cipher.h	…
cleanup.c	…
clientloop.c	…
clientloop.h	…
compat.c	…
compat.h	…
config.guess	…
config.sub	…
configure.ac	…
crc32.c	…
crc32.h	…
crypto_api.h	…
defines.h	…
dh.c	…
dh.h	…
digest-libc.c	…
digest-openssl.c	…
digest.h	…
dispatch.c	…
dispatch.h	…
dns.c	…
dns.h	…
ed25519.c	…
entropy.c	…
entropy.h	…
fatal.c	…
fe25519.c	…
fe25519.h	…
fixalgorithms	…
fixpaths	…
ge25519.c	…
ge25519.h	…
ge25519_base.data	…
groupaccess.c	…
groupaccess.h	…
gss-genr.c	…
gss-serv-krb5.c	…
gss-serv.c	…
hash.c	…
hmac.c	…
hmac.h	…
hostfile.c	…
hostfile.h	…
includes.h	…
install-sh	…
kex.c	…
kex.h	upstream: pass values used in KEX hash computation as sshbuf	2019-01-21 23:13:03 +11:00
kexc25519.c	upstream: pass values used in KEX hash computation as sshbuf	2019-01-21 23:13:03 +11:00
kexdh.c	upstream: pass values used in KEX hash computation as sshbuf	2019-01-21 23:13:03 +11:00
kexecdh.c	upstream: pass values used in KEX hash computation as sshbuf	2019-01-21 23:13:03 +11:00
kexgex.c	…
kexgexc.c	…
kexgexs.c	…
kexkemc.c	upstream: pass values used in KEX hash computation as sshbuf	2019-01-21 23:13:03 +11:00
kexkems.c	upstream: pass values used in KEX hash computation as sshbuf	2019-01-21 23:13:03 +11:00
kexsntrup4591761x25519.c	upstream: pass values used in KEX hash computation as sshbuf	2019-01-21 23:13:03 +11:00
krl.c	…
krl.h	…
log.c	…
log.h	…
loginrec.c	…
loginrec.h	…
logintest.c	…
mac.c	…
mac.h	…
match.c	…
match.h	…
md5crypt.c	…
md5crypt.h	…
mdoc2man.awk	…
misc.c	…
misc.h	…
mkinstalldirs	…
moduli	…
moduli.5	…
moduli.c	…
monitor.c	…
monitor.h	…
monitor_fdpass.c	…
monitor_fdpass.h	…
monitor_wrap.c	…
monitor_wrap.h	…
msg.c	…
msg.h	…
mux.c	…
myproposal.h	…
nchan.c	…
nchan.ms	…
nchan2.ms	…
openssh.xml.in	…
opensshd.init.in	…
packet.c	upstream: pass values used in KEX hash computation as sshbuf	2019-01-21 23:13:03 +11:00
packet.h	upstream: pass values used in KEX hash computation as sshbuf	2019-01-21 23:13:03 +11:00
pathnames.h	…
pkcs11.h	…
platform-misc.c	…
platform-pledge.c	…
platform-tracing.c	…
platform.c	…
platform.h	…
poly1305.c	…
poly1305.h	…
progressmeter.c	…
progressmeter.h	…
readconf.c	…
readconf.h	…
readpass.c	…
rijndael.c	…
rijndael.h	…
sandbox-capsicum.c	…
sandbox-darwin.c	…
sandbox-null.c	…
sandbox-pledge.c	…
sandbox-rlimit.c	…
sandbox-seccomp-filter.c	…
sandbox-solaris.c	…
sandbox-systrace.c	…
sc25519.c	…
sc25519.h	…
scp.1	…
scp.c	…
servconf.c	…
servconf.h	…
serverloop.c	…
serverloop.h	…
session.c	…
session.h	…
sftp-client.c	…
sftp-client.h	…
sftp-common.c	…
sftp-common.h	…
sftp-glob.c	…
sftp-server-main.c	…
sftp-server.8	…
sftp-server.c	…
sftp.1	…
sftp.c	…
sftp.h	…
smult_curve25519_ref.c	…
sntrup4591761.c	…
sntrup4591761.sh	…
ssh-add.1	…
ssh-add.c	…
ssh-agent.1	…
ssh-agent.c	…
ssh-dss.c	…
ssh-ecdsa.c	…
ssh-ed25519.c	…
ssh-gss.h	…
ssh-keygen.1	…
ssh-keygen.c	…
ssh-keyscan.1	…
ssh-keyscan.c	…
ssh-keysign.8	…
ssh-keysign.c	…
ssh-pkcs11-client.c	…
ssh-pkcs11-helper.8	…
ssh-pkcs11-helper.c	…
ssh-pkcs11.c	…
ssh-pkcs11.h	…
ssh-rsa.c	…
ssh-sandbox.h	…
ssh-xmss.c	…
ssh.1	…
ssh.c	…
ssh.h	…
ssh2.h	…
ssh_api.c	…
ssh_api.h	…
ssh_config	…
ssh_config.5	…
sshbuf-getput-basic.c	…
sshbuf-getput-crypto.c	…
sshbuf-misc.c	…
sshbuf.c	…
sshbuf.h	…
sshconnect.c	…
sshconnect.h	…
sshconnect2.c	…
sshd.8	…
sshd.c	…
sshd_config	…
sshd_config.5	…
ssherr.c	…
ssherr.h	…
sshkey-xmss.c	…
sshkey-xmss.h	…
sshkey.c	…
sshkey.h	…
sshlogin.c	…
sshlogin.h	…
sshpty.c	…
sshpty.h	…
sshtty.c	…
survey.sh.in	…
ttymodes.c	…
ttymodes.h	…
uidswap.c	…
uidswap.h	…
umac.c	…
umac.h	…
umac128.c	…
utf8.c	…
utf8.h	…
uuencode.c	…
uuencode.h	…
verify.c	…
version.h	…
xmalloc.c	…
xmalloc.h	…
xmss_commons.c	…
xmss_commons.h	…
xmss_fast.c	…
xmss_fast.h	…
xmss_hash.c	…
xmss_hash.h	…
xmss_hash_address.c	…
xmss_hash_address.h	…
xmss_wots.c	…
xmss_wots.h	…

