Portable OpenSSH, all Win32-OpenSSH releases and wiki are managed at https://github.com/powershell/Win32-OpenSSH
Go to file
Damien Miller a10abe9e4b s/recommended/required in warning:
"It is recommended that your private key files are NOT accessible by others."

since there is no way to skip this check; bz#1878
2011-04-12 15:39:35 +10:00
contrib - (dtucker) [contrib/cygwin/ssh-host-config] From Corinna: revamp of the 2011-02-21 21:41:29 +11:00
openbsd-compat - (dtucker) [openbsd-compat/port-linux.c] Bug #1851: fix syntax error in 2011-02-06 13:24:35 +11:00
regress - (tim) [regress/agent-getpeereid.sh] shell portability fix. 2011-01-16 22:53:56 -08:00
scard
.cvsignore
CREDITS
ChangeLog (whitespace change to test sync to hg) 2011-03-28 15:07:06 +11:00
INSTALL
LICENCE - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
Makefile.in - (djm) [configure.ac Makefile.in ssh.c openbsd-compat/port-linux.c 2011-01-25 12:16:15 +11:00
OVERVIEW - deraadt@cvs.openbsd.org 2006/08/03 03:34:42 2006-08-05 12:39:39 +10:00
PROTOCOL - djm@cvs.openbsd.org 2010/12/04 00:18:01 2010-12-05 09:02:47 +11:00
PROTOCOL.agent - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
PROTOCOL.certkeys - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
PROTOCOL.mux - djm@cvs.openbsd.org 2011/01/31 21:42:15 2011-02-04 11:46:39 +11:00
README - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec] 2011-02-04 12:43:36 +11:00
README.dns
README.platform
README.privsep
README.tun
TODO
WARNING.RNG
aclocal.m4
acss.c
acss.h
addrmatch.c
atomicio.c - djm@cvs.openbsd.org 2010/09/22 22:58:51 2010-09-24 22:15:11 +10:00
atomicio.h - djm@cvs.openbsd.org 2010/09/22 22:58:51 2010-09-24 22:15:11 +10:00
audit-bsm.c - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
audit-linux.c - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
audit.c - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
audit.h - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
auth-bsdauth.c
auth-chall.c
auth-krb5.c
auth-options.c - djm@cvs.openbsd.org 2010/12/24 21:41:48 2011-01-06 22:44:18 +11:00
auth-options.h - djm@cvs.openbsd.org 2010/05/07 11:30:30 2010-05-10 11:58:03 +10:00
auth-pam.c
auth-pam.h
auth-passwd.c
auth-rh-rsa.c
auth-rhosts.c - dtucker@cvs.openbsd.org 2010/03/07 11:57:13 2010-03-07 23:05:17 +11:00
auth-rsa.c - djm@cvs.openbsd.org 2010/12/03 23:55:27 2010-12-05 09:01:47 +11:00
auth-shadow.c
auth-sia.c
auth-sia.h
auth-skey.c
auth.c - djm@cvs.openbsd.org 2010/11/29 23:45:51 2010-12-01 12:21:51 +11:00
auth.h - djm@cvs.openbsd.org 2010/05/07 11:30:30 2010-05-10 11:58:03 +10:00
auth1.c - djm@cvs.openbsd.org 2010/08/31 09:58:37 2010-08-31 22:36:39 +10:00
auth2-chall.c
auth2-gss.c
auth2-hostbased.c - djm@cvs.openbsd.org 2010/08/04 05:42:47 2010-08-05 13:04:50 +10:00
auth2-jpake.c - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
auth2-kbdint.c
auth2-none.c - djm@cvs.openbsd.org 2010/06/25 08:46:17 2010-06-26 10:01:33 +10:00
auth2-passwd.c
auth2-pubkey.c - OpenBSD CVS Sync 2010-12-01 11:50:14 +11:00
auth2.c - djm@cvs.openbsd.org 2010/08/31 09:58:37 2010-08-31 22:36:39 +10:00
authfd.c - (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c] 2010-09-10 11:39:26 +10:00
