About:
Portable OpenSSH is a Unix/Linux port of OpenBSD's excellent OpenSSH, a full implementation of the SSH1 and SSH2 protocols. It includes sftp client and server support.

Release focus: Minor security fixes

Changes:
Execution of ~/.ssh/rc was disabled for sessions where a command has been forced by the sshd_config ForceCommand directive (unsafe default behavior). Chroot support for sshd was added. Internal sftp-server support was added to sshd, to allow chroot operation without support files. A "no-user-rc" option was added to ~/.ssh/authorized_keys to disable execution of ~/.ssh/rc in public key authentication. An sftp protocol extension, "posix-rename@openssh.com", was added to provide a rename operation with POSIX semantics.

Author:
Damien Miller [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.74/10.00 (68 votes)

Homepage:
http://www.openssh.com/
Tar/GZ:
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/
Changelog:
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ChangeLog
RPM package:
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/rpm/
CVS tree (cvsweb):
http://cvsweb.mindrot.org/index.cgi/openssh/
Bug tracker:
http://bugzilla.mindrot.org/
Mailing list archive:
http://marc.theaimsgroup.com/?l=openssh-unix-dev&r=1&w=2
Mirror site:
http://www.openssh.com/portable.html

Trove categories: [change]

[Environment]		Console (Text Based)
[Intended Audience]		End Users/Desktop
[License]		OSI Approved :: BSD License (original), OSI Approved :: BSD License (revised)
[Topic]		Security :: Cryptography, Utilities

Dependencies: [change]
OpenSSL (required)
zlib (required)
[download links]

 Branches

Branch	Version	Last release	License	URLs
Stable	4.9p1	30-Mar-2008	BSD License (original)
Snapshot Nightly development snapshots			BSD License (original)

 Releases

Version	Focus	Date
4.9p1	Minor security fixes	30-Mar-2008 22:28
4.7p1	Minor security fixes	05-Sep-2007 04:20
4.6p1	Minor feature enhancements	11-Mar-2007 00:03
4.4p1	Major security fixes	06-Oct-2006 05:52
4.3p2	Minor bugfixes	12-Feb-2006 01:05
4.3p1	N/A	07-Feb-2006 23:15
4.2p1	Minor security fixes	01-Sep-2005 22:38
4.1p1	Minor bugfixes	01-Jun-2005 04:32
4.0p1	Minor feature enhancements	09-Mar-2005 04:22
3.9p1	Major feature enhancements	06-Sep-2004 01:45

 Articles referencing this project

Red Hat: Updated openssh packages fix two security issues by Patrick Lenz , in Security Sun, Nov 18th 2007 13:15 Red Hat: Updated openssh packages that fix a security issue by Patrick Lenz , in Security Sun, Nov 11th 2007 00:57 Red Hat: Updated openssh packages fix a security issue by Patrick Lenz , in Security Mon, May 7th 2007 07:56 Debian: New openssh packages fix denial of service by Patrick Lenz , in Security Sun, Nov 19th 2006 06:05 Red Hat: Updated openssh packages fix an authentication flaw by Patrick Lenz , in Security Sun, Nov 19th 2006 06:03

SuSE: New openssh packages fix remote denial of service by Patrick Lenz , in Security Sun, Oct 22nd 2006 14:47 Red Hat: Updated openssh packages fix two security flaws by Patrick Lenz , in Security Sun, Oct 8th 2006 06:00 Red Hat: Updated openssh packages fix bugs in sshd by Patrick Lenz , in Security Wed, Jul 26th 2006 14:09 Red Hat: Updated openssh packages fix bugs in sshd by Patrick Lenz , in Security Tue, Mar 7th 2006 08:50 [more articles]

 Comments

[»] Security Blanket
by Plutoid - Jun 25th 2003 14:55:59

This is one of the most important apps on my machine. I don't know why everyone doesn't use it. I fear telnet....
Regards,
jake@plutoid.com
http://www.plutoid.com

[reply] [top]

[»] file format of DSA keys
by Oren Tirosh - May 11th 2000 15:06:10

OpenSSH uses PEM format for DSA key files which is incompatible with the SSH2 key file format. So far I couldn't get OpenSSH to authenticate with a DSA key to an ssh2 server because of this. I can't put the public key generated with OpenSSH on the ssh2 server and I can't get OpenSSH to use a private key generated with ssh-keygen2.

[reply] [top]

[»] Re: file format of DSA keys
by Chuck Moss - Feb 28th 2001 09:52:31


> OpenSSH uses PEM format for DSA key
> files which is incompatible with the
> SSH2 key file format. So far I couldn't
> get OpenSSH to authenticate with a DSA
> key to an ssh2 server because of this.
> I can't put the public key generated
> with OpenSSH on the ssh2 server and I
> can't get OpenSSH to use a private key
> generated with ssh-keygen2.
>
From my notes here is how I was able to do it:
On the client
1. upgrade the openssh to 2.2.x+
2. ssh-keygen -d -f $HOME/.ssh/id_dsa
3. cd $HOME/.ssh
4. ssh-keygen -x -f $HOME/.ssh/id_dsa > ssh2.pub

On fsecure server
5. copy ssh2.pub to $HOME/.ssh2/ssh2.pub
6. echo "Key ssh2.pub" > authorization


[reply] [top]

---

[»] Re: file format of DSA keys
by Dennis Krøger - Dec 6th 2001 07:33:11

Hmmm... Looking at the manpage, neither -d or -x exists...

[reply] [top]

---

[»] Re: file format of DSA keys
by Dennis Krøger - Dec 6th 2001 07:41:39


> Hmmm... Looking at the manpage, neither
> -d or -x exists...
>
>
Hmmm.... But they still work...




[reply] [top]

---