README

See https://www.openssh.com/releasenotes.html#7.9p1 for the release notes.

Please read https://www.openssh.com/report.html for bug reporting
instructions and note that we do not use Github for bug reporting or
patch/pull-request management.

This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's sample
implementation with all patent-encumbered algorithms removed (to
external libraries), all known security bugs fixed, new features
reintroduced and many other clean-ups.  OpenSSH has been created by
Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,
and Dug Song. It has a homepage at https://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support, EGD[1]/PRNGD[2] support and replacements for OpenBSD library
functions that are (regrettably) absent from other unices. This port
has been best tested on AIX, Cygwin, HP-UX, Linux, MacOS/X,
FreeBSD, NetBSD, OpenBSD, OpenServer, Solaris and UnixWare.

This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[3], OpenSSL[4], and optionally PAM[5] and
libedit[6]

There is now several mailing lists for this port of OpenSSH. Please
refer to https://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by unsubscribed
users.  Code contribution are welcomed, but please follow the OpenBSD
style guidelines[7].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system.

Damien Miller <djm@mindrot.org>

Miscellania -

This version of OpenSSH is based upon code retrieved from the OpenBSD
CVS repository which in turn was based on the last free sample
implementation released by Tatu Ylonen.

References -

[0] https://www.openssh.com/
[1] http://www.lothar.com/tech/crypto/
[2] http://prngd.sourceforge.net/
[3] https://www.zlib.net/
[4] https://www.openssl.org/
[5] https://www.openpam.org
    https://www.kernel.org/pub/linux/libs/pam/
    (PAM also is standard on Solaris and HP-UX 11)
[6] https://thrysoee.dk/editline/ (portable version)
[7] https://man.openbsd.org/style.9