authfd.h
authfile.c s/recommended/required in warning: 2011-04-12 15:39:35 +10:00
authfile.h - djm@cvs.openbsd.org 2010/08/04 05:42:47 2010-08-05 13:04:50 +10:00
bufaux.c - djm@cvs.openbsd.org 2010/08/31 09:58:37 2010-08-31 22:36:39 +10:00
bufbn.c
bufec.c - (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c] 2010-09-10 11:39:26 +10:00
buffer.c
buffer.h - (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c] 2010-09-10 11:39:26 +10:00
buildpkg.sh.in
canohost.c - (djm) [canohost.c] Zero a4 instead of addr to better match type. 2010-10-12 13:28:12 +11:00
canohost.h
channels.c - djm@cvs.openbsd.org 2010/11/24 01:24:14 2010-12-01 12:02:35 +11:00
channels.h - djm@cvs.openbsd.org 2010/05/14 23:29:23 2010-05-21 14:57:10 +10:00
cipher-3des1.c - djm@cvs.openbsd.org 2010/10/01 23:05:32 2010-10-07 22:06:42 +11:00
cipher-acss.c - (djm) [cipher-acss.c] Add missing header. 2010-10-07 22:12:08 +11:00
cipher-aes.c - djm@cvs.openbsd.org 2010/10/01 23:05:32 2010-10-07 22:06:42 +11:00
cipher-bf1.c - djm@cvs.openbsd.org 2010/10/01 23:05:32 2010-10-07 22:06:42 +11:00
cipher-ctr.c - djm@cvs.openbsd.org 2010/10/01 23:05:32 2010-10-07 22:06:42 +11:00
cipher.c
cipher.h
cleanup.c
clientloop.c - djm@cvs.openbsd.org 2011/01/16 12:05:59 2011-01-16 23:18:33 +11:00
clientloop.h - djm@cvs.openbsd.org 2010/06/25 23:10:30 2010-06-26 10:02:24 +10:00
compat.c
compat.h
compress.c - deraadt@cvs.openbsd.org 2010/09/08 04:13:31 2010-09-10 11:20:59 +10:00
compress.h
config.guess 20110127 2011-01-26 12:32:12 -08:00
config.sub 20110127 2011-01-26 12:32:12 -08:00
configure.ac 20110127 2011-01-26 12:38:57 -08:00
crc32.c
crc32.h
deattack.c
deattack.h
defines.h - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
dh.c
dh.h
dispatch.c
dispatch.h
dns.c - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
dns.h
entropy.c - (djm) [entropy.c] cast OPENSSL_VERSION_NUMBER to u_long to avoid 2011-01-13 21:05:27 +11:00
entropy.h
fatal.c
fixpaths
fixprogs
groupaccess.c
groupaccess.h
gss-genr.c
gss-serv-krb5.c
gss-serv.c
hostfile.c - djm@cvs.openbsd.org 2010/12/04 13:31:37 2010-12-05 09:03:31 +11:00
hostfile.h - djm@cvs.openbsd.org 2010/11/29 23:45:51 2010-12-01 12:21:51 +11:00
includes.h - (dtucker) [includes.h] Add missing ifdef GLOB_HAS_GL_STATV to fix build. 2010-10-24 10:47:30 +11:00
install-sh
jpake.c - djm@cvs.openbsd.org 2010/09/20 04:54:07 2010-09-24 22:07:17 +10:00
jpake.h
kex.c - djm@cvs.openbsd.org 2010/09/22 05:01:30 2010-09-24 22:11:14 +10:00
kex.h - djm@cvs.openbsd.org 2010/09/22 05:01:30 2010-09-24 22:11:14 +10:00
kexdh.c
kexdhc.c - djm@cvs.openbsd.org 2010/11/10 01:33:07 2010-11-20 15:15:49 +11:00
kexdhs.c - djm@cvs.openbsd.org 2010/11/10 01:33:07 2010-11-20 15:15:49 +11:00
kexecdh.c - djm@cvs.openbsd.org 2010/09/22 05:01:30 2010-09-24 22:11:14 +10:00
kexecdhc.c - djm@cvs.openbsd.org 2010/09/22 05:01:30 2010-09-24 22:11:14 +10:00
kexecdhs.c - djm@cvs.openbsd.org 2010/09/22 05:01:30 2010-09-24 22:11:14 +10:00
kexgex.c
kexgexc.c - djm@cvs.openbsd.org 2010/11/10 01:33:07 2010-11-20 15:15:49 +11:00
kexgexs.c - djm@cvs.openbsd.org 2010/11/10 01:33:07 2010-11-20 15:15:49 +11:00
