Перейти к файлу
Damien Miller f31771810c - jmc@cvs.openbsd.org 2006/01/12 14:44:12
[ssh.1]
     split sections on tcp and x11 forwarding into two sections.
     add an example in the tcp section, based on sth i wrote for ssh faq;
     help + ok: djm markus dtucker
2006-01-14 10:09:13 +11:00
contrib - (dtucker) [contrib/cygwin/ssh-host-config] Make sshd service depend on 2006-01-10 00:02:44 +11:00
openbsd-compat - (djm) [openbsd-compat/port-tun.c] Linux needs linux/if.h too 2006-01-01 21:15:50 +11:00
regress - dtucker@cvs.openbsd.org 2005/12/30 04:36:39 2005-12-14 15:39:20 +11:00
scard
.cvsignore +opensshd.init 2005-06-19 09:10:40 +10:00
CREDITS - (tim) [CREDITS LICENCE auth.c configure.ac defines.h includes.h session.c 2005-08-26 13:15:19 -07:00
ChangeLog - jmc@cvs.openbsd.org 2006/01/12 14:44:12 2006-01-14 10:09:13 +11:00
INSTALL
LICENCE - (tim) [CREDITS LICENCE auth.c configure.ac defines.h includes.h session.c 2005-08-26 13:15:19 -07:00
Makefile.in - (djm) [Makefile.in configure.ac includes.h misc.c] 2006-01-01 19:47:05 +11:00
OVERVIEW
README Bump release note URL 2005-12-01 22:21:04 +11:00
README.dns
README.platform - (dtucker) [README.platform] Add PAM section. 2005-11-05 16:28:35 +11:00
README.privsep - (djm) [README README.privsep] Mention FreeBSD and NetBSD as being 2005-06-05 09:21:41 +10:00
README.smartcard
README.tun - (djm) [README.tun] Add README.tun, missed during sync of tun(4) support 2006-01-02 20:23:18 +11:00
RFC.nroff
TODO
WARNING.RNG
aclocal.m4 - (tim) [aclocal.m4 configure.ac] Delete acconfig.h and add templates to 2005-09-19 09:33:39 -07:00
acss.c - (djm) [acss.c auth-pam.c auth-shadow.c auth-skey.c auth1.c canohost.c] 2005-07-17 17:04:47 +10:00
acss.h
atomicio.c - avsm@cvs.openbsd.org 2005/05/24 17:32:44 2005-05-26 12:23:44 +10:00
atomicio.h - avsm@cvs.openbsd.org 2005/05/24 17:32:44 2005-05-26 12:23:44 +10:00
audit-bsm.c
audit.c -(djm) [audit.c auth1.c auth2.c entropy.c loginrec.c serverloop.c] 2005-07-17 17:26:43 +10:00
audit.h
auth-bsdauth.c
auth-chall.c
auth-krb5.c - dtucker@cvs.openbsd.org 2005/11/21 09:42:10 2005-11-22 19:42:42 +11:00
auth-options.c - reyk@cvs.openbsd.org 2005/12/08 18:34:11 2005-12-13 19:33:19 +11:00
auth-options.h - reyk@cvs.openbsd.org 2005/12/06 22:38:28 2005-12-13 19:29:02 +11:00
auth-pam.c - (dtucker) [auth-pam.c] Bug #1028: send final non-query messages from 2005-09-28 22:33:27 +10:00
auth-pam.h
auth-passwd.c - (djm) OpenBSD CVS Sync 2005-07-26 21:54:11 +10:00
auth-rh-rsa.c - djm@cvs.openbsd.org 2005/07/17 07:17:55 2005-07-17 17:22:45 +10:00
auth-rhosts.c - djm@cvs.openbsd.org 2005/07/17 07:17:55 2005-07-17 17:22:45 +10:00
auth-rsa.c - djm@cvs.openbsd.org 2005/06/17 02:44:33 2005-06-17 12:59:34 +10:00
auth-shadow.c - (djm) [acss.c auth-pam.c auth-shadow.c auth-skey.c auth1.c canohost.c] 2005-07-17 17:04:47 +10:00
auth-sia.c
auth-sia.h
auth-skey.c - (djm) [acss.c auth-pam.c auth-shadow.c auth-skey.c auth1.c canohost.c] 2005-07-17 17:04:47 +10:00
auth.c - (tim) [configure.ac auth.c defines.h session.c openbsd-compat/port-uw.c 2005-08-31 09:59:49 -07:00
auth.h - [auth-krb5.c auth.h gss-serv-krb5.c] Move KRB5CCNAME generation for the MIT 2005-07-07 11:50:20 +10:00
