From 78928793fb23a3a4c80ae62eca6a7826b2987690 Mon Sep 17 00:00:00 2001 From: Damien Miller Date: Wed, 12 Apr 2000 20:17:38 +1000 Subject: - OpenBSD CVS updates: - [channels.c] repair x11-fwd - [sshconnect.c] fix passwd prompt for ssh2, less debugging output. - [clientloop.c compat.c dsa.c kex.c sshd.c] less debugging output - [kex.c kex.h sshconnect.c sshd.c] check for reasonable public DH values - [README.openssh2 cipher.c cipher.h compat.c compat.h readconf.c] [readconf.h servconf.c servconf.h ssh.c ssh.h sshconnect.c sshd.c] add Cipher and Protocol options to ssh/sshd, e.g.: ssh -o 'Protocol 1,2' if you prefer proto 1, ssh -o 'Ciphers arcfour,3des-cbc' - [sshd.c] print 1.99 only if server supports both --- README.openssh2 | 19 ++++++++++++------- 1 file changed, 12 insertions(+), 7 deletions(-) (limited to 'README.openssh2') diff --git a/README.openssh2 b/README.openssh2 index 59f8cf9f6..bdf78bf58 100644 --- a/README.openssh2 +++ b/README.openssh2 @@ -1,4 +1,13 @@ -$Id: README.openssh2,v 1.2 2000/04/06 21:28:22 markus Exp $ +$Id: README.openssh2,v 1.3 2000/04/12 07:45:43 markus Exp $ + +howto: + 1) generate server key: + $ umask 077 + $ openssl dsaparam 1024 -out dsa1024.pem + $ openssl gendsa -out /etc/ssh_dsa_key dsa1024.pem -rand /dev/arandom + 2) enable ssh2: + server: add 'Protocol 2,1' to /etc/sshd_config + client: ssh -o 'Protocol 2,1', or add to .ssh/config works: secsh-transport: works w/o rekey @@ -11,11 +20,7 @@ works: tcp-forwarding: -L works dss: verification works, key database in ~/.ssh/known_hosts with bits == 0 hack - dss: signature works, keygen w/ openssl: - $ umask 077 - $ openssl dsaparam 1024 -out dsa1024.pem - $ openssl gendsa -out /etc/ssh_dsa_key dsa1024.pem -rand /dev/arandom - start sshd with '-2' flag + dss: signature works, keygen w/ openssl client interops w/ sshd2, lshd server interops w/ ssh2, lsh, ssh.com's Windows client, SecureCRT server supports multiple concurrent sessions (e.g. with SSH.com Windows client) @@ -33,4 +38,4 @@ todo: sftp -markus -$Date: 2000/04/06 21:28:22 $ +$Date: 2000/04/12 07:45:43 $ -- cgit v1.2.3