Portable OpenSSH
Go to file
Damien Miller a5539d2698 - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2003/04/02 09:48:07
     [clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
     [readconf.h serverloop.c sshconnect2.c]
     reapply rekeying chage, tested by henning@, ok djm@
2003-04-09 20:50:06 +10:00
contrib - (djm) Make the spec work with Redhat 9.0 (which renames sharutils) 2003-04-09 19:41:25 +10:00
openbsd-compat license from samba 2003-04-01 21:31:56 +10:00
regress - (djm) Sync regress with OpenBSD -current 2003-01-22 17:53:16 +11:00
scard sync scard/ 2002-05-22 14:24:01 +10:00
.cvsignore ssh-keysign 2002-06-26 19:24:56 +10:00
CREDITS - (stevesk) [CREDITS] solar 2002-07-28 20:31:18 +00:00
ChangeLog - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
INSTALL - (djm) Remove some cruft from INSTALL 2002-07-25 14:36:24 +10:00
LICENCE - stevesk@cvs.openbsd.org 2002/05/25 20:40:08 2002-06-21 01:19:12 +00:00
Makefile.in - (bal) The days of lack of int64_t support are over. Sorry kids. 2003-03-21 00:34:34 +00:00
OVERVIEW
README - (djm) Update README to reflect AIX's status as a well supported platform. 2003-01-08 23:28:40 +11:00
README.privsep - (bal) Disable Privsep for Tru64 after pre-authentication due to issues 2003-03-21 01:18:09 +00:00
README.smartcard
RFC.nroff
TODO more 2003-01-13 10:00:34 +11:00
WARNING.RNG
acconfig.h - (djm) Bug #245: TTY problems on Solaris. Fix by stevesk@ and 2003-03-10 11:38:10 +11:00
aclocal.m4
atomicio.c
atomicio.h
auth-bsdauth.c - deraadt@cvs.openbsd.org 2002/06/30 21:59:45 2002-07-04 00:14:17 +00:00
auth-chall.c
auth-krb4.c - mpech@cvs.openbsd.org 2003/02/21 10:34:48 2003-02-24 12:05:18 +11:00
auth-krb5.c - deraadt@cvs.openbsd.org 2002/11/21 23:03:51 2002-12-23 02:06:19 +00:00
auth-options.c - markus@cvs.openbsd.org 2002/07/30 17:03:55 2002-08-01 01:28:38 +00:00
auth-options.h - stevesk@cvs.openbsd.org 2002/07/21 18:34:43 2002-07-23 21:07:45 +00:00
auth-pam.c - (djm) Reorganise PAM & SIA password handling to eliminate some common code 2003-01-22 15:42:26 +11:00
auth-pam.h - (stevesk) [auth-pam.[ch] session.c] pam_getenvlist() must be 2002-07-23 00:44:07 +00:00
auth-passwd.c - (djm) Unbreak root password auth. Spotted by dtucker@zip.com.au 2003-01-30 10:20:56 +11:00
auth-rh-rsa.c
auth-rhosts.c - markus@cvs.openbsd.org 2002/05/13 21:26:49 2002-05-15 16:19:37 +00:00
auth-rsa.c - stevesk@cvs.openbsd.org 2002/06/10 16:53:06 2002-06-11 15:47:42 +00:00
auth-sia.c - (bal) Disable Privsep for Tru64 after pre-authentication due to issues 2003-03-21 01:18:09 +00:00
auth-sia.h - (bal) Disable Privsep for Tru64 after pre-authentication due to issues 2003-03-21 01:18:09 +00:00
auth-skey.c - deraadt@cvs.openbsd.org 2002/06/30 21:59:45 2002-07-04 00:14:17 +00:00
auth.c - (djm) Revert fix for Bug #442 for now. 2003-01-18 16:24:06 +11:00
auth.h - markus@cvs.openbsd.org 2002/09/26 11:38:43 2002-09-27 13:25:58 +10:00
auth1.c - markus@cvs.openbsd.org 2003/02/06 21:22:43 2003-02-24 11:59:26 +11:00
auth2-chall.c - deraadt@cvs.openbsd.org 2002/06/30 21:59:45 2002-07-04 00:14:17 +00:00
auth2-hostbased.c - markus@cvs.openbsd.org 2002/05/25 18:51:07 2002-06-06 20:27:55 +00:00
auth2-kbdint.c - markus@cvs.openbsd.org 2002/05/25 18:51:07 2002-06-06 20:27:55 +00:00
auth2-none.c - deraadt@cvs.openbsd.org 2002/06/27 10:35:47 2002-07-04 00:06:15 +00:00
auth2-pam.c - (djm) Avoid redundant xstrdup/xfree in auth2-pam.c. From Solar via markus@ 2003-01-08 12:37:03 +11:00
auth2-pam.h
