Portable OpenSSH
Go to file
Damien Miller d344494346 - (djm) CVS OpenBSD sync:
- markus@cvs.openbsd.org  2000/09/26 13:59:59
     [clientloop.c]
     use debug2
   - markus@cvs.openbsd.org  2000/09/27 15:41:34
     [auth2.c sshconnect2.c]
     use key_type()
   - markus@cvs.openbsd.org  2000/09/28 12:03:18
     [channels.c]
     debug -> debug2 cleanup
2000-09-30 14:20:03 +11:00
contrib - (djm) Update X11-askpass to 1.0.2 in RPM spec file 2000-09-26 12:09:48 +11:00
COPYING.Ylonen Updated COPYING file with usage of RC4 1999-10-30 09:46:20 +10:00
CREDITS - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
ChangeLog - (djm) CVS OpenBSD sync: 2000-09-30 14:20:03 +11:00
INSTALL - (djm) Pick up new version (2.2.0) from OpenBSD CVS 2000-08-31 11:13:10 +11:00
Makefile.in - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
OVERVIEW - [OVERVIEW README] typos; green@freebsd 1999-11-21 18:31:57 +11:00
README - (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK 2000-06-26 13:01:33 +10:00
README.Ylonen - OpenBSD CVS update 2000-03-26 13:04:51 +10:00
RFC.nroff Initial revision 1999-10-27 13:42:43 +10:00
TODO - (djm) NeXT tweaks from Ben Lindstrom <mouring@pconline.com> 2000-08-29 14:30:37 +11:00
UPGRADING - Clarified --with-default-path option. 2000-03-17 10:54:15 +11:00
acconfig.h - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
aclocal.m4 - Better fix to aclocal tests from Garrick James <garrick@james.net> 2000-06-26 10:20:19 +10:00
atomicio.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
auth-krb4.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
auth-options.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
auth-options.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
auth-pam.c - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM 2000-09-16 16:09:27 +11:00
auth-pam.h - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM 2000-09-16 16:09:27 +11:00
auth-passwd.c - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
auth-rh-rsa.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
auth-rhosts.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
auth-rsa.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
auth-skey.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
auth.c - (djm) Tweak password expiry checking at suggestion of Kevin Steves 2000-09-23 14:26:32 +11:00
auth.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
auth1.c - (djm) Update CygWin support from Corinna Vinschen <vinschen@cygnus.com> 2000-09-16 16:25:12 +11:00
auth2.c - (djm) CVS OpenBSD sync: 2000-09-30 14:20:03 +11:00
authfd.c - (djm) OpenBSD CVS sync: 2000-09-23 17:15:56 +11:00
authfd.h - (djm) OpenBSD CVS sync: 2000-09-23 17:15:56 +11:00
authfile.c - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
authfile.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
bsd-arc4random.c - (djm) Merged cleanup patch from Mark Miller <markm@swoon.net> 2000-09-24 11:10:13 +11:00
bsd-arc4random.h - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM 2000-09-16 16:09:27 +11:00
bsd-base64.c - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported 2000-05-09 15:28:41 +10:00
bsd-base64.h - Cleanup of bsd-base64 headers, bugfix definitions of __b64_*. Reported 2000-05-09 15:28:41 +10:00
bsd-bindresvport.c - (djm) Fix autoconf typo: HAVE_BINRESVPORT_AF -> HAVE_BINDRESVPORT_AF 2000-07-25 09:04:37 +10:00
bsd-bindresvport.h - (djm) Fix autoconf typo: HAVE_BINRESVPORT_AF -> HAVE_BINDRESVPORT_AF 2000-07-25 09:04:37 +10:00
bsd-daemon.c - (djm) Merge cygwin support from Corinna Vinschen <vinschen@cygnus.com> 2000-09-05 16:13:06 +11:00
bsd-daemon.h - Renamed BSD helper function files to bsd-* 1999-11-19 15:32:34 +11:00
bsd-inet_aton.c - (djm) Replace in_addr_t with u_int32_t in bsd-inet_aton.c. Report from 2000-07-12 11:12:55 +10:00
bsd-inet_aton.h - (djm) Added bsd-inet_aton and configure support for NeXT 2000-07-11 14:54:22 +10:00
bsd-inet_ntoa.c - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc) 2000-08-16 10:35:58 +10:00
bsd-inet_ntoa.h - (djm) Replacement for inet_ntoa for Irix (which breaks on gcc) 2000-08-16 10:35:58 +10:00
bsd-misc.c - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM 2000-09-16 16:09:27 +11:00
bsd-misc.h - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM 2000-09-16 16:09:27 +11:00
bsd-mktemp.c - (djm) Merge cygwin support from Corinna Vinschen <vinschen@cygnus.com> 2000-09-05 16:13:06 +11:00
bsd-mktemp.h - Renamed BSD helper function files to bsd-* 1999-11-19 15:32:34 +11:00
bsd-rresvport.c - (djm) Match prototype and function declaration for rresvport_af. 2000-07-09 21:23:52 +10:00
bsd-rresvport.h - (djm) Use sa_family_t in prototype for rresvport_af. Patch from 2000-06-23 08:23:34 +10:00
bsd-setenv.c - Better tests for OpenSSL w/ RSAref 2000-03-26 12:12:34 +10:00
bsd-setenv.h - Better tests for OpenSSL w/ RSAref 2000-03-26 12:12:34 +10:00
