diff options
author | Damien Miller <djm@mindrot.org> | 2000-05-09 15:05:45 +1000 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2000-05-09 15:05:45 +1000 |
commit | 2a44f8938d5ea02aa622bc3106988db26d9d74d6 (patch) | |
tree | 7240e3c0b8a236c90b24cf08925a0df40a664597 /README.openssh2 | |
parent | 82f88755e90bc62e4cbcfce6079666ba5942e477 (diff) |
bad checkin mode
Diffstat (limited to 'README.openssh2')
-rw-r--r-- | README.openssh2 | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/README.openssh2 b/README.openssh2 new file mode 100644 index 000000000..12c90aa31 --- /dev/null +++ b/README.openssh2 | |||
@@ -0,0 +1,44 @@ | |||
1 | $Id: README.openssh2,v 1.8 2000/05/07 18:30:03 markus Exp $ | ||
2 | |||
3 | howto: | ||
4 | 1) generate server key: | ||
5 | $ ssh-keygen -d -f /etc/ssh_host_dsa_key -N '' | ||
6 | 2) enable ssh2: | ||
7 | server: add 'Protocol 2,1' to /etc/sshd_config | ||
8 | client: ssh -o 'Protocol 2,1', or add to .ssh/config | ||
9 | 3) DSA authentication similar to RSA (add keys to ~/.ssh/authorized_keys2) | ||
10 | interop w/ ssh.com dsa-keys: | ||
11 | ssh-keygen -f /key/from/ssh.com -X >> ~/.ssh/authorized_keys2 | ||
12 | and vice versa | ||
13 | ssh-keygen -f /privatekey/from/openssh -x > ~/.ssh2/mykey.pub | ||
14 | echo Key mykey.pub >> ~/.ssh2/authorization | ||
15 | |||
16 | works: | ||
17 | secsh-transport: works w/o rekey | ||
18 | proposal exchange, i.e. different enc/mac/comp per direction | ||
19 | encryption: blowfish-cbc, 3des-cbc, arcfour, cast128-cbc | ||
20 | mac: hmac-md5, hmac-sha1, (hmac-ripemd160) | ||
21 | compression: zlib, none | ||
22 | secsh-userauth: passwd and pubkey with DSA | ||
23 | secsh-connection: pty+shell or command, flow control works (window adjust) | ||
24 | tcp-forwarding: -L works, -R incomplete | ||
25 | x11-fwd | ||
26 | dss/dsa: host key database in ~/.ssh/known_hosts2 | ||
27 | client interops w/ sshd2, lshd | ||
28 | server interops w/ ssh2, lsh, ssh.com's Windows client, SecureCRT, F-Secure SSH Client 4.0, SecureFX (secure ftp) | ||
29 | server supports multiple concurrent sessions (e.g. with SSH.com Windows client) | ||
30 | todo: | ||
31 | re-keying | ||
32 | secsh-connection features: | ||
33 | tcp-forwarding, agent-fwd | ||
34 | auth other than passwd, and DSA-pubkey: | ||
35 | keyboard-interactive, (PGP-pubkey?) | ||
36 | config | ||
37 | server-auth w/ old host-keys | ||
38 | cleanup | ||
39 | advanced key storage? | ||
40 | keynote | ||
41 | sftp | ||
42 | |||
43 | -markus | ||
44 | $Date: 2000/05/07 18:30:03 $ | ||