auth1.c -(djm) [audit.c auth1.c auth2.c entropy.c loginrec.c serverloop.c] 2005-07-17 17:26:43 +10:00
auth2-chall.c - djm@cvs.openbsd.org 2005/07/17 07:17:55 2005-07-17 17:22:45 +10:00
auth2-gss.c - stevesk@cvs.openbsd.org 2005/10/13 22:24:31 2005-11-05 15:07:05 +11:00
auth2-hostbased.c
auth2-kbdint.c
auth2-none.c
auth2-passwd.c - (djm) [auth2-kbdint.c auth2-none.c auth2-passwd.c auth2-pubkey.c] 2004-09-11 22:42:09 +10:00
auth2-pubkey.c
auth2.c - (dtucker) [auth2.c] Move start_pam() calls out of if-else block to remove 2005-09-24 12:43:51 +10:00
authfd.c - djm@cvs.openbsd.org 2005/06/17 02:44:33 2005-06-17 12:59:34 +10:00
authfd.h
authfile.c - djm@cvs.openbsd.org 2005/06/17 02:44:33 2005-06-17 12:59:34 +10:00
authfile.h
bufaux.c - djm@cvs.openbsd.org 2005/11/05 05:01:15 2005-11-05 16:04:36 +11:00
bufaux.h
buffer.c
buffer.h
buildpkg.sh.in (tim) [buildpkg.sh.in] grep for $SSHDUID instead of $SSHDGID on /etc/passwd 2005-12-28 14:28:08 -08:00
canohost.c - (djm) OpenBSD CVS Sync 2005-12-31 16:19:53 +11:00
canohost.h
channels.c - (djm) [channels.c] clean up harmless merge error, from reyk@ 2006-01-04 07:27:50 +11:00
channels.h - reyk@cvs.openbsd.org 2005/12/30 15:56:37 2005-12-31 16:22:32 +11:00
cipher-3des1.c
cipher-acss.c - (djm) [acss.c auth-pam.c auth-shadow.c auth-skey.c auth1.c canohost.c] 2005-07-17 17:04:47 +10:00
cipher-aes.c - (dtucker) [cipher-aes.c cipher-ctr.c cipher.c configure.ac 2005-12-19 17:40:40 +11:00
cipher-bf1.c
cipher-ctr.c - (dtucker) [cipher-aes.c cipher-ctr.c cipher.c configure.ac 2005-12-19 17:40:40 +11:00
cipher.c - (dtucker) [cipher-aes.c cipher-ctr.c cipher.c configure.ac 2005-12-19 17:40:40 +11:00
cipher.h
cleanup.c
clientloop.c - reyk@cvs.openbsd.org 2005/12/30 15:56:37 2005-12-31 16:22:32 +11:00
clientloop.h - djm@cvs.openbsd.org 2005/07/04 00:58:43 2005-07-06 09:44:19 +10:00
compat.c
compat.h
compress.c
compress.h
config.guess - (tim) [config.guess config.sub] Update to '2005-05-27' version. 2005-06-01 19:57:45 -07:00
config.sub - (tim) [config.guess config.sub] Update to '2005-05-27' version. 2005-06-01 19:57:45 -07:00
configure.ac - (djm) [configure.ac] Fix linux/if_tun.h test 2006-01-01 21:03:30 +11:00
crc32.c
crc32.h
deattack.c
deattack.h
defines.h - (dtucker) [defines.h] HP-UX system headers define "YES" and "NO" which 2005-12-17 22:04:08 +11:00
dh.c
dh.h
dispatch.c
dispatch.h
dns.c - stevesk@cvs.openbsd.org 2005/10/17 14:13:35 2005-11-05 15:11:15 +11:00
dns.h - stevesk@cvs.openbsd.org 2005/10/17 14:13:35 2005-11-05 15:11:15 +11:00
entropy.c - (dtucker) [entropy.c] Use u_char for receiving RNG seed for consistency 2005-09-28 08:26:30 +10:00
entropy.h - (dtucker) [entropy.c entropy.h sshd.c] Pass RNG seed to the reexec'ed 2005-09-27 22:46:32 +10:00
fatal.c
fixpaths
fixprogs
getput.h
groupaccess.c
groupaccess.h
gss-genr.c - stevesk@cvs.openbsd.org 2005/10/13 22:24:31 2005-11-05 15:07:05 +11:00
gss-serv-krb5.c - stevesk@cvs.openbsd.org 2005/10/13 19:08:08 2005-11-05 15:05:28 +11:00
gss-serv.c - stevesk@cvs.openbsd.org 2005/10/13 22:24:31 2005-11-05 15:07:05 +11:00
