Damien Miller
7b28dc5eb0
- (djm) Import OpenBSD CVS changes - [email protected] 2000/08/31 15:52:24 [Makefile sshd.8 sshd_config sftp-server.8 sftp-server.c] implement a SFTP server. interops with sftp2, scp2 and the windows client from ssh.com - [email protected] 2000/08/31 15:56:03 [README.openssh2] sync - [email protected] 2000/08/31 16:05:42 [session.c] Wall - [email protected] 2000/08/31 16:09:34 [authfd.c ssh-agent.c] add a flag to SSH2_AGENTC_SIGN_REQUEST for future extensions - [email protected] 2000/09/01 09:25:13 [scp.1 scp.c] cleanup and fix -S support; [email protected] - [email protected] 2000/09/01 16:29:32 [sftp-server.c] portability fixes - [email protected] 2000/09/01 16:32:41 [sftp-server.c] fix cast; [email protected] - [email protected] 2000/09/03 09:23:28 [ssh-add.1 ssh.1] add missing .El against .Bl. - [email protected] 2000/09/04 13:03:41 [session.c] missing close; ok theo - [email protected] 2000/09/04 13:07:21 [session.c] fix get_last_login_time order; from [email protected] - [email protected] 2000/09/04 13:10:09 [sftp-server.c] more cast fixes; from [email protected] - [email protected] 2000/09/04 13:06:04 [session.c] set SSH_ORIGINAL_COMMAND; from [email protected], [email protected] - (djm) Cleanup after import. Fix sftp-server compilation, Makefile
42 lines
1.4 KiB
Plaintext
42 lines
1.4 KiB
Plaintext
$Id: README.openssh2,v 1.9 2000/08/31 21:56:03 markus Exp $
|
|
|
|
howto:
|
|
1) generate server key:
|
|
$ ssh-keygen -d -f /etc/ssh_host_dsa_key -N ''
|
|
2) enable ssh2:
|
|
server: add 'Protocol 2,1' to /etc/sshd_config
|
|
client: ssh -o 'Protocol 2,1', or add to .ssh/config
|
|
3) DSA authentication similar to RSA (add keys to ~/.ssh/authorized_keys2)
|
|
interop w/ ssh.com dsa-keys:
|
|
ssh-keygen -f /key/from/ssh.com -X >> ~/.ssh/authorized_keys2
|
|
and vice versa
|
|
ssh-keygen -f /privatekey/from/openssh -x > ~/.ssh2/mykey.pub
|
|
echo Key mykey.pub >> ~/.ssh2/authorization
|
|
|
|
works:
|
|
secsh-transport: works w/o rekey
|
|
secsh-userauth: passwd and pubkey with DSA
|
|
secsh-connection: pty+shell or command, flow control works (window adjust)
|
|
tcp-forwarding: -L works, -R incomplete
|
|
x11-fwd
|
|
dss/dsa: host key database in ~/.ssh/known_hosts2
|
|
ssh-agent: supports SSH1-RSA and ssh-dss keys
|
|
client interops w/ sshd2, lshd
|
|
server interops w/ ssh2, lsh, ssh.com's Windows client, SecureCRT, F-Secure SSH Client 4.0, SecureFX (secure ftp)
|
|
server supports multiple concurrent sessions (e.g. with SSH.com Windows client)
|
|
server supports SFTP (interops with ssh.com's windows, sftp2, scp2)
|
|
todo:
|
|
RE-KEYING
|
|
secsh-connection features:
|
|
complete tcp-forwarding, agent-fwd
|
|
auth other than passwd, and DSA-pubkey:
|
|
keyboard-interactive, (PGP-pubkey?), kerberos
|
|
config
|
|
server-auth w/ old host-keys
|
|
cleanup
|
|
advanced key storage?
|
|
keynote
|
|
|
|
-markus
|
|
$Date: 2000/08/31 21:56:03 $
|