bsd-sigaction.c - (djm) More NeXT compatibility from Ben Lindstrom <mouring@pconline.com> 2000-07-09 23:26:27 +10:00
bsd-sigaction.h Doh - forgot to commit 2000-07-11 12:55:49 +10:00
bsd-snprintf.c - (djm) Support in bsd-snprintf.c for long long conversions from 2000-09-30 09:49:08 +11:00
bsd-snprintf.h Added missing ; 2000-07-11 12:50:08 +10:00
bsd-strlcat.c - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h 1999-11-22 13:57:07 +11:00
bsd-strlcat.h - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h 1999-11-22 13:57:07 +11:00
bsd-strlcpy.c - Renamed BSD helper function files to bsd-* 1999-11-19 15:32:34 +11:00
bsd-strlcpy.h - Renamed BSD helper function files to bsd-* 1999-11-19 15:32:34 +11:00
bsd-strsep.c - (djm) Add strsep function from OpenBSD libc for systems that lack it 2000-07-11 21:34:34 +10:00
bsd-strsep.h - (djm) Add strsep function from OpenBSD libc for systems that lack it 2000-07-11 21:34:34 +10:00
bsd-strtok.c - (djm) Include strtok_r() from OpenBSD libc. Fixes report from Mark Miller 2000-09-24 11:21:31 +11:00
bsd-strtok.h - (djm) Include strtok_r() from OpenBSD libc. Fixes report from Mark Miller 2000-09-24 11:21:31 +11:00
bufaux.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
bufaux.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
buffer.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
buffer.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
canohost.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
channels.c - (djm) CVS OpenBSD sync: 2000-09-30 14:20:03 +11:00
channels.h - (djm) OpenBSD CVS sync: 2000-09-23 17:15:56 +11:00
cipher.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
cipher.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
clientloop.c - (djm) CVS OpenBSD sync: 2000-09-30 14:20:03 +11:00
compat.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
compat.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
compress.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
compress.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
config.guess Latest versions 2000-06-12 23:01:02 +10:00
config.sub Latest versions 2000-06-12 23:01:02 +10:00
configure.in - (djm) Irix ssh_prng_cmds path fix from Pekka Savola <pekkas@netcore.fi> 2000-09-30 09:43:19 +11:00
crc32.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
crc32.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
cygwin_util.c - (djm) Merged cleanup patch from Mark Miller <markm@swoon.net> 2000-09-24 11:10:13 +11:00
cygwin_util.h - (djm) Merged cleanup patch from Mark Miller <markm@swoon.net> 2000-09-24 11:10:13 +11:00
deattack.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
deattack.h - Merged very large OpenBSD source code reformat 1999-11-25 00:26:21 +11:00
defines.h - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
dispatch.c - (djm) OpenBSD CVS sync: 2000-09-23 17:15:56 +11:00
dispatch.h - (djm) OpenBSD CVS sync: 2000-09-23 17:15:56 +11:00
dsa.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
dsa.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
entropy.c - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code, 2000-09-29 12:12:36 +11:00
entropy.h - (djm) Add Steve VanDevender's <stevev@darkwing.uoregon.edu> PAM 2000-09-16 16:09:27 +11:00
fake-gai-errnos.h - Merged OpenBSD IPv6 patch: 2000-01-14 15:45:46 +11:00
fake-getaddrinfo.c - (djm) Fix broken inet_ntoa check and ut_user/ut_name confusion, report 2000-07-11 12:15:54 +10:00
fake-getaddrinfo.h - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp> 2000-01-16 18:19:25 +11:00
fake-getnameinfo.c - (djm) Another off-by-one fix from Pavel Kankovsky 2000-09-29 10:59:14 +11:00
fake-getnameinfo.h - Cleanup of auth.c, login.c and fake-* 2000-05-31 11:20:11 +10:00
fake-socket.h - (djm) Use a real struct sockaddr inside the fake struct sockaddr_storage. 2000-09-16 16:21:28 +11:00
fixpaths - Make fixpaths work with perl4, patch from Andre Lucas 2000-04-20 07:33:24 +10:00
fixprogs Fix fixprogs 2000-09-16 16:10:56 +11:00
getput.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
hmac.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
hmac.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
hostfile.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
hostfile.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
includes.h - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
install-sh - Added BSD compatible install program and autoconf test, thanks to 1999-11-25 12:31:26 +11:00
kex.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
kex.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
key.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
key.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
log-client.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
log-server.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
log.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
