]>
Commit | Line | Data |
---|---|---|
6b1f3fdb | 1 | [ A Japanese translation of this document is available at |
2 | [ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html | |
3 | [ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> | |
4 | ||
e21f1caa | 5 | ******* IMPORTANT |
6 | * On systmes which lack a /dev/random driver, this port of | |
7 | * OpenSSH-1.2.2 was not correctly seeding OpenSSL's random number | |
8 | * pool. This resulted in lower quality RSA keys being generated. If | |
9 | * you generated host or user keys with v1.2.2, please generate new | |
10 | * ones using a more recent version. | |
11 | ||
06479889 | 12 | This is the port of OpenBSD's excellent OpenSSH to Linux and other |
13 | Unices. | |
8efc0c15 | 14 | |
97784962 | 15 | OpenSSH is based on the last free version of Tatu Ylonen's SSH with |
1cbe6fb2 | 16 | all patent-encumbered algorithms removed (to external libraries), all |
17 | known security bugs fixed, new features reintroduced and many other | |
18 | clean-ups. More information about SSH itself can be found in the file | |
19 | README.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck, | |
20 | Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a | |
21 | homepage at http://www.openssh.com/ | |
8efc0c15 | 22 | |
4f6716dc | 23 | This port consists of the re-introduction of autoconf support, PAM |
1cbe6fb2 | 24 | support (for Linux and Solaris), EGD[1] support, SOCKS support (using |
25 | the Dante [6] libraries and replacements for OpenBSD library functions | |
26 | that are (regrettably) absent from other unices. This port has been | |
27 | best tested on Linux, Solaris, HPUX, NetBSD and Irix. Support for AIX, | |
28 | SCO, NeXT and other Unices is underway. This version actively tracks | |
29 | changes in the OpenBSD CVS repository. | |
8efc0c15 | 30 | |
97784962 | 31 | The PAM support is now more functional than the popular packages of |
32 | commercial ssh-1.2.x. It checks "account" and "session" modules for | |
4ae1982f | 33 | all logins, not just when using password authentication. |
8efc0c15 | 34 | |
97784962 | 35 | All new code is released under a XFree style license, which is very |
aa51e7cc | 36 | liberal. Please refer to the source files for details. The code in |
beb43d31 | 37 | bsd-*.[ch] is from the OpenBSD project and has its own license (again, |
38 | see the source files for details). | |
aa51e7cc | 39 | |
0bc5b6fb | 40 | OpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4] and |
41 | Dante[6]. To build the GNOME[5] pass-phrase requester | |
42 | (--with-gnome-askpass), you will need the GNOME libraries installed. | |
43 | If you are building OpenSSH on a Unix which lacks a kernel random | |
44 | number pool (/dev/random), you will need to install EGD[1]. | |
aa51e7cc | 45 | |
1cbe6fb2 | 46 | There is now several mailing lists for this port of OpenSSH. Please |
47 | refer to http://violet.ibs.com.au/openssh/list.html for details on how | |
48 | to join. | |
c6ab4a33 | 49 | |
1cbe6fb2 | 50 | Please send bug reports and patches to the mailing list |
51 | openssh-unix-dev@mindrot.org. The list is currently open to posting by | |
52 | unsubscribed users. | |
7303768f | 53 | |
8bc7973f | 54 | Please refer to the INSTALL document for information on how to install |
1cbe6fb2 | 55 | OpenSSH on your system. The UPGRADING document details differences |
56 | between this port of OpenSSH and F-Secure SSH 1.x. | |
4ae1982f | 57 | |
97784962 | 58 | Damien Miller <djm@ibs.com.au> |
59 | Internet Business Solutions | |
8efc0c15 | 60 | |
97784962 | 61 | Miscellania - |
8efc0c15 | 62 | |
97784962 | 63 | This version of SSH is based upon code retrieved from the OpenBSD CVS |
1cbe6fb2 | 64 | repository which in turn was based on the last free |
4f080ebe | 65 | version of SSH released by Tatu Ylonen. |
8efc0c15 | 66 | |
1cbe6fb2 | 67 | Code in bsd-misc.[ch] and gnome-ssh-askpass.c is Copyright 1999 Damien |
68 | Miller & Internet Business Solutions and is released under a X11-style | |
4f080ebe | 69 | license (see source files for details). |
8efc0c15 | 70 | |
e1a9c08d | 71 | References - |
72 | ||
4f6716dc | 73 | [1] http://www.lothar.com/tech/crypto/ |
74 | [2] http://www.cdrom.com/pub/infozip/zlib/ | |
75 | [3] http://www.openssl.org/ | |
76 | [4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris) | |
77 | [5] http://www.gnome.org/ | |
0bc5b6fb | 78 | [6] http://www.inet.no/dante |
4f080ebe | 79 |