freebsd-dev/crypto/openssh/contrib
Ed Maste 87c1498d1a ssh: update to OpenSSH v9.0p1
Release notes are available at https://www.openssh.com/txt/release-9.0

Some highlights:

 * ssh(1), sshd(8): use the hybrid Streamlined NTRU Prime + x25519 key
   exchange method by default ("sntrup761x25519-sha512@openssh.com").
   The NTRU algorithm is believed to resist attacks enabled by future
   quantum computers and is paired with the X25519 ECDH key exchange
   (the previous default) as a backstop against any weaknesses in
   NTRU Prime that may be discovered in the future. The combination
   ensures that the hybrid exchange offers at least as good security
   as the status quo.

 * sftp-server(8): support the "copy-data" extension to allow server-
   side copying of files/data, following the design in
   draft-ietf-secsh-filexfer-extensions-00. bz2948

 * sftp(1): add a "cp" command to allow the sftp client to perform
   server-side file copies.

This commit excludes the scp(1) change to use the SFTP protocol by
default; that change will immediately follow.

MFC after:	1 month
Relnotes:	Yes
Sponsored by:	The FreeBSD Foundation
2022-04-15 10:41:08 -04:00
..
aix
cygwin
hpux
redhat ssh: update to OpenSSH v9.0p1 2022-04-15 10:41:08 -04:00
solaris
suse ssh: update to OpenSSH v9.0p1 2022-04-15 10:41:08 -04:00
findssl.sh
gnome-ssh-askpass1.c
gnome-ssh-askpass2.c
gnome-ssh-askpass3.c
Makefile
README
ssh-copy-id
ssh-copy-id.1
sshd.pam.freebsd
sshd.pam.generic

Other patches and addons for OpenSSH. Please send submissions to
djm@mindrot.org

Externally maintained
---------------------

SSH Proxy Command -- connect.c

Shun-ichi GOTO <gotoh@imasy.or.jp> has written a very useful ProxyCommand
which allows the use of outbound SSH from behind a SOCKS4, SOCKS5 or
https CONNECT style proxy server. His page for connect.c has extensive
documentation on its use as well as compiled versions for Win32.

https://bitbucket.org/gotoh/connect/wiki/Home


X11 SSH Askpass:

Jim Knoble <jmknoble@pobox.com> has written an excellent X11
passphrase requester. This is highly recommended:

http://www.jmknoble.net/software/x11-ssh-askpass/


In this directory
-----------------

ssh-copy-id:

Phil Hands' <phil@hands.com> shell script to automate the process of adding
your public key to a remote machine's ~/.ssh/authorized_keys file.

gnome-ssh-askpass[12]:

A GNOME and Gtk2 passphrase requesters. Use "make gnome-ssh-askpass1" or
"make gnome-ssh-askpass2" to build.

sshd.pam.generic:

A generic PAM config file which may be useful on your system. YMMV

sshd.pam.freebsd:

A PAM config file which works with FreeBSD's PAM port. Contributed by
Dominik Brettnacher <domi@saargate.de>

findssl.sh:

Search for all instances of OpenSSL headers and libraries and print their 
versions.  This is intended to help diagnose OpenSSH's "OpenSSL headers do not
match your library" errors. 

aix:
    Files to build an AIX native (installp or SMIT installable) package.

caldera:
    RPM spec file and scripts for building Caldera OpenLinuix packages

cygwin:
    Support files for Cygwin

hpux:
    Support files for HP-UX

redhat:
    RPM spec file and scripts for building Redhat packages

suse:
    RPM spec file and scripts for building SuSE packages