hostfile.c - dtucker@cvs.openbsd.org 2005/11/22 03:36:03 2005-11-22 19:43:26 +11:00
hostfile.h
includes.h - stevesk@cvs.openbsd.org 2006/01/01 08:59:27 2006-01-02 23:40:10 +11:00
install-sh
kex.c - djm@cvs.openbsd.org 2005/11/04 05:15:59 2005-11-05 15:19:35 +11:00
kex.h - djm@cvs.openbsd.org 2005/11/04 05:15:59 2005-11-05 15:19:35 +11:00
kexdh.c - djm@cvs.openbsd.org 2005/11/04 05:15:59 2005-11-05 15:19:35 +11:00
kexdhc.c - djm@cvs.openbsd.org 2005/11/04 05:15:59 2005-11-05 15:19:35 +11:00
kexdhs.c - djm@cvs.openbsd.org 2005/11/04 05:15:59 2005-11-05 15:19:35 +11:00
kexgex.c - djm@cvs.openbsd.org 2005/11/04 05:15:59 2005-11-05 15:19:35 +11:00
kexgexc.c - djm@cvs.openbsd.org 2005/11/04 05:15:59 2005-11-05 15:19:35 +11:00
kexgexs.c - djm@cvs.openbsd.org 2005/11/04 05:15:59 2005-11-05 15:19:35 +11:00
key.c - djm@cvs.openbsd.org 2005/06/17 02:44:33 2005-06-17 12:59:34 +10:00
key.h
log.c
log.h
loginrec.c - (dtucker) [loginrec.c] Add casts to prevent compiler warnings, patch 2005-11-22 19:55:13 +11:00
loginrec.h - (djm) [loginrec.c ssh-rand-helper.c] Fix -Wsign-compare for portable, 2005-06-19 10:19:43 +10:00
logintest.c
mac.c - djm@cvs.openbsd.org 2005/06/17 02:44:33 2005-06-17 12:59:34 +10:00
mac.h
match.c - djm@cvs.openbsd.org 2005/06/17 02:44:33 2005-06-17 12:59:34 +10:00
match.h
md5crypt.c
md5crypt.h
mdoc2man.awk - (dtucker) [mdoc2man.awk] Teach it to understand .Ox. 2005-05-31 16:59:16 +10:00
misc.c - djm@cvs.openbsd.org 2006/01/05 23:43:53 2006-01-06 14:50:44 +11:00
misc.h - reyk@cvs.openbsd.org 2005/12/08 18:34:11 2005-12-13 19:33:19 +11:00
mkinstalldirs
moduli
moduli.c - djm@cvs.openbsd.org 2005/07/17 07:17:55 2005-07-17 17:22:45 +10:00
monitor.c - stevesk@cvs.openbsd.org 2005/10/13 22:24:31 2005-11-05 15:07:05 +11:00
monitor.h
monitor_fdpass.c
monitor_fdpass.h
monitor_mm.c
monitor_mm.h
monitor_wrap.c - (dtucker) [monitor_wrap.c] Remove duplicate definition of loginmsg 2005-09-29 22:01:10 +10:00
monitor_wrap.h
msg.c - avsm@cvs.openbsd.org 2005/05/24 17:32:44 2005-05-26 12:23:44 +10:00
msg.h
myproposal.h - markus@cvs.openbsd.org 2005/07/25 11:59:40 2005-07-26 21:54:56 +10:00
nchan.c
nchan.ms
nchan2.ms
opensshd.init.in
packet.c - djm@cvs.openbsd.org 2005/10/30 08:52:18 2005-11-05 15:14:59 +11:00
packet.h - markus@cvs.openbsd.org 2005/07/25 11:59:40 2005-07-26 21:54:56 +10:00
pathnames.h
progressmeter.c - (dtucker) [progressmeter.c scp.c sftp-server.c] Use correct casts for 2005-11-25 14:44:55 +11:00
progressmeter.h
readconf.c - reyk@cvs.openbsd.org 2005/12/08 18:34:11 2005-12-13 19:33:19 +11:00
readconf.h - reyk@cvs.openbsd.org 2005/12/06 22:38:28 2005-12-13 19:29:02 +11:00
readpass.c - markus@cvs.openbsd.org 2005/05/02 21:13:22 2005-05-26 12:07:47 +10:00
rijndael.c
rijndael.h
rsa.c
rsa.h
scard-opensc.c
scard.c
scard.h
scp.1
scp.c - reyk@cvs.openbsd.org 2005/12/06 22:38:28 2005-12-13 19:29:02 +11:00
servconf.c - reyk@cvs.openbsd.org 2005/12/08 18:34:11 2005-12-13 19:33:19 +11:00
servconf.h - reyk@cvs.openbsd.org 2005/12/06 22:38:28 2005-12-13 19:29:02 +11:00
serverloop.c - (djm) [openbsd-compat/port-tun.c openbsd-compat/port-tun.h configure.ac] 2005-12-31 16:33:36 +11:00
serverloop.h
