blob: ecd82c4d8c97160283f45ead9632bb117b05ef5e [file] [log] [blame]
Damien Miller17872522000-02-02 20:56:20 +11001[ A Japanese translation of this document is available at
2[ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html
3[ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
4
Damien Miller5a88b6e2000-03-07 22:40:57 +11005******* IMPORTANT
6* On systmes which lack a /dev/random driver, this port of
7* OpenSSH-1.2.2 was not correctly seeding OpenSSL's random number
8* pool. This resulted in lower quality RSA keys being generated. If
9* you generated host or user keys with v1.2.2, please generate new
10* ones using a more recent version.
11
Damien Miller5bbbd361999-11-19 07:56:21 +110012This is the port of OpenBSD's excellent OpenSSH to Linux and other
13Unices.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100014
Damien Miller5ffa6441999-10-30 11:30:35 +100015OpenSSH is based on the last free version of Tatu Ylonen's SSH with
Damien Millerf20c2aa2000-01-06 20:28:41 +110016all patent-encumbered algorithms removed (to external libraries), all
17known security bugs fixed, new features reintroduced and many other
18clean-ups. More information about SSH itself can be found in the file
19README.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck,
20Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a
21homepage at http://www.openssh.com/
Damien Millerd4a8b7e1999-10-27 13:42:43 +100022
Damien Miller56825a11999-11-11 10:50:04 +110023This port consists of the re-introduction of autoconf support, PAM
Damien Millerf20c2aa2000-01-06 20:28:41 +110024support (for Linux and Solaris), EGD[1] support, SOCKS support (using
25the Dante [6] libraries and replacements for OpenBSD library functions
26that are (regrettably) absent from other unices. This port has been
27best tested on Linux, Solaris, HPUX, NetBSD and Irix. Support for AIX,
28SCO, NeXT and other Unices is underway. This version actively tracks
29changes in the OpenBSD CVS repository.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100030
Damien Miller5ffa6441999-10-30 11:30:35 +100031The PAM support is now more functional than the popular packages of
32commercial ssh-1.2.x. It checks "account" and "session" modules for
Damien Miller7df20e21999-11-12 16:06:47 +110033all logins, not just when using password authentication.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100034
Damien Miller5ffa6441999-10-30 11:30:35 +100035All new code is released under a XFree style license, which is very
Damien Miller74389c91999-11-09 15:03:01 +110036liberal. Please refer to the source files for details. The code in
Damien Miller04f80141999-11-19 15:32:34 +110037bsd-*.[ch] is from the OpenBSD project and has its own license (again,
38see the source files for details).
Damien Millerd4a8b7e1999-10-27 13:42:43 +100039
Damien Miller8bdeee21999-12-30 15:50:54 +110040OpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4] and
41Dante[6]. To build the GNOME[5] pass-phrase requester
42(--with-gnome-askpass), you will need the GNOME libraries installed.
43If you are building OpenSSH on a Unix which lacks a kernel random
44number pool (/dev/random), you will need to install EGD[1].
Damien Miller74389c91999-11-09 15:03:01 +110045
Damien Millerf20c2aa2000-01-06 20:28:41 +110046There is now several mailing lists for this port of OpenSSH. Please
47refer to http://violet.ibs.com.au/openssh/list.html for details on how
48to join.
Damien Millera4195281999-11-12 14:11:10 +110049
Damien Millerf20c2aa2000-01-06 20:28:41 +110050Please send bug reports and patches to the mailing list
51openssh-unix-dev@mindrot.org. The list is currently open to posting by
52unsubscribed users.
Damien Miller6ae00d61999-12-14 15:43:03 +110053
Damien Millerb5f89271999-11-12 14:35:58 +110054Please refer to the INSTALL document for information on how to install
Damien Millerf20c2aa2000-01-06 20:28:41 +110055OpenSSH on your system. The UPGRADING document details differences
56between this port of OpenSSH and F-Secure SSH 1.x.
Damien Miller7df20e21999-11-12 16:06:47 +110057
Damien Miller5ffa6441999-10-30 11:30:35 +100058Damien Miller <djm@ibs.com.au>
59Internet Business Solutions
Damien Millerd4a8b7e1999-10-27 13:42:43 +100060
Damien Miller5ffa6441999-10-30 11:30:35 +100061Miscellania -
Damien Millerd4a8b7e1999-10-27 13:42:43 +100062
Damien Miller5ffa6441999-10-30 11:30:35 +100063This version of SSH is based upon code retrieved from the OpenBSD CVS
Damien Millerf20c2aa2000-01-06 20:28:41 +110064repository which in turn was based on the last free
Damien Millera5cec581999-11-09 15:05:11 +110065version of SSH released by Tatu Ylonen.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100066
Damien Millerf20c2aa2000-01-06 20:28:41 +110067Code in bsd-misc.[ch] and gnome-ssh-askpass.c is Copyright 1999 Damien
68Miller & Internet Business Solutions and is released under a X11-style
Damien Millera5cec581999-11-09 15:05:11 +110069license (see source files for details).
Damien Millerd4a8b7e1999-10-27 13:42:43 +100070
Damien Miller356a0b01999-11-08 15:30:59 +110071References -
72
Damien Miller56825a11999-11-11 10:50:04 +110073[1] http://www.lothar.com/tech/crypto/
74[2] http://www.cdrom.com/pub/infozip/zlib/
75[3] http://www.openssl.org/
76[4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris)
77[5] http://www.gnome.org/
Damien Miller8bdeee21999-12-30 15:50:54 +110078[6] http://www.inet.no/dante
Damien Millera5cec581999-11-09 15:05:11 +110079