blob: f94e2ed1c577e4ba46f9d56e0ab84aced296152a [file] [log] [blame]
Damien Miller17872522000-02-02 20:56:20 +11001[ A Japanese translation of this document is available at
2[ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html
3[ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
4
Damien Miller5a88b6e2000-03-07 22:40:57 +11005******* IMPORTANT
Damien Miller54057c22000-05-09 15:03:37 +10006* On systmes which lack a /dev/random driver, version of this port
7* prior to 1.2.2 were not correctly seeding OpenSSL's random number
Damien Miller5a88b6e2000-03-07 22:40:57 +11008* pool. This resulted in lower quality RSA keys being generated. If
Damien Miller54057c22000-05-09 15:03:37 +10009* you generated host or user keys with v1.2.2 or previous versions,
10* please generate new ones using a more recent version.
Damien Miller5a88b6e2000-03-07 22:40:57 +110011
Damien Miller6604fad2000-11-06 12:48:54 +110012This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Damien Miller5bbbd361999-11-19 07:56:21 +110013Unices.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100014
Damien Miller5ffa6441999-10-30 11:30:35 +100015OpenSSH is based on the last free version of Tatu Ylonen's SSH with
Damien Millerf20c2aa2000-01-06 20:28:41 +110016all patent-encumbered algorithms removed (to external libraries), all
17known security bugs fixed, new features reintroduced and many other
18clean-ups. More information about SSH itself can be found in the file
19README.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck,
20Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a
21homepage at http://www.openssh.com/
Damien Millerd4a8b7e1999-10-27 13:42:43 +100022
Damien Miller56825a11999-11-11 10:50:04 +110023This port consists of the re-introduction of autoconf support, PAM
Damien Miller54057c22000-05-09 15:03:37 +100024support (for Linux and Solaris), EGD[1] support and replacements for
25OpenBSD library functions that are (regrettably) absent from other
26unices. This port has been best tested on Linux, Solaris, HPUX, NetBSD
27and Irix. Support for AIX, SCO, NeXT and other Unices is underway.
28This version actively tracks changes in the OpenBSD CVS repository.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100029
Damien Miller5ffa6441999-10-30 11:30:35 +100030The PAM support is now more functional than the popular packages of
31commercial ssh-1.2.x. It checks "account" and "session" modules for
Damien Miller7df20e21999-11-12 16:06:47 +110032all logins, not just when using password authentication.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100033
Damien Miller54057c22000-05-09 15:03:37 +100034OpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4].
Damien Miller74389c91999-11-09 15:03:01 +110035
Damien Millerf20c2aa2000-01-06 20:28:41 +110036There is now several mailing lists for this port of OpenSSH. Please
Damien Miller7b63b0f2000-05-20 15:41:26 +100037refer to http://www.openssh.com/list.html for details on how to join.
Damien Millera4195281999-11-12 14:11:10 +110038
Damien Millerf20c2aa2000-01-06 20:28:41 +110039Please send bug reports and patches to the mailing list
Damien Miller64681252000-06-26 13:01:33 +100040openssh-unix-dev@mindrot.org. The list is open to posting by
Damien Millerf20c2aa2000-01-06 20:28:41 +110041unsubscribed users.
Damien Miller6ae00d61999-12-14 15:43:03 +110042
Damien Miller64681252000-06-26 13:01:33 +100043If you are a citizen of the USA or another country which restricts
44export of cryptographic products, then please refrain from sending
45crypto-related code or patches to the list. We cannot accept them.
46Other code contribution are accepted, but please follow the OpenBSD
47style guidelines[5].
48
Damien Millerb5f89271999-11-12 14:35:58 +110049Please refer to the INSTALL document for information on how to install
Damien Miller6604fad2000-11-06 12:48:54 +110050OpenSSH on your system. There are a number of differences between this
51port of OpenSSH and F-Secure SSH 1.x, please refer to the OpenSSH FAQ[6]
52for details and general tips.
Damien Miller7df20e21999-11-12 16:06:47 +110053
Damien Millere95b52e2000-10-28 13:22:06 +110054Damien Miller <djm@mindrot.org>
Damien Millerd4a8b7e1999-10-27 13:42:43 +100055
Damien Miller5ffa6441999-10-30 11:30:35 +100056Miscellania -
Damien Millerd4a8b7e1999-10-27 13:42:43 +100057
Damien Miller5ffa6441999-10-30 11:30:35 +100058This version of SSH is based upon code retrieved from the OpenBSD CVS
Damien Millerf20c2aa2000-01-06 20:28:41 +110059repository which in turn was based on the last free
Damien Millera5cec581999-11-09 15:05:11 +110060version of SSH released by Tatu Ylonen.
Damien Millerd4a8b7e1999-10-27 13:42:43 +100061
Damien Miller356a0b01999-11-08 15:30:59 +110062References -
63
Damien Miller6604fad2000-11-06 12:48:54 +110064[0] http://www.openssh.com/faq.html
Damien Miller56825a11999-11-11 10:50:04 +110065[1] http://www.lothar.com/tech/crypto/
Damien Miller7206ad12000-06-08 08:48:24 +100066[2] ftp://ftp.freesoftware.com/pub/infozip/zlib/
Damien Miller56825a11999-11-11 10:50:04 +110067[3] http://www.openssl.org/
68[4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris)
Damien Miller64681252000-06-26 13:01:33 +100069[5] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9&apropos=0&manpath=OpenBSD+Current
Damien Miller6604fad2000-11-06 12:48:54 +110070[6] http://www.openssh.com/faq.html