key.c - djm@cvs.openbsd.org 2011/02/04 00:44:21 2011-02-04 11:47:01 +11:00
key.h - djm@cvs.openbsd.org 2010/10/28 11:22:09 2010-11-05 10:19:49 +11:00
log.c
log.h
loginrec.c - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.h 2011-01-17 21:15:27 +11:00
loginrec.h - (djm) [loginrec.c loginrec.h] Use correct uid_t/pid_t types instead of 2010-11-05 10:52:37 +11:00
logintest.c - (dtucker) [configure.ac defines.h loginrec.c logintest.c] Bug #1732: enable 2010-04-09 18:13:27 +10:00
mac.c
mac.h
match.c
match.h
md-sha256.c
md5crypt.c
md5crypt.h
mdoc2man.awk
misc.c - (djm) [misc.c] include time.h for nanosleep() prototype 2011-01-13 12:21:34 +11:00
misc.h - djm@cvs.openbsd.org 2010/11/21 01:01:13 2010-12-01 11:50:35 +11:00
mkinstalldirs
moduli
moduli.5
moduli.c - (dtucker) [configure.ac moduli.c openbsd-compat/openssl-compat.{c,h}] Add 2010-12-04 23:20:50 +11:00
monitor.c - djm@cvs.openbsd.org 2010/09/09 10:45:45 2010-09-10 11:23:34 +10:00
monitor.h
monitor_fdpass.c
monitor_fdpass.h
monitor_mm.c
monitor_mm.h
monitor_wrap.c - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
monitor_wrap.h
msg.c
msg.h
mux.c - djm@cvs.openbsd.org 2011/01/13 21:54:53 2011-01-14 12:01:29 +11:00
myproposal.h - (djm) [myproposal.h] Fix reversed OPENSSL_VERSION_NUMBER test and bad 2011-01-13 22:00:20 +11:00
nchan.c
nchan.ms
nchan2.ms
openssh.xml.in
opensshd.init.in - (tim) [Makefile.in configure.ac opensshd.init.in] Add support for generating 2011-01-12 22:35:43 -08:00
packet.c - (dtucker) [packet.c] Remove redundant local declaration of "int tos". 2010-11-24 10:46:37 +11:00
packet.h - djm@cvs.openbsd.org 2010/11/13 23:27:51 2010-11-20 15:19:38 +11:00
pathnames.h - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
pkcs11.h
platform.c - (djm) [platform.c] Some missing includes that show up under -Werror 2011-01-11 17:02:23 +11:00
platform.h - (dtucker) [platform.c platform.h session.c] Move the Cygwin special-case 2010-11-05 14:47:01 +11:00
progressmeter.c
progressmeter.h
readconf.c - djm@cvs.openbsd.org 2010/11/13 23:27:51 2010-11-20 15:19:38 +11:00
readconf.h - djm@cvs.openbsd.org 2010/11/13 23:27:51 2010-11-20 15:19:38 +11:00
readpass.c - djm@cvs.openbsd.org 2010/12/15 00:49:27 2011-01-06 22:43:44 +11:00
rijndael.c
rijndael.h
roaming.h
roaming_client.c
roaming_common.c
roaming_dummy.c
roaming_serv.c
rsa.c
rsa.h
schnorr.c - (dtucker) OpenBSD CVS Sync 2010-12-05 09:00:30 +11:00
schnorr.h
scp.1 - jmc@cvs.openbsd.org 2010/12/09 14:13:33 2011-01-06 22:41:21 +11:00
scp.c - jmc@cvs.openbsd.org 2010/12/09 14:13:33 2011-01-06 22:41:21 +11:00
servconf.c - djm@cvs.openbsd.org 2010/11/13 23:27:51 2010-11-20 15:19:38 +11:00
servconf.h - djm@cvs.openbsd.org 2010/11/13 23:27:51 2010-11-20 15:19:38 +11:00
serverloop.c
serverloop.h
session.c - djm@cvs.openbsd.org 2010/11/25 04:10:09 2010-12-01 12:02:59 +11:00
session.h
sftp-client.c - djm@cvs.openbsd.org 2010/12/04 00:18:01 2010-12-05 09:02:47 +11:00
sftp-client.h - djm@cvs.openbsd.org 2010/12/04 00:18:01 2010-12-05 09:02:47 +11:00
sftp-common.c
sftp-common.h
sftp-glob.c
sftp-server-main.c
sftp-server.8
sftp-server.c - djm@cvs.openbsd.org 2010/12/04 00:18:01 2010-12-05 09:02:47 +11:00