login.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
loginrec.c - (djm) Seperate tests for int64_t and u_int64_t types 2000-09-23 14:12:24 +11:00
loginrec.h - (djm) Formatting 2000-06-27 11:18:27 +10:00
logintest.c Added some extra timings to help spot lastlog problems 2000-06-19 08:25:36 +00:00
match.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
match.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
md5crypt.c - Reduce diff against OpenBSD source 2000-04-16 12:31:48 +10:00
md5crypt.h - Portability fixes for Irix 5.3 (now compiles OK!) 1999-12-28 15:09:35 +11:00
mkinstalldirs - HPUX and Configure fixes from Lutz Jaenicke 2000-05-20 15:33:44 +10:00
mpaux.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
mpaux.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
myproposal.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
nchan.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
nchan.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
nchan.ms - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
nchan2.ms - OpenBSD CVS update: 2000-04-04 14:38:59 +10:00
next-posix.c - (djm) Support in bsd-snprintf.c for long long conversions from 2000-09-30 09:49:08 +11:00
next-posix.h - (djm) Support in bsd-snprintf.c for long long conversions from 2000-09-30 09:49:08 +11:00
openbsd-compat.h - (djm) Include strtok_r() from OpenBSD libc. Fixes report from Mark Miller 2000-09-24 11:21:31 +11:00
packet.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
packet.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
pty.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
pty.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
radix.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
readconf.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
readconf.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
readpass.c - OpenBSD CVS Updates: 2000-06-22 21:32:31 +10:00
rsa.c - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code, 2000-09-29 12:12:36 +11:00
rsa.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
scp.1 20000905 2000-09-05 13:34:53 +11:00
scp.c - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
servconf.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
servconf.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
serverloop.c - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with 2000-09-30 14:17:52 +11:00
session.c - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with 2000-09-30 14:17:52 +11:00
session.h - (djm) Fix SSH2 not terminating until all background tasks done problem. 2000-09-29 10:57:35 +11:00
sftp-server.8 - (djm) Redhat spec and manpage fixes from Pekka Savola <pekkas@netcore.fi> 2000-09-23 14:00:09 +11:00
sftp-server.c - (djm) Use printf %lld instead of %qd in sftp-server.c. Fix from 2000-09-23 14:58:32 +11:00
ssh-add.1 - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ssh-add.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ssh-agent.1 - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ssh-agent.c - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
ssh-keygen.1 - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ssh-keygen.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ssh.1 - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ssh.c - (djm) Merged big SCO portability patch from Tim Rice 2000-09-29 23:01:36 +11:00
ssh.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ssh2.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ssh_config - (djm) Periodically rekey arc4random 2000-08-30 09:40:09 +11:00
ssh_prng_cmds.in - (djm) Shadow expiry check fix from Pavel Troller <patrol@omni.sinus.cz> 2000-09-16 15:39:56 +11:00
sshconnect.c - (djm) OpenBSD CVS sync: 2000-09-23 17:15:56 +11:00
sshconnect.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
sshconnect1.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
sshconnect2.c - (djm) CVS OpenBSD sync: 2000-09-30 14:20:03 +11:00
sshd.8 - (djm) OpenBSD CVS sync: 2000-09-23 17:15:56 +11:00
sshd.c - (djm) Support in bsd-snprintf.c for long long conversions from 2000-09-30 09:49:08 +11:00
sshd_config 20000905 2000-09-05 13:34:53 +11:00
tildexpand.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ttymodes.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
ttymodes.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
uidswap.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
uidswap.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
util.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
uuencode.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
uuencode.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
version.h - (djm) Clean up. Strip some unnecessary differences with OpenBSD's code, 2000-09-29 12:12:36 +11:00
xmalloc.c - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00
xmalloc.h - (djm) Merge OpenBSD changes: 2000-09-16 13:29:08 +11:00