auth2-passwd.c - markus@cvs.openbsd.org 2002/05/25 18:51:07 2002-06-06 20:27:55 +00:00
auth2-pubkey.c - markus@cvs.openbsd.org 2002/05/25 18:51:07 2002-06-06 20:27:55 +00:00
auth2.c - markus@cvs.openbsd.org 2003/02/06 21:22:43 2003-02-24 11:59:26 +11:00
authfd.c - markus@cvs.openbsd.org 2003/01/23 13:50:27 2003-01-24 11:36:23 +11:00
authfd.h - markus@cvs.openbsd.org 2003/01/23 13:50:27 2003-01-24 11:36:23 +11:00
authfile.c - (djm) OpenBSD CVS Sync 2003-03-15 11:36:18 +11:00
authfile.h - markus@cvs.openbsd.org 2002/05/23 19:24:30 2002-06-06 19:57:33 +00:00
bufaux.c - markus@cvs.openbsd.org 2002/10/23 10:40:16 2002-11-09 15:43:23 +00:00
bufaux.h
buffer.c - markus@cvs.openbsd.org 2002/06/26 08:54:18 2002-06-26 19:14:25 +10:00
buffer.h
canohost.c - (djm) Bug #401: Work around Linux breakage with IPv6 mapped addresses. 2003-01-07 10:51:23 +11:00
canohost.h
channels.c - (djm) OpenBSD CVS Sync 2003-03-10 11:21:17 +11:00
channels.h - (bal) AIX tty data limiting patch fix by leigh@solinno.co.uk 2002-07-22 15:28:53 +00:00
cipher.c - markus@cvs.openbsd.org 2002/11/21 22:45:31 2002-12-23 02:04:22 +00:00
cipher.h
clientloop.c - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
clientloop.h
compat.c - markus@cvs.openbsd.org 2003/04/01 10:31:26 2003-04-01 21:44:37 +10:00
compat.h - markus@cvs.openbsd.org 2003/04/01 10:31:26 2003-04-01 21:44:37 +10:00
compress.c
compress.h
config.guess - (bal) Collection of Cray patches (bsd-cray.h fix for CRAYT3E and improved 2003-03-21 01:05:37 +00:00
config.sub - (bal) Collection of Cray patches (bsd-cray.h fix for CRAYT3E and improved 2003-03-21 01:05:37 +00:00
configure.ac - (bal) Disable Privsep for Tru64 after pre-authentication due to issues 2003-03-21 01:18:09 +00:00
crc32.c - (djm) Fix some compile errors spotted by dtucker and his fabulous 2003-02-25 10:22:35 +11:00
crc32.h - markus@cvs.openbsd.org 2003/02/12 21:39:50 2003-02-24 12:02:12 +11:00
deattack.c
deattack.h
defines.h - (djm) Add TIMEVAL_TO_TIMESPEC macros 2003-01-24 11:50:32 +11:00
dh.c - markus@cvs.openbsd.org 2002/11/21 22:22:50 2002-12-23 02:03:02 +00:00
dh.h
dispatch.c
dispatch.h
entropy.c unexpand 2002-06-09 19:41:48 +00:00
entropy.h
fatal.c
fixpaths - (djm) PERL-free fixpaths from stuge-openssh-unix-dev@cdy.org 2002-12-05 20:59:33 +11:00
fixprogs
getput.h
groupaccess.c
groupaccess.h
hostfile.c - markus@cvs.openbsd.org 2002/07/24 16:11:18 2002-08-01 01:21:56 +00:00
hostfile.h - deraadt@cvs.openbsd.org 2002/11/21 23:03:51 2002-12-23 02:06:19 +00:00
includes.h - (djm) Bug #317: FreeBSD needs libutil.h for openpty() Report from 2002-10-21 10:50:25 +10:00
install-sh
kex.c - markus@cvs.openbsd.org 2003/04/01 10:31:26 2003-04-01 21:44:37 +10:00
kex.h - markus@cvs.openbsd.org 2003/02/16 17:09:57 2003-02-24 12:03:03 +11:00
kexdh.c - markus@cvs.openbsd.org 2003/02/16 17:09:57 2003-02-24 12:03:03 +11:00
kexdhc.c - markus@cvs.openbsd.org 2003/02/16 17:09:57 2003-02-24 12:03:03 +11:00
kexdhs.c - markus@cvs.openbsd.org 2003/02/16 17:09:57 2003-02-24 12:03:03 +11:00
kexgex.c - markus@cvs.openbsd.org 2003/02/16 17:09:57 2003-02-24 12:03:03 +11:00
kexgexc.c - markus@cvs.openbsd.org 2003/02/16 17:09:57 2003-02-24 12:03:03 +11:00
kexgexs.c - markus@cvs.openbsd.org 2003/02/16 17:09:57 2003-02-24 12:03:03 +11:00
key.c - markus@cvs.openbsd.org 2003/02/12 09:33:04 2003-02-24 12:01:40 +11:00
key.h - markus@cvs.openbsd.org 2003/02/12 09:33:04 2003-02-24 12:01:40 +11:00
log.c - markus@cvs.openbsd.org 2003/01/11 18:29:43 2003-01-14 22:22:43 +11:00
