зеркало из https://github.com/Azure/sonic-openssh.git
e247cc402b
- Big OpenBSD CVS update - markus@cvs.openbsd.org [clientloop.c] - typo [session.c] - update proctitle on pty alloc/dealloc, e.g. w/ windows client [session.c] - update proctitle for proto 1, too [channels.h nchan.c serverloop.c session.c sshd.c] - use c-style comments - deraadt@cvs.openbsd.org [scp.c] - more atomicio - markus@cvs.openbsd.org [channels.c] - set O_NONBLOCK [ssh.1] - update AUTHOR [readconf.c ssh-keygen.c ssh.h] - default DSA key file ~/.ssh/id_dsa [clientloop.c] - typo, rm verbose debug - deraadt@cvs.openbsd.org [ssh-keygen.1] - document DSA use of ssh-keygen [sshd.8] - a start at describing what i understand of the DSA side [ssh-keygen.1] - document -X and -x [ssh-keygen.c] - simplify usage - markus@cvs.openbsd.org [sshd.8] - there is no rhosts_dsa [ssh-keygen.1] - document -y, update -X,-x [nchan.c] - fix close for non-open ssh1 channels [servconf.c servconf.h ssh.h sshd.8 sshd.c ] - s/DsaKey/HostDSAKey/, document option [sshconnect2.c] - respect number_of_password_prompts [channels.c channels.h servconf.c servconf.h session.c sshd.8] - GatewayPorts for sshd, ok deraadt@ [ssh-add.1 ssh-agent.1 ssh.1] - more doc on: DSA, id_dsa, known_hosts2, authorized_keys2 [ssh.1] - more info on proto 2 [sshd.8] - sync AUTHOR w/ ssh.1 [key.c key.h sshconnect.c] - print key type when talking about host keys [packet.c] - clear padding in ssh2 [dsa.c key.c radix.c ssh.h sshconnect1.c uuencode.c uuencode.h] - replace broken uuencode w/ libc b64_ntop [auth2.c] - log failure before sending the reply [key.c radix.c uuencode.c] - remote trailing comments before calling __b64_pton [auth2.c readconf.c readconf.h servconf.c servconf.h ssh.1] [sshconnect2.c sshd.8] - add DSAAuthetication option to ssh/sshd, document SSH2 in sshd.8 - Bring in b64_ntop and b64_pton from OpenBSD libc (bsd-base64.[ch]) |
||
|---|---|---|
| contrib | ||
| COPYING.Ylonen | ||
| CREDITS | ||
| ChangeLog | ||
| INSTALL | ||
| Makefile.in | ||
| OVERVIEW | ||
| README | ||
| README.Ylonen | ||
| README.openssh2 | ||
| RFC.nroff | ||
| TODO | ||
| UPGRADING | ||
| acconfig.h | ||
| aclocal.m4 | ||
| atomicio.c | ||
| auth-krb4.c | ||
| auth-pam.c | ||
| auth-pam.h | ||
| auth-passwd.c | ||
| auth-rh-rsa.c | ||
| auth-rhosts.c | ||
| auth-rsa.c | ||
| auth-skey.c | ||
| auth.c | ||
| auth.h | ||
| auth1.c | ||
| auth2.c | ||
| authfd.c | ||
| authfd.h | ||
| authfile.c | ||
| authfile.h | ||
| bsd-base64.c | ||
| bsd-base64.h | ||
| bsd-bindresvport.c | ||
| bsd-bindresvport.h | ||
| bsd-daemon.c | ||
| bsd-daemon.h | ||
| bsd-login.c | ||
| bsd-login.h | ||
| bsd-misc.c | ||
| bsd-misc.h | ||
| bsd-mktemp.c | ||
| bsd-mktemp.h | ||
| bsd-rresvport.c | ||
| bsd-rresvport.h | ||
| bsd-setenv.c | ||
| bsd-setenv.h | ||
| bsd-snprintf.c | ||
| bsd-snprintf.h | ||
| bsd-strlcat.c | ||
| bsd-strlcat.h | ||
| bsd-strlcpy.c | ||
| bsd-strlcpy.h | ||
| bufaux.c | ||
| bufaux.h | ||
| buffer.c | ||
| buffer.h | ||
| canohost.c | ||
| channels.c | ||
| channels.h | ||
| cipher.c | ||
| cipher.h | ||
| clientloop.c | ||
| compat.c | ||
| compat.h | ||
| compress.c | ||
| compress.h | ||
| config.guess | ||
| config.sub | ||
| configure.in | ||
| crc32.c | ||
| crc32.h | ||
| deattack.c | ||
| deattack.h | ||
| defines.h | ||
| dispatch.c | ||
| dispatch.h | ||
| dsa.c | ||
| dsa.h | ||
| entropy.c | ||
| entropy.h | ||
| fake-gai-errnos.h | ||
| fake-getaddrinfo.c | ||
| fake-getaddrinfo.h | ||
| fake-getnameinfo.c | ||
| fake-getnameinfo.h | ||
| fake-socket.h | ||
| fingerprint.c | ||
| fingerprint.h | ||
| fixpaths | ||
| getput.h | ||
| hmac.c | ||
| hmac.h | ||
| hostfile.c | ||
| hostfile.h | ||
| includes.h | ||
| install-sh | ||
| kex.c | ||
| kex.h | ||
| key.c | ||