session.c - djm@cvs.openbsd.org 2005/12/24 02:27:41 2005-12-24 14:59:12 +11:00
session.h - (djm) [auth-pam.c sftp.c] spaces vs. tabs at start of line 2005-07-17 17:19:24 +10:00
sftp-client.c - djm@cvs.openbsd.org 2006/01/02 01:20:31 2006-01-02 23:40:50 +11:00
sftp-client.h - jmc@cvs.openbsd.org 2005/04/26 12:59:02 2005-05-26 12:05:49 +10:00
sftp-common.c
sftp-common.h - djm@cvs.openbsd.org 2006/01/02 01:20:31 2006-01-02 23:40:50 +11:00
sftp-glob.c
sftp-server.8
sftp-server.c - djm@cvs.openbsd.org 2006/01/02 01:20:31 2006-01-02 23:40:50 +11:00
sftp.1 - jmc@cvs.openbsd.org 2005/12/30 16:59:00 2005-12-31 16:22:55 +11:00
sftp.c - reyk@cvs.openbsd.org 2005/12/06 22:38:28 2005-12-13 19:29:02 +11:00
sftp.h
ssh-add.1 - djm@cvs.openbsd.org 2005/04/21 06:17:50 2005-05-26 12:04:02 +10:00
ssh-add.c - deraadt@cvs.openbsd.org 2005/11/12 18:37:59 2005-11-22 19:37:08 +11:00
ssh-agent.1 - dtucker@cvs.openbsd.org 2005/11/28 06:02:56 2005-11-28 17:05:40 +11:00
ssh-agent.c - djm@cvs.openbsd.org 2005/10/30 08:52:18 2005-11-05 15:14:59 +11:00
ssh-dss.c
ssh-gss.h
ssh-keygen.1 [ssh-keygen.1 ssh-keygen.c] 2005-11-28 16:41:46 +11:00
ssh-keygen.c - dtucker@cvs.openbsd.org 2005/11/29 02:04:55 2005-11-29 13:10:24 +11:00
ssh-keyscan.1 - jaredy@cvs.openbsd.org 2005/09/30 20:34:26 2005-10-03 18:20:28 +10:00
ssh-keyscan.c - djm@cvs.openbsd.org 2005/10/30 04:01:03 2005-11-05 15:12:28 +11:00
ssh-keysign.8
ssh-keysign.c - djm@cvs.openbsd.org 2005/09/13 23:40:07 2005-10-03 18:11:24 +10:00
ssh-rand-helper.8
ssh-rand-helper.c -(djm) [audit.c auth1.c auth2.c entropy.c loginrec.c serverloop.c] 2005-07-17 17:26:43 +10:00
ssh-rsa.c - djm@cvs.openbsd.org 2005/06/17 02:44:33 2005-06-17 12:59:34 +10:00
ssh.1 - jmc@cvs.openbsd.org 2006/01/12 14:44:12 2006-01-14 10:09:13 +11:00
ssh.c - (djm) [openbsd-compat/port-tun.c openbsd-compat/port-tun.h configure.ac] 2005-12-31 16:33:36 +11:00
ssh.h
ssh1.h
ssh2.h
ssh_config - reyk@cvs.openbsd.org 2005/12/06 22:38:28 2005-12-13 19:29:02 +11:00
ssh_config.5 - (djm) OpenBSD CVS Sync 2006-01-03 18:47:31 +11:00
ssh_prng_cmds.in
sshconnect.c - reyk@cvs.openbsd.org 2005/12/06 22:38:28 2005-12-13 19:29:02 +11:00
sshconnect.h - reyk@cvs.openbsd.org 2005/12/06 22:38:28 2005-12-13 19:29:02 +11:00
sshconnect1.c - djm@cvs.openbsd.org 2005/10/30 08:52:18 2005-11-05 15:14:59 +11:00
sshconnect2.c - stevesk@cvs.openbsd.org 2005/10/14 02:17:59 2005-11-05 15:07:33 +11:00
sshd.8 - stevesk@cvs.openbsd.org 2005/12/21 22:44:26 2005-12-24 14:55:16 +11:00
sshd.c - djm@cvs.openbsd.org 2005/12/24 02:27:41 2005-12-24 14:59:12 +11:00
sshd_config - reyk@cvs.openbsd.org 2005/12/06 22:38:28 2005-12-13 19:29:02 +11:00
sshd_config.5 - (djm) OpenBSD CVS Sync 2006-01-03 18:47:31 +11:00
sshlogin.c
sshlogin.h
sshpty.c - (dtucker) [acconfig.h configure.ac defines.h includes.h sshpty.c 2005-05-27 21:13:40 +10:00
sshpty.h
sshtty.c
survey.sh.in
ttymodes.c - (djm) [ttymodes.c] bugzilla #1054: Fix encoding of _POSIX_VDISABLE, 2005-08-16 21:32:09 +10:00
ttymodes.h
uidswap.c
uidswap.h
uuencode.c
uuencode.h
version.h - markus@cvs.openbsd.org 2005/08/31 09:28:42 2005-08-31 19:47:07 +10:00
xmalloc.c
xmalloc.h