sftp.1 - djm@cvs.openbsd.org 2010/12/04 00:18:01 2010-12-05 09:02:47 +11:00
sftp.c - djm@cvs.openbsd.org 2010/12/04 00:18:01 2010-12-05 09:02:47 +11:00
sftp.h
ssh-add.1 - jmc@cvs.openbsd.org 2010/10/28 18:33:28 2010-11-05 10:20:14 +11:00
ssh-add.c - (djm) [servconf.c ssh-add.c ssh-keygen.c] don't look for ECDSA keys on 2010-11-11 14:17:02 +11:00
ssh-agent.1 - djm@cvs.openbsd.org 2010/11/21 01:01:13 2010-12-01 11:50:35 +11:00
ssh-agent.c - djm@cvs.openbsd.org 2010/11/21 01:01:13 2010-12-01 11:50:35 +11:00
ssh-dss.c - djm@cvs.openbsd.org 2010/08/31 09:58:37 2010-08-31 22:36:39 +10:00
ssh-ecdsa.c - (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c] 2010-09-10 11:39:26 +10:00
ssh-gss.h
ssh-keygen.1 - jmc@cvs.openbsd.org 2010/10/28 18:33:28 2010-11-05 10:20:14 +11:00
ssh-keygen.c - djm@cvs.openbsd.org 2011/01/11 06:13:10 2011-01-11 17:20:29 +11:00
ssh-keyscan.1 - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
ssh-keyscan.c - otto@cvs.openbsd.org 2011/01/04 20:44:13 2011-01-06 22:44:44 +11:00
ssh-keysign.8 - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
ssh-keysign.c - djm@cvs.openbsd.org 2011/02/16 00:31:14 2011-02-18 09:18:45 +11:00
ssh-pkcs11-client.c
ssh-pkcs11-helper.8
ssh-pkcs11-helper.c - (djm) [ssh-pkcs11-helper.c] Move #ifdef to after #defines to fix 2010-03-14 08:37:49 +11:00
ssh-pkcs11.c - markus@cvs.openbsd.org 2010/06/08 21:32:19 2010-06-26 09:36:10 +10:00
ssh-pkcs11.h
ssh-rand-helper.8
ssh-rand-helper.c - (djm) [ssh-rand-helper.c] declare optind, avoiding compilation failure 2010-03-05 11:40:19 +11:00
ssh-rsa.c - djm@cvs.openbsd.org 2010/08/31 09:58:37 2010-08-31 22:36:39 +10:00
ssh.1 - jmc@cvs.openbsd.org 2010/11/18 15:01:00 2010-11-20 15:21:03 +11:00
ssh.c - (djm) [configure.ac Makefile.in ssh.c openbsd-compat/port-linux.c 2011-01-25 12:16:15 +11:00
ssh.h - djm@cvs.openbsd.org 2010/06/25 07:14:46 2010-06-26 09:50:30 +10:00
ssh1.h
ssh2.h - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
ssh_config
ssh_config.5 - djm@cvs.openbsd.org 2010/12/08 04:02:47 2010-12-26 14:26:45 +11:00
ssh_prng_cmds.in
sshconnect.c - djm@cvs.openbsd.org 2011/01/16 11:50:36 2011-01-16 23:17:45 +11:00
sshconnect.h - djm@cvs.openbsd.org 2010/11/29 23:45:51 2010-12-01 12:21:51 +11:00
sshconnect1.c
sshconnect2.c - djm@cvs.openbsd.org 2010/11/29 23:45:51 2010-12-01 12:21:51 +11:00
sshd.8 - jmc@cvs.openbsd.org 2010/10/28 18:33:28 2010-11-05 10:20:14 +11:00
sshd.c - djm@cvs.openbsd.org 2011/01/11 06:13:10 2011-01-11 17:20:29 +11:00
sshd_config - naddy@cvs.openbsd.org 2010/09/06 17:10:19 2010-09-10 11:20:11 +10:00
sshd_config.5 - djm@cvs.openbsd.org 2010/12/08 04:02:47 2010-12-26 14:26:45 +11:00
sshlogin.c - djm@cvs.openbsd.org 2011/01/11 06:06:09 2011-01-11 17:20:05 +11:00
sshlogin.h
sshpty.c
sshpty.h
sshtty.c
survey.sh.in
ttymodes.c - stevesk@cvs.openbsd.org 2008/11/02 00:16:16 2008-11-03 19:27:52 +11:00
ttymodes.h
uidswap.c
uidswap.h
umac.c
umac.h
uuencode.c - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
uuencode.h - djm@cvs.openbsd.org 2010/08/31 11:54:45 2010-08-31 22:41:14 +10:00
version.h - djm@cvs.openbsd.org 2011/02/04 00:44:43 2011-02-04 11:47:20 +11:00
xmalloc.c
xmalloc.h