README

[ A Japanese translation of this document is available at
[ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html
[ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>

******* IMPORTANT
* On systmes which lack a /dev/random driver, version of this port
* prior to 1.2.2 were not correctly seeding OpenSSL's random number
* pool. This resulted in lower quality RSA keys being generated. If
* you generated host or user keys with v1.2.2 or previous versions, 
* please generate new ones using a more recent version.

This is the port of OpenBSD's excellent OpenSSH to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's SSH with
all patent-encumbered algorithms removed (to external libraries), all
known security bugs fixed, new features reintroduced and many other
clean-ups. More information about SSH itself can be found in the file
README.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck,
Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a
homepage at http://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support (for Linux and Solaris), EGD[1] support and replacements for 
OpenBSD library functions that are (regrettably) absent from other 
unices. This port has been best tested on Linux, Solaris, HPUX, NetBSD 
and Irix. Support for AIX, SCO, NeXT and other Unices is underway. 
This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4].

There is now several mailing lists for this port of OpenSSH. Please
refer to http://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by
unsubscribed users.

If you are a citizen of the USA or another country which restricts 
export of cryptographic products, then please refrain from sending 
crypto-related code or patches to the list. We cannot accept them.
Other code contribution are accepted, but please follow the OpenBSD
style guidelines[5].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system. The UPGRADING document details differences 
between this port of OpenSSH and F-Secure SSH 1.x.

Damien Miller <djm@ibs.com.au>
Internet Business Solutions

Miscellania - 

This version of SSH is based upon code retrieved from the OpenBSD CVS
repository which in turn was based on the last free 
version of SSH released by Tatu Ylonen.

References -

[1] http://www.lothar.com/tech/crypto/
[2] ftp://ftp.freesoftware.com/pub/infozip/zlib/
[3] http://www.openssl.org/
[4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris)
[5] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9&apropos=0&manpath=OpenBSD+Current