diff options
Diffstat (limited to 'sshd.8')
-rw-r--r-- | sshd.8 | 18 |
1 files changed, 9 insertions, 9 deletions
@@ -9,7 +9,7 @@ | |||
9 | .\" | 9 | .\" |
10 | .\" Created: Sat Apr 22 21:55:14 1995 ylo | 10 | .\" Created: Sat Apr 22 21:55:14 1995 ylo |
11 | .\" | 11 | .\" |
12 | .\" $Id: sshd.8,v 1.18 2000/04/20 13:27:27 damien Exp $ | 12 | .\" $Id: sshd.8,v 1.19 2000/05/01 11:10:34 damien Exp $ |
13 | .\" | 13 | .\" |
14 | .Dd September 25, 1999 | 14 | .Dd September 25, 1999 |
15 | .Dt SSHD 8 | 15 | .Dt SSHD 8 |
@@ -31,7 +31,7 @@ | |||
31 | .Nm | 31 | .Nm |
32 | (Secure Shell Daemon) is the daemon program for | 32 | (Secure Shell Daemon) is the daemon program for |
33 | .Xr ssh 1 . | 33 | .Xr ssh 1 . |
34 | Together these programs replace rlogin and rsh programs, and | 34 | Together these programs replace rlogin and rsh, and |
35 | provide secure encrypted communications between two untrusted hosts | 35 | provide secure encrypted communications between two untrusted hosts |
36 | over an insecure network. | 36 | over an insecure network. |
37 | The programs are intended to be as easy to | 37 | The programs are intended to be as easy to |
@@ -56,19 +56,19 @@ the daemon starts, it generates a server RSA key (normally 768 bits). | |||
56 | This key is normally regenerated every hour if it has been used, and | 56 | This key is normally regenerated every hour if it has been used, and |
57 | is never stored on disk. | 57 | is never stored on disk. |
58 | .Pp | 58 | .Pp |
59 | Whenever a client connects the daemon, the daemon sends its host | 59 | Whenever a client connects the daemon responds with its public |
60 | and server public keys to the client. | 60 | host and server keys. |
61 | The client compares the | 61 | The client compares the |
62 | host key against its own database to verify that it has not changed. | 62 | host key against its own database to verify that it has not changed. |
63 | The client then generates a 256 bit random number. | 63 | The client then generates a 256 bit random number. |
64 | It encrypts this | 64 | It encrypts this |
65 | random number using both the host key and the server key, and sends | 65 | random number using both the host key and the server key, and sends |
66 | the encrypted number to the server. | 66 | the encrypted number to the server. |
67 | Both sides then start to use this | 67 | Both sides then use this |
68 | random number as a session key which is used to encrypt all further | 68 | random number as a session key which is used to encrypt all further |
69 | communications in the session. | 69 | communications in the session. |
70 | The rest of the session is encrypted | 70 | The rest of the session is encrypted |
71 | using a conventional cipher, currently Blowfish and 3DES, with 3DES | 71 | using a conventional cipher, currently Blowfish or 3DES, with 3DES |
72 | being used by default. | 72 | being used by default. |
73 | The client selects the encryption algorithm | 73 | The client selects the encryption algorithm |
74 | to use from those offered by the server. | 74 | to use from those offered by the server. |
@@ -95,7 +95,7 @@ are disabled (thus completely disabling | |||
95 | .Xr rlogin 1 | 95 | .Xr rlogin 1 |
96 | and | 96 | and |
97 | .Xr rsh 1 | 97 | .Xr rsh 1 |
98 | into that machine). | 98 | into the machine). |
99 | .Pp | 99 | .Pp |
100 | If the client successfully authenticates itself, a dialog for | 100 | If the client successfully authenticates itself, a dialog for |
101 | preparing the session is entered. | 101 | preparing the session is entered. |
@@ -188,9 +188,9 @@ authentication, and termination of each connection is logged. | |||
188 | Do not print an error message if RSA support is missing. | 188 | Do not print an error message if RSA support is missing. |
189 | .It Fl V Ar client_protocol_id | 189 | .It Fl V Ar client_protocol_id |
190 | SSH2 compatibility mode. | 190 | SSH2 compatibility mode. |
191 | When this options is specified | 191 | When this option is specified |
192 | .Nm | 192 | .Nm |
193 | assumes the client has sent the given version string | 193 | assumes the client has sent the supplied version string |
194 | and skips the | 194 | and skips the |
195 | Protocol Version Identification Exchange. | 195 | Protocol Version Identification Exchange. |
196 | .It Fl 4 | 196 | .It Fl 4 |