README

See http://www.openssh.com/txt/release-5.8 for the release notes.

- A Japanese translation of this document and of the OpenSSH FAQ is
- available at http://www.unixuser.org/~haruyama/security/openssh/index.html
- Thanks to HARUYAMA Seigo <haruyama@unixuser.org>

This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's sample
implementation with all patent-encumbered algorithms removed (to
external libraries), all known security bugs fixed, new features
reintroduced and many other clean-ups.  OpenSSH has been created by
Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,
and Dug Song. It has a homepage at http://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support, EGD[1]/PRNGD[2] support and replacements for OpenBSD library
functions that are (regrettably) absent from other unices. This port
has been best tested on AIX, Cygwin, HP-UX, Linux, MacOS/X,
NetBSD, OpenBSD, OpenServer, Solaris, Unicos, and UnixWare.

This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[3], OpenSSL[4] and optionally PAM[5].

There is now several mailing lists for this port of OpenSSH. Please
refer to http://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by
unsubscribed users.Code contribution are welcomed, but please follow the 
OpenBSD style guidelines[6].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system. There are a number of differences between this
port of OpenSSH and F-Secure SSH 1.x, please refer to the OpenSSH FAQ[7]
for details and general tips.

Damien Miller <djm@mindrot.org>

Miscellania -

This version of OpenSSH is based upon code retrieved from the OpenBSD
CVS repository which in turn was based on the last free sample
implementation released by Tatu Ylonen.

References -

[0] http://www.openssh.com/faq.html
[1] http://www.lothar.com/tech/crypto/
[2] http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html
[3] http://www.gzip.org/zlib/
[4] http://www.openssl.org/
[5] http://www.openpam.org
    http://www.kernel.org/pub/linux/libs/pam/ 
    (PAM also is standard on Solaris and HP-UX 11)
[6] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9
[7] http://www.openssh.com/faq.html

$Id: README,v 1.76 2011/02/04 01:43:39 djm Exp $