log.h - markus@cvs.openbsd.org 2002/07/19 15:43:33 2002-07-23 21:01:56 +00:00
loginrec.c - (djm) Bug #539: Specify creation mode with O_CREAT for lastlog. Report 2003-04-09 19:40:33 +10:00
loginrec.h
logintest.c
mac.c - markus@cvs.openbsd.org 2002/05/16 22:02:50 2002-06-06 19:48:16 +00:00
mac.h
match.c
match.h
md5crypt.c
md5crypt.h
mdoc2man.pl
misc.c - markus@cvs.openbsd.org 2002/12/13 10:03:15 2002-12-23 02:44:36 +00:00
misc.h
mkinstalldirs
moduli
monitor.c - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
monitor.h - markus@cvs.openbsd.org 2002/09/26 11:38:43 2002-09-27 13:25:58 +10:00
monitor_fdpass.c - deraadt@cvs.openbsd.org 2002/06/26 14:50:04 2002-06-27 00:21:03 +00:00
monitor_fdpass.h whitespace sync 2002-06-25 23:01:37 +00:00
monitor_mm.c - millert@cvs.openbsd.org 2002/08/02 14:43:15 2002-08-20 18:36:25 +00:00
monitor_mm.h - (djm) Sync sys/tree.h with OpenBSD -current. Rename tree.h and 2002-09-12 10:43:29 +10:00
monitor_wrap.c - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
monitor_wrap.h - markus@cvs.openbsd.org 2002/09/26 11:38:43 2002-09-27 13:25:58 +10:00
mpaux.c
mpaux.h
msg.c - (bal) [msg.c msg.h scp.c ssh-keysign.c sshconnect2.c] Resync CVS IDs since 2002-12-23 02:58:17 +00:00
msg.h - (bal) [msg.c msg.h scp.c ssh-keysign.c sshconnect2.c] Resync CVS IDs since 2002-12-23 02:58:17 +00:00
myproposal.h
nchan.c - deraadt@cvs.openbsd.org 2002/06/19 00:27:55 2002-06-21 00:41:51 +00:00
nchan.ms
nchan2.ms
packet.c - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
packet.h - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
pathnames.h - markus@cvs.openbsd.org 2002/05/23 19:24:30 2002-06-06 19:57:33 +00:00
progressmeter.c - (djm) OpenBSD CVS Sync 2003-03-20 10:08:05 +11:00
progressmeter.h - fgsch@cvs.openbsd.org 2003/01/10 08:19:07 2003-01-10 21:46:02 +11:00
radix.c - markus@cvs.openbsd.org 2002/09/09 14:54:15 2002-09-12 09:49:15 +10:00
radix.h
readconf.c - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
readconf.h - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
readpass.c - markus@cvs.openbsd.org 2003/01/23 13:50:27 2003-01-24 11:36:23 +11:00
readpass.h
rijndael.c - deraadt@cvs.openbsd.org 2002/07/10 17:53:54 2002-07-11 04:01:29 +00:00
rijndael.h
rsa.c
rsa.h
scard-opensc.c
scard.c - deraadt@cvs.openbsd.org 2002/06/23 03:30:58 2002-06-23 21:23:20 +00:00
scard.h - deraadt@cvs.openbsd.org 2002/06/30 21:59:45 2002-07-04 00:14:17 +00:00
scp.1 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
scp.c - (bal) scp.c 'limit' conflicts with Cray. Rename to 'limitbw' 2003-03-21 00:55:32 +00:00
servconf.c - markus@cvs.openbsd.org 2003/02/21 09:05:53 2003-02-24 12:04:33 +11:00
servconf.h - markus@cvs.openbsd.org 2002/07/30 17:03:55 2002-08-01 01:28:38 +00:00
serverloop.c - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
serverloop.h
session.c - (bal) Disable Privsep for Tru64 after pre-authentication due to issues 2003-03-21 01:18:09 +00:00
session.h - deraadt@cvs.openbsd.org 2002/06/30 21:59:45 2002-07-04 00:14:17 +00:00
sftp-client.c - (djm) OpenBSD CVS Sync 2003-03-10 11:21:17 +11:00
sftp-client.h - djm@cvs.openbsd.org 2002/09/11 22:41:50 2002-09-12 09:54:25 +10:00
sftp-common.c - itojun@cvs.openbsd.org 2002/10/16 14:31:48 2002-11-09 15:40:34 +00:00
sftp-common.h - djm@cvs.openbsd.org 2002/09/11 22:41:50 2002-09-12 09:54:25 +10:00
sftp-glob.c - djm@cvs.openbsd.org 2002/09/11 22:41:50 2002-09-12 09:54:25 +10:00
sftp-glob.h - djm@cvs.openbsd.org 2002/09/11 22:41:50 2002-09-12 09:54:25 +10:00