| key.h | ||
| log-client.c | ||
| log-server.c | ||
| log.c | ||
| login.c | ||
| match.c | ||
| match.h | ||
| md5crypt.c | ||
| md5crypt.h | ||
| mpaux.c | ||
| mpaux.h | ||
| myproposal.h | ||
| nchan.c | ||
| nchan.h | ||
| nchan.ms | ||
| nchan2.ms | ||
| packet.c | ||
| packet.h | ||
| pty.c | ||
| pty.h | ||
| radix.c | ||
| readconf.c | ||
| readconf.h | ||
| readpass.c | ||
| rsa.c | ||
| rsa.h | ||
| scp.1 | ||
| scp.c | ||
| servconf.c | ||
| servconf.h | ||
| serverloop.c | ||
| session.c | ||
| session.h | ||
| ssh-add.1 | ||
| ssh-add.c | ||
| ssh-agent.1 | ||
| ssh-agent.c | ||
| ssh-keygen.1 | ||
| ssh-keygen.c | ||
| ssh.1 | ||
| ssh.c | ||
| ssh.h | ||
| ssh2.h | ||
| ssh_config | ||
| ssh_prng_cmds.in | ||
| sshconnect.c | ||
| sshconnect.h | ||
| sshconnect1.c | ||
| sshconnect2.c | ||
| sshd.8 | ||
| sshd.c | ||
| sshd_config | ||
| tildexpand.c | ||
| ttymodes.c | ||
| ttymodes.h | ||
| uidswap.c | ||
| uidswap.h | ||
| uuencode.c | ||
| uuencode.h | ||
| version.h | ||
| xmalloc.c | ||
| xmalloc.h | ||
README
[ A Japanese translation of this document is available at [ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html [ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> ******* IMPORTANT * On systmes which lack a /dev/random driver, this port of * OpenSSH-1.2.2 was not correctly seeding OpenSSL's random number * pool. This resulted in lower quality RSA keys being generated. If * you generated host or user keys with v1.2.2, please generate new * ones using a more recent version. This is the port of OpenBSD's excellent OpenSSH to Linux and other Unices. OpenSSH is based on the last free version of Tatu Ylonen's SSH with all patent-encumbered algorithms removed (to external libraries), all known security bugs fixed, new features reintroduced and many other clean-ups. More information about SSH itself can be found in the file README.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a homepage at http://www.openssh.com/ This port consists of the re-introduction of autoconf support, PAM support (for Linux and Solaris), EGD[1] support, SOCKS support (using the Dante [6] libraries and replacements for OpenBSD library functions that are (regrettably) absent from other unices. This port has been best tested on Linux, Solaris, HPUX, NetBSD and Irix. Support for AIX, SCO, NeXT and other Unices is underway. This version actively tracks changes in the OpenBSD CVS repository. The PAM support is now more functional than the popular packages of commercial ssh-1.2.x. It checks "account" and "session" modules for all logins, not just when using password authentication. OpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4] and Dante[6]. To build the GNOME[5] pass-phrase requester (--with-gnome-askpass), you will need the GNOME libraries installed. There is now several mailing lists for this port of OpenSSH. Please refer to http://violet.ibs.com.au/openssh/list.html for details on how to join. Please send bug reports and patches to the mailing list openssh-unix-dev@mindrot.org. The list is currently open to posting by unsubscribed users. Please refer to the INSTALL document for information on how to install OpenSSH on your system. The UPGRADING document details differences between this port of OpenSSH and F-Secure SSH 1.x. Damien Miller <djm@ibs.com.au> Internet Business Solutions Miscellania - This version of SSH is based upon code retrieved from the OpenBSD CVS repository which in turn was based on the last free version of SSH released by Tatu Ylonen. References - [1] http://www.lothar.com/tech/crypto/ [2] http://www.cdrom.com/pub/infozip/zlib/ [3] http://www.openssl.org/ [4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris) [5] http://www.gnome.org/ [6] http://www.inet.no/dante