- Merge big update to OpenSSH-2.0 from OpenBSD CVS

   [README.openssh2]
   - interop w/ F-secure windows client
   - sync documentation
   - ssh_host_dsa_key not ssh_dsa_key
   [auth-rsa.c]
   - missing fclose
   [auth.c authfile.c compat.c dsa.c dsa.h hostfile.c key.c key.h radix.c]
   [readconf.c readconf.h ssh-add.c ssh-keygen.c ssh.c ssh.h sshconnect.c]
   [sshd.c uuencode.c uuencode.h authfile.h]
   - add DSA pubkey auth and other SSH2 fixes.  use ssh-keygen -[xX]
     for trading keys with the real and the original SSH, directly from the
     people who invented the SSH protocol.
   [auth.c auth.h authfile.c sshconnect.c auth1.c auth2.c sshconnect.h]
   [sshconnect1.c sshconnect2.c]
   - split auth/sshconnect in one file per protocol version
   [sshconnect2.c]
   - remove debug
   [uuencode.c]
   - add trailing =
   [version.h]
   - OpenSSH-2.0
   [ssh-keygen.1 ssh-keygen.c]
   - add -R flag: exit code indicates if RSA is alive
   [sshd.c]
   - remove unused
     silent if -Q is specified
   [ssh.h]
   - host key becomes /etc/ssh_host_dsa_key
   [readconf.c servconf.c ]
   - ssh/sshd default to proto 1 and 2
   [uuencode.c]
   - remove debug
   [auth2.c ssh-keygen.c sshconnect2.c sshd.c]
   - xfree DSA blobs
   [auth2.c serverloop.c session.c]
   - cleanup logging for sshd/2, respect PasswordAuth no
   [sshconnect2.c]
   - less debug, respect .ssh/config
   [README.openssh2 channels.c channels.h]
   - clientloop.c session.c ssh.c
   - support for x11-fwding, client+server

1 files changed, 9 insertions, 6 deletions

diff --git a/README.openssh2 b/README.openssh2
index bdf78bf58..fca3173ae 100644
--- a/README.openssh2
+++ b/README.openssh2
@@ -1,13 +1,16 @@
-$Id: README.openssh2,v 1.3 2000/04/12 07:45:43 markus Exp $
+$Id: README.openssh2,v 1.6 2000/04/27 13:42:58 provos Exp $
 
 howto:
         1) generate server key:
-                $ umask 077
-                $ openssl dsaparam 1024 -out dsa1024.pem
-                $ openssl gendsa -out /etc/ssh_dsa_key dsa1024.pem -rand /dev/arandom
+                $ ssh-keygen -d -f /etc/ssh_host_dsa_key -N ''
         2) enable ssh2:
                 server: add 'Protocol 2,1' to /etc/sshd_config
                 client: ssh -o 'Protocol 2,1', or add to .ssh/config
+        3) interop w/ ssh.com dsa-keys:
+                ssh-keygen -f /key/from/ssh.com -X >> ~/.ssh/authorized_keys2
+           and vice versa
+                ssh-keygen -f /privatekey/from/openssh -x > ~/.ssh2/mykey.pub
+                echo Key mykey.pub >> ~/.ssh2/authorization
 
 works:
         secsh-transport: works w/o rekey
@@ -22,7 +25,7 @@ works:
                 key database in ~/.ssh/known_hosts with bits == 0 hack
         dss: signature works, keygen w/ openssl
         client interops w/ sshd2, lshd
-        server interops w/ ssh2, lsh, ssh.com's Windows client, SecureCRT
+        server interops w/ ssh2, lsh, ssh.com's Windows client, SecureCRT, F-Secure SSH Client 4.0
         server supports multiple concurrent sessions (e.g. with SSH.com Windows client)
 todo:
         re-keying
@@ -38,4 +41,4 @@ todo:
         sftp
 
 -markus
-$Date: 2000/04/12 07:45:43 $
+$Date: 2000/04/27 13:42:58 $