blob: 450d81c5cce445d183470477a6c456d7bb8fe4fa [file] [log] [blame]
Damien Miller17872522000-02-02 20:56:20 +11001[ A Japanese translation of this document is available at
2[ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html
3[ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
4
Damien Miller5a88b6e2000-03-07 22:40:57 +11005******* IMPORTANT
6* On systmes which lack a /dev/random driver, this port of
7* OpenSSH-1.2.2 was not correctly seeding OpenSSL's random number
8* pool. This resulted in lower quality RSA keys being generated. If
9* you generated host or user keys with v1.2.2, please generate new
10* ones using a more recent version.
11
Damien Miller5bbbd361999-11-19 07:56:21 +110012This is the port of OpenBSD's excellent OpenSSH to Linux and other
13Unices.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100014
Damien Miller5ffa6441999-10-30 11:30:35 +100015OpenSSH is based on the last free version of Tatu Ylonen's SSH with
Damien Millerf20c2aa2000-01-06 20:28:41 +110016all patent-encumbered algorithms removed (to external libraries), all
17known security bugs fixed, new features reintroduced and many other
18clean-ups. More information about SSH itself can be found in the file
19README.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck,
20Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a
21homepage at http://www.openssh.com/
Damien Millerd4a8b7e1999-10-27 13:42:43 +100022
Damien Miller56825a11999-11-11 10:50:04 +110023This port consists of the re-introduction of autoconf support, PAM
Damien Millerf20c2aa2000-01-06 20:28:41 +110024support (for Linux and Solaris), EGD[1] support, SOCKS support (using
25the Dante [6] libraries and replacements for OpenBSD library functions
26that are (regrettably) absent from other unices. This port has been
27best tested on Linux, Solaris, HPUX, NetBSD and Irix. Support for AIX,
28SCO, NeXT and other Unices is underway. This version actively tracks
29changes in the OpenBSD CVS repository.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100030
Damien Miller5ffa6441999-10-30 11:30:35 +100031The PAM support is now more functional than the popular packages of
32commercial ssh-1.2.x. It checks "account" and "session" modules for
Damien Miller7df20e21999-11-12 16:06:47 +110033all logins, not just when using password authentication.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100034
Damien Miller8bdeee21999-12-30 15:50:54 +110035OpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4] and
36Dante[6]. To build the GNOME[5] pass-phrase requester
37(--with-gnome-askpass), you will need the GNOME libraries installed.
38If you are building OpenSSH on a Unix which lacks a kernel random
39number pool (/dev/random), you will need to install EGD[1].
Damien Miller74389c91999-11-09 15:03:01 +110040
Damien Millerf20c2aa2000-01-06 20:28:41 +110041There is now several mailing lists for this port of OpenSSH. Please
42refer to http://violet.ibs.com.au/openssh/list.html for details on how
43to join.
Damien Millera4195281999-11-12 14:11:10 +110044
Damien Millerf20c2aa2000-01-06 20:28:41 +110045Please send bug reports and patches to the mailing list
46openssh-unix-dev@mindrot.org. The list is currently open to posting by
47unsubscribed users.
Damien Miller6ae00d61999-12-14 15:43:03 +110048
Damien Millerb5f89271999-11-12 14:35:58 +110049Please refer to the INSTALL document for information on how to install
Damien Millerf20c2aa2000-01-06 20:28:41 +110050OpenSSH on your system. The UPGRADING document details differences
51between this port of OpenSSH and F-Secure SSH 1.x.
Damien Miller7df20e21999-11-12 16:06:47 +110052
Damien Miller5ffa6441999-10-30 11:30:35 +100053Damien Miller <djm@ibs.com.au>
54Internet Business Solutions
Damien Millerd4a8b7e1999-10-27 13:42:43 +100055
Damien Miller5ffa6441999-10-30 11:30:35 +100056Miscellania -
Damien Millerd4a8b7e1999-10-27 13:42:43 +100057
Damien Miller5ffa6441999-10-30 11:30:35 +100058This version of SSH is based upon code retrieved from the OpenBSD CVS
Damien Millerf20c2aa2000-01-06 20:28:41 +110059repository which in turn was based on the last free
Damien Millera5cec581999-11-09 15:05:11 +110060version of SSH released by Tatu Ylonen.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100061
Damien Miller356a0b01999-11-08 15:30:59 +110062References -
63
Damien Miller56825a11999-11-11 10:50:04 +110064[1] http://www.lothar.com/tech/crypto/
65[2] http://www.cdrom.com/pub/infozip/zlib/
66[3] http://www.openssl.org/
67[4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris)
68[5] http://www.gnome.org/
Damien Miller8bdeee21999-12-30 15:50:54 +110069[6] http://www.inet.no/dante
Damien Millera5cec581999-11-09 15:05:11 +110070