sftp-int.c - (djm) OpenBSD CVS Sync 2003-03-10 11:21:17 +11:00
sftp-int.h - (djm) OpenBSD CVS Sync 2003-01-10 21:40:00 +11:00
sftp-server.8
sftp-server.c - (djm) OpenBSD CVS Sync 2003-03-26 16:01:11 +11:00
sftp.1 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
sftp.c - fgsch@cvs.openbsd.org 2003/01/10 08:19:07 2003-01-10 21:43:24 +11:00
sftp.h
ssh-add.1 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
ssh-add.c - (djm) OpenBSD CVS Sync 2003-03-10 11:21:17 +11:00
ssh-agent.1 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
ssh-agent.c - markus@cvs.openbsd.org 2003/03/13 11:44:50 2003-03-15 11:37:09 +11:00
ssh-dss.c - markus@cvs.openbsd.org 2003/02/12 09:33:04 2003-02-24 12:01:40 +11:00
ssh-keygen.1 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
ssh-keygen.c - wcobb@cvs.openbsd.org 2002/11/26 00:45:03 2002-12-23 02:11:02 +00:00
ssh-keyscan.1 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
ssh-keyscan.c - markus@cvs.openbsd.org 2003/02/16 17:09:57 2003-02-24 12:03:03 +11:00
ssh-keysign.8 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
ssh-keysign.c - (djm) OpenBSD CVS Sync 2003-03-15 11:36:18 +11:00
ssh-rand-helper.8
ssh-rand-helper.c - (djm) Fix return value checks for RAND_bytes. Report from 2003-03-17 16:13:53 +11:00
ssh-rsa.c - markus@cvs.openbsd.org 2003/02/12 09:33:04 2003-02-24 12:01:40 +11:00
ssh.1 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
ssh.c - markus@cvs.openbsd.org 2003/02/06 09:27:29 2003-02-24 11:57:32 +11:00
ssh.h - (stevesk) [auth-pam.[ch] ssh.h] move SSHD_PAM_SERVICE to auth-pam.h 2002-07-21 23:59:39 +00:00
ssh1.h
ssh2.h
ssh_config - markus@cvs.openbsd.org 2002/07/03 14:21:05 2002-07-04 00:19:40 +00:00
ssh_config.5 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
ssh_prng_cmds.in [ssh_prng_cmds.in] Bug 323 arp -n flag doesn't exist under Solaris. 2002-07-14 14:43:57 -07:00
sshconnect.c - deraadt@cvs.openbsd.org 2002/11/21 23:03:51 2002-12-23 02:06:19 +00:00
sshconnect.h - deraadt@cvs.openbsd.org 2002/06/19 00:27:55 2002-06-21 00:41:51 +00:00
sshconnect1.c - aaron@cvs.openbsd.org 2002/08/08 13:50:23 2002-08-20 18:41:15 +00:00
sshconnect2.c - (djm) OpenBSD CVS Sync 2003-04-09 20:50:06 +10:00
sshd.8 - jmc@cvs.openbsd.org 2003/01/31 21:54:40 2003-02-24 11:52:26 +11:00
sshd.c - (djm) Bug #245: TTY problems on Solaris. Fix by stevesk@ and 2003-03-10 11:38:10 +11:00
sshd_config - (djm) OpenBSD CVS Sync 2002-09-27 13:21:57 +10:00
sshd_config.5 - (djm) OpenBSD CVS Sync 2003-04-01 21:42:14 +10:00
sshlogin.c - (stevesk) [session.c sshlogin.c sshlogin.h] complete portable 2003-01-01 23:43:55 +00:00
sshlogin.h - (stevesk) [session.c sshlogin.c sshlogin.h] complete portable 2003-01-01 23:43:55 +00:00
sshpty.c - markus@cvs.openbsd.org 2003/02/03 08:56:16 2003-02-24 11:54:10 +11:00
sshpty.h
sshtty.c
sshtty.h
tildexpand.c - deraadt@cvs.openbsd.org 2002/06/23 03:25:50 2002-06-23 21:20:34 +00:00
tildexpand.h
ttymodes.c - deraadt@cvs.openbsd.org 2002/06/19 00:27:55 2002-06-21 00:41:51 +00:00
ttymodes.h - (bal) Some platforms don't have ONLCR (Notable Mint) 2002-06-12 17:32:30 +00:00
uidswap.c - (bal) [uidswap.c] SCO compile correction by gert@greenie.muc.de 2002-07-30 19:32:07 +00:00
uidswap.h
uuencode.c - markus@cvs.openbsd.org 2002/09/09 14:54:15 2002-09-12 09:49:15 +10:00
uuencode.h
version.h - markus@cvs.openbsd.org 2003/04/01 10:56:46 2003-04-01 21:45:26 +10:00
xmalloc.c
xmalloc.h - deraadt@cvs.openbsd.org 2002/06/19 00:27:55 2002-06-21 00:41:51 +00:00