README

See http://www.openssh.com/txt/release-4.3 for the release notes.

- A Japanese translation of this document and of the OpenSSH FAQ is
- available at http://www.unixuser.org/~haruyama/security/openssh/index.html
- Thanks to HARUYAMA Seigo <haruyama@unixuser.org>

This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's sample
implementation with all patent-encumbered algorithms removed (to
external libraries), all known security bugs fixed, new features
reintroduced and many other clean-ups.  OpenSSH has been created by
Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,
and Dug Song. It has a homepage at http://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support, EGD[1]/PRNGD[2] support and replacements for OpenBSD library
functions that are (regrettably) absent from other unices. This port
has been best tested on AIX, Cygwin, HP-UX, Linux, MacOS/X,
NetBSD, OpenBSD, OpenServer, Solaris, Unicos, and UnixWare.

This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[3], OpenSSL[4] and optionally PAM[5].

There is now several mailing lists for this port of OpenSSH. Please
refer to http://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by
unsubscribed users.Code contribution are welcomed, but please follow the 
OpenBSD style guidelines[6].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system. There are a number of differences between this
port of OpenSSH and F-Secure SSH 1.x, please refer to the OpenSSH FAQ[7]
for details and general tips.

Damien Miller <djm@mindrot.org>

Miscellania -

This version of OpenSSH is based upon code retrieved from the OpenBSD
CVS repository which in turn was based on the last free sample
implementation released by Tatu Ylonen.

References -

[0] http://www.openssh.com/faq.html
[1] http://www.lothar.com/tech/crypto/
[2] http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html
[3] http://www.gzip.org/zlib/
[4] http://www.openssl.org/
[5] http://www.openpam.org
    http://www.kernel.org/pub/linux/libs/pam/ 
    (PAM also is standard on Solaris and HP-UX 11)
[6] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9
[7] http://www.openssh.com/faq.html

$Id: README,v 1.61 2005/12/01 11:21:04 dtucker Exp $