openssh-portable/README

[ A Japanese translation of this document is available at
[ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html
[ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>

******* IMPORTANT
* On systmes which lack a /dev/random driver, this port of
* OpenSSH-1.2.2 was not correctly seeding OpenSSL's random number
* pool. This resulted in lower quality RSA keys being generated. If
* you generated host or user keys with v1.2.2, please generate new
* ones using a more recent version.

This is the port of OpenBSD's excellent OpenSSH to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's SSH with
all patent-encumbered algorithms removed (to external libraries), all
known security bugs fixed, new features reintroduced and many other
clean-ups. More information about SSH itself can be found in the file
README.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck,
Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a
homepage at http://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support (for Linux and Solaris), EGD[1] support, SOCKS support (using
the Dante [6] libraries and replacements for OpenBSD library functions
that are (regrettably) absent from other unices. This port has been
best tested on Linux, Solaris, HPUX, NetBSD and Irix. Support for AIX,
SCO, NeXT and other Unices is underway. This version actively tracks
changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

All new code is released under a XFree style license, which is very
liberal. Please refer to the source files for details. The code in
bsd-*.[ch] is from the OpenBSD project and has its own license (again,
see the source files for details).

OpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4] and
Dante[6]. To build the GNOME[5] pass-phrase requester
(--with-gnome-askpass), you will need the GNOME libraries installed.
If you are building OpenSSH on a Unix which lacks a kernel random
number pool (/dev/random), you will need to install EGD[1]. 

There is now several mailing lists for this port of OpenSSH. Please
refer to http://violet.ibs.com.au/openssh/list.html for details on how
to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is currently open to posting by
unsubscribed users.

Please refer to the INSTALL document for information on how to install
OpenSSH on your system. The UPGRADING document details differences 
between this port of OpenSSH and F-Secure SSH 1.x.

Damien Miller <djm@ibs.com.au>
Internet Business Solutions

Miscellania - 

This version of SSH is based upon code retrieved from the OpenBSD CVS
repository which in turn was based on the last free 
version of SSH released by Tatu Ylonen.

Code in bsd-misc.[ch] and gnome-ssh-askpass.c is Copyright 1999 Damien
Miller & Internet Business Solutions and is released under a X11-style
license (see source files for details).

References -

[1] http://www.lothar.com/tech/crypto/
[2] http://www.cdrom.com/pub/infozip/zlib/
[3] http://www.openssl.org/
[4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris)
[5] http://www.gnome.org/
[6] http://www.inet.no/dante
- Documentation fixes from HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> - Added URLs to Japanese translations of documents by HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> 2000-02-02 10:56:20 +01:00			`[ A Japanese translation of this document is available at`
			`[ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html`
			`[ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>`

add warning 2000-03-07 12:40:57 +01:00			`******* IMPORTANT`
			`* On systmes which lack a /dev/random driver, this port of`
			`* OpenSSH-1.2.2 was not correctly seeding OpenSSL's random number`
			`* pool. This resulted in lower quality RSA keys being generated. If`
			`* you generated host or user keys with v1.2.2, please generate new`
			`* ones using a more recent version.`

- Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com> 1999-11-18 21:56:21 +01:00			`This is the port of OpenBSD's excellent OpenSSH to Linux and other`
			`Unices.`
Initial revision 1999-10-27 05:42:43 +02:00
Renamed README -> README.Ylonen Renamed README.openssh -> README Minor updated to new README 1999-10-30 03:30:35 +02:00			`OpenSSH is based on the last free version of Tatu Ylonen's SSH with`
Doc updates 2000-01-06 10:28:41 +01:00			`all patent-encumbered algorithms removed (to external libraries), all`
			`known security bugs fixed, new features reintroduced and many other`
			`clean-ups. More information about SSH itself can be found in the file`
			`README.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck,`
			`Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a`
			`homepage at http://www.openssh.com/`
Initial revision 1999-10-27 05:42:43 +02:00
Doc and spec updates 1999-11-11 00:50:04 +01:00			`This port consists of the re-introduction of autoconf support, PAM`
Doc updates 2000-01-06 10:28:41 +01:00			`support (for Linux and Solaris), EGD[1] support, SOCKS support (using`
			`the Dante [6] libraries and replacements for OpenBSD library functions`
			`that are (regrettably) absent from other unices. This port has been`
			`best tested on Linux, Solaris, HPUX, NetBSD and Irix. Support for AIX,`
			`SCO, NeXT and other Unices is underway. This version actively tracks`
			`changes in the OpenBSD CVS repository.`
Initial revision 1999-10-27 05:42:43 +02:00
Renamed README -> README.Ylonen Renamed README.openssh -> README Minor updated to new README 1999-10-30 03:30:35 +02:00			`The PAM support is now more functional than the popular packages of`
			`commercial ssh-1.2.x. It checks "account" and "session" modules for`
Documentation updates 1999-11-12 06:06:47 +01:00			`all logins, not just when using password authentication.`
Initial revision 1999-10-27 05:42:43 +02:00
Renamed README -> README.Ylonen Renamed README.openssh -> README Minor updated to new README 1999-10-30 03:30:35 +02:00			`All new code is released under a XFree style license, which is very`
Doc updates 1999-11-09 05:03:01 +01:00			`liberal. Please refer to the source files for details. The code in`
- Renamed BSD helper function files to bsd-* - Added tests for login and daemon and OpenBSD replacements for when they are absent. 1999-11-19 05:32:34 +01:00			`bsd-*.[ch] is from the OpenBSD project and has its own license (again,`
			`see the source files for details).`
Doc updates 1999-11-09 05:03:01 +01:00
- Merged Dante SOCKS support patch from David Rankin <drankin@bohemians.lexington.ky.us> - Updated documentation with ./configure options 1999-12-30 05:50:54 +01:00			`OpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4] and`
			`Dante[6]. To build the GNOME[5] pass-phrase requester`
			`(--with-gnome-askpass), you will need the GNOME libraries installed.`
			`If you are building OpenSSH on a Unix which lacks a kernel random`
			`number pool (/dev/random), you will need to install EGD[1].`
Doc updates 1999-11-09 05:03:01 +01:00
Doc updates 2000-01-06 10:28:41 +01:00			`There is now several mailing lists for this port of OpenSSH. Please`
			`refer to http://violet.ibs.com.au/openssh/list.html for details on how`
			`to join.`
Added mailing list info 1999-11-12 04:11:10 +01:00
Doc updates 2000-01-06 10:28:41 +01:00			`Please send bug reports and patches to the mailing list`
			`openssh-unix-dev@mindrot.org. The list is currently open to posting by`
			`unsubscribed users.`
- Some older systems don't have poll.h, they use sys/poll.h instead - Doc updates 1999-12-14 05:43:03 +01:00
Added INSTALL documentation Minor other doc updates 1999-11-12 04:35:58 +01:00			`Please refer to the INSTALL document for information on how to install`
Doc updates 2000-01-06 10:28:41 +01:00			`OpenSSH on your system. The UPGRADING document details differences`
			`between this port of OpenSSH and F-Secure SSH 1.x.`
Documentation updates 1999-11-12 06:06:47 +01:00
Renamed README -> README.Ylonen Renamed README.openssh -> README Minor updated to new README 1999-10-30 03:30:35 +02:00			`Damien Miller <djm@ibs.com.au>`
			`Internet Business Solutions`
Initial revision 1999-10-27 05:42:43 +02:00
Renamed README -> README.Ylonen Renamed README.openssh -> README Minor updated to new README 1999-10-30 03:30:35 +02:00			`Miscellania -`
Initial revision 1999-10-27 05:42:43 +02:00
Renamed README -> README.Ylonen Renamed README.openssh -> README Minor updated to new README 1999-10-30 03:30:35 +02:00			`This version of SSH is based upon code retrieved from the OpenBSD CVS`
Doc updates 2000-01-06 10:28:41 +01:00			`repository which in turn was based on the last free`
doc updates 1999-11-09 05:05:11 +01:00			`version of SSH released by Tatu Ylonen.`
Initial revision 1999-10-27 05:42:43 +02:00
Doc updates 2000-01-06 10:28:41 +01:00			`Code in bsd-misc.[ch] and gnome-ssh-askpass.c is Copyright 1999 Damien`
			`Miller & Internet Business Solutions and is released under a X11-style`
doc updates 1999-11-09 05:05:11 +01:00			`license (see source files for details).`
Initial revision 1999-10-27 05:42:43 +02:00
Lots of changes: - Removed lots of unnecessary checks from autoconf - Added support and autoconf test for openpty() function (Unix98 pty support) - Fix for scp not finding ssh if not installed as /usr/bin/ssh - Added TODO file - Merged parts of Debian patch From Phil Hands <phil@hands.com>: - Added ssh-askpass program - Added ssh-askpass support to ssh-add.c - Create symlinks for slogin on install - Fix "distclean" target in makefile - Added example for ssh-agent to manpage - Added support for PAM_TEXT_INFO messages - Disable internal /etc/nologin support if PAM enabled - Merged latest OpenBSD CVS changes: - [sshd.c] don't send fail-msg but disconnect if too many authentication failures - [sshd.c] replace assert() with error, fatal or packet_disconnect - [sshd.c] remove unused argument. ok dugsong - [sshd.c] typo - [rsa.c] clear buffers used for encryption. ok: niels - [rsa.c] replace assert() with error, fatal or packet_disconnect - Fixed coredump after merge of OpenBSD rsa.c patch 1999-11-08 05:30:59 +01:00			`References -`

Doc and spec updates 1999-11-11 00:50:04 +01:00			`[1] http://www.lothar.com/tech/crypto/`
			`[2] http://www.cdrom.com/pub/infozip/zlib/`
			`[3] http://www.openssl.org/`
			`[4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris)`
			`[5] http://www.gnome.org/`
- Merged Dante SOCKS support patch from David Rankin <drankin@bohemians.lexington.ky.us> - Updated documentation with ./configure options 1999-12-30 05:50:54 +01:00			`[6] http://www.inet.no/dante`
doc updates 1999-11-09 05:05:11 +01:00