aboutsummaryrefslogtreecommitdiff
path: root/crypto/openssh/README.openssh2
diff options
context:
space:
mode:
authorKris Kennaway <kris@FreeBSD.org>2000-05-15 04:37:24 +0000
committerKris Kennaway <kris@FreeBSD.org>2000-05-15 04:37:24 +0000
commita04a10f8915401e0ac20dce0ade6c5b6e1bb13da (patch)
tree772b9de8852fb4c32957c00639a4fd5460f8a62b /crypto/openssh/README.openssh2
parenta8f6863aa612ce6941e7bad9cf809a8d0608a7ca (diff)
downloadsrc-a04a10f8915401e0ac20dce0ade6c5b6e1bb13da.tar.gz
src-a04a10f8915401e0ac20dce0ade6c5b6e1bb13da.zip
Notes
Diffstat (limited to 'crypto/openssh/README.openssh2')
-rw-r--r--crypto/openssh/README.openssh244
1 files changed, 44 insertions, 0 deletions
diff --git a/crypto/openssh/README.openssh2 b/crypto/openssh/README.openssh2
new file mode 100644
index 000000000000..12c90aa31690
--- /dev/null
+++ b/crypto/openssh/README.openssh2
@@ -0,0 +1,44 @@
+$Id: README.openssh2,v 1.8 2000/05/07 18:30:03 markus Exp $
+
+howto:
+ 1) generate server key:
+ $ ssh-keygen -d -f /etc/ssh_host_dsa_key -N ''
+ 2) enable ssh2:
+ server: add 'Protocol 2,1' to /etc/sshd_config
+ client: ssh -o 'Protocol 2,1', or add to .ssh/config
+ 3) DSA authentication similar to RSA (add keys to ~/.ssh/authorized_keys2)
+ interop w/ ssh.com dsa-keys:
+ ssh-keygen -f /key/from/ssh.com -X >> ~/.ssh/authorized_keys2
+ and vice versa
+ ssh-keygen -f /privatekey/from/openssh -x > ~/.ssh2/mykey.pub
+ echo Key mykey.pub >> ~/.ssh2/authorization
+
+works:
+ secsh-transport: works w/o rekey
+ proposal exchange, i.e. different enc/mac/comp per direction
+ encryption: blowfish-cbc, 3des-cbc, arcfour, cast128-cbc
+ mac: hmac-md5, hmac-sha1, (hmac-ripemd160)
+ compression: zlib, none
+ secsh-userauth: passwd and pubkey with DSA
+ secsh-connection: pty+shell or command, flow control works (window adjust)
+ tcp-forwarding: -L works, -R incomplete
+ x11-fwd
+ dss/dsa: host key database in ~/.ssh/known_hosts2
+ client interops w/ sshd2, lshd
+ server interops w/ ssh2, lsh, ssh.com's Windows client, SecureCRT, F-Secure SSH Client 4.0, SecureFX (secure ftp)
+ server supports multiple concurrent sessions (e.g. with SSH.com Windows client)
+todo:
+ re-keying
+ secsh-connection features:
+ tcp-forwarding, agent-fwd
+ auth other than passwd, and DSA-pubkey:
+ keyboard-interactive, (PGP-pubkey?)
+ config
+ server-auth w/ old host-keys
+ cleanup
+ advanced key storage?
+ keynote
+ sftp
+
+-markus
+$Date: 2000/05/07 18:30:03 $