README

- A Japanese translation of this document and of the OpenSSH FAQ is 
- available at http://www.unixuser.org/~haruyama/security/openssh/index.html
- Thanks to HARUYAMA Seigo <haruyama@unixuser.org>

This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's sample
implementation with all patent-encumbered algorithms removed (to
external libraries), all known security bugs fixed, new features
reintroduced and many other clean-ups.  OpenSSH has been created by
Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,
and Dug Song. It has a homepage at http://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support (for Linux and Solaris), EGD[1]/PRNGD[2] support and replacements 
for OpenBSD library functions that are (regrettably) absent from other 
unices. This port has been best tested on Linux, Solaris, HP-UX, NetBSD, 
Irix and AIX. Support for SCO, NeXT and other Unices is underway. 
This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[3], OpenSSL[4] and optionally PAM[5].

There is now several mailing lists for this port of OpenSSH. Please
refer to http://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by
unsubscribed users.

If you are a citizen of an USA-embargoed country to which export of 
cryptographic products is restricted, then please refrain from sending 
crypto-related code or patches to the list. We cannot accept them.
Other code contribution are accepted, but please follow the OpenBSD
style guidelines[6].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system. There are a number of differences between this 
port of OpenSSH and F-Secure SSH 1.x, please refer to the OpenSSH FAQ[7]
for details and general tips.

Damien Miller <djm@mindrot.org>

Miscellania - 

This version of OpenSSH is based upon code retrieved from the OpenBSD
CVS repository which in turn was based on the last free sample
implementation released by Tatu Ylonen.

References -

[0] http://www.openssh.com/faq.html
[1] http://www.lothar.com/tech/crypto/
[2] http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html
[3] http://www.gzip.org/zlib/
[4] http://www.openssl.org/
[5] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris
    and HP-UX 11)
[6] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9
[7] http://www.openssh.com/faq.html

$Id: README,v 1.51 2003/01/08 12:28:40 djm Exp $