openssh/README

See https://www.openssh.com/releasenotes.html#7.5p1 for the release notes.

Please read https://www.openssh.com/report.html for bug reporting
instructions and note that we do not use Github for bug reporting or
patch/pull-request management.

- A Japanese translation of this document and of the release notes is
- available at http://www.unixuser.org/~haruyama/security/openssh/index.html
- Thanks to HARUYAMA Seigo <haruyama@unixuser.org>

This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other
Unices.

OpenSSH is based on the last free version of Tatu Ylonen's sample
implementation with all patent-encumbered algorithms removed (to
external libraries), all known security bugs fixed, new features
reintroduced and many other clean-ups.  OpenSSH has been created by
Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,
and Dug Song. It has a homepage at https://www.openssh.com/

This port consists of the re-introduction of autoconf support, PAM
support, EGD[1]/PRNGD[2] support and replacements for OpenBSD library
functions that are (regrettably) absent from other unices. This port
has been best tested on AIX, Cygwin, HP-UX, Linux, MacOS/X,
NetBSD, OpenBSD, OpenServer, Solaris, Unicos, and UnixWare.

This version actively tracks changes in the OpenBSD CVS repository.

The PAM support is now more functional than the popular packages of
commercial ssh-1.2.x. It checks "account" and "session" modules for
all logins, not just when using password authentication.

OpenSSH depends on Zlib[3], OpenSSL[4], and optionally PAM[5] and
libedit[6]

There is now several mailing lists for this port of OpenSSH. Please
refer to https://www.openssh.com/list.html for details on how to join.

Please send bug reports and patches to the mailing list
openssh-unix-dev@mindrot.org. The list is open to posting by unsubscribed
users.  Code contribution are welcomed, but please follow the OpenBSD
style guidelines[7].

Please refer to the INSTALL document for information on how to install
OpenSSH on your system.

Damien Miller <djm@mindrot.org>

Miscellania -

This version of OpenSSH is based upon code retrieved from the OpenBSD
CVS repository which in turn was based on the last free sample
implementation released by Tatu Ylonen.

References -

[0] https://www.openssh.com/
[1] http://www.lothar.com/tech/crypto/
[2] http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html
[3] http://www.gzip.org/zlib/
[4] http://www.openssl.org/
[5] http://www.openpam.org
    http://www.kernel.org/pub/linux/libs/pam/
    (PAM also is standard on Solaris and HP-UX 11)
[6] http://thrysoee.dk/editline/ (portable version)
[7] http://man.openbsd.org/style.9
crank version numbers 2017-03-20 09:23:04 +08:00			`See https://www.openssh.com/releasenotes.html#7.5p1 for the release notes.`
- (dtucker) [README] Add pointer to release notes. ok djm@ 2004-02-24 13:13:24 +08:00
Update links. Make links to openssh.com HTTPS now that it's supported, point release notes link to the HTML release notes page, and update a couple of other links and bits of text. 2016-10-21 02:22:55 +08:00			`Please read https://www.openssh.com/report.html for bug reporting`
we don't use Github for issues/pull-requests 2015-08-21 12:49:03 +08:00			`instructions and note that we do not use Github for bug reporting or`
			`patch/pull-request management.`

Update links. Make links to openssh.com HTTPS now that it's supported, point release notes link to the HTML release notes page, and update a couple of other links and bits of text. 2016-10-21 02:22:55 +08:00			`- A Japanese translation of this document and of the release notes is`
Fix Haruyama-san's email address 2000-11-29 09:51:14 +08:00			`- available at http://www.unixuser.org/~haruyama/security/openssh/index.html`
HARUYAMA Seigo has changed address 2001-12-24 11:17:21 +08:00			`- Thanks to HARUYAMA Seigo <haruyama@unixuser.org>`
add warning 2000-03-07 19:40:57 +08:00
- (djm) Remove UPGRADING document in favour of a link to the better maintained FAQ on www.openssh.com 2000-11-06 09:48:54 +08:00			`This is the port of OpenBSD's excellent OpenSSH[0] to Linux and other`
- Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com> 1999-11-19 04:56:21 +08:00			`Unices.`
Initial revision 1999-10-27 11:42:43 +08:00
cleanups. 2001-02-24 17:00:23 +08:00			`OpenSSH is based on the last free version of Tatu Ylonen's sample`
			`implementation with all patent-encumbered algorithms removed (to`
			`external libraries), all known security bugs fixed, new features`
			`reintroduced and many other clean-ups. OpenSSH has been created by`
			`Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt,`
Update links. Make links to openssh.com HTTPS now that it's supported, point release notes link to the HTML release notes page, and update a couple of other links and bits of text. 2016-10-21 02:22:55 +08:00			`and Dug Song. It has a homepage at https://www.openssh.com/`
Initial revision 1999-10-27 11:42:43 +08:00
Doc and spec updates 1999-11-11 07:50:04 +08:00			`This port consists of the re-introduction of autoconf support, PAM`
Minor updates to some README files. 2004-06-28 11:50:35 +08:00			`support, EGD[1]/PRNGD[2] support and replacements for OpenBSD library`
			`functions that are (regrettably) absent from other unices. This port`
			`has been best tested on AIX, Cygwin, HP-UX, Linux, MacOS/X,`
			`NetBSD, OpenBSD, OpenServer, Solaris, Unicos, and UnixWare.`

- Doc updates 2000-05-09 13:03:37 +08:00			`This version actively tracks changes in the OpenBSD CVS repository.`
Initial revision 1999-10-27 11:42:43 +08:00
Renamed README -> README.Ylonen Renamed README.openssh -> README Minor updated to new README 1999-10-30 09:30:35 +08:00			`The PAM support is now more functional than the popular packages of`
			`commercial ssh-1.2.x. It checks "account" and "session" modules for`
Documentation updates 1999-11-12 13:06:47 +08:00			`all logins, not just when using password authentication.`
Initial revision 1999-10-27 11:42:43 +08:00
mention libedit 2017-07-21 12:24:26 +08:00			`OpenSSH depends on Zlib[3], OpenSSL[4], and optionally PAM[5] and`
			`libedit[6]`
Doc updates 1999-11-09 12:03:01 +08:00
Doc updates 2000-01-06 17:28:41 +08:00			`There is now several mailing lists for this port of OpenSSH. Please`
Update links. Make links to openssh.com HTTPS now that it's supported, point release notes link to the HTML release notes page, and update a couple of other links and bits of text. 2016-10-21 02:22:55 +08:00			`refer to https://www.openssh.com/list.html for details on how to join.`
Added mailing list info 1999-11-12 11:11:10 +08:00
Doc updates 2000-01-06 17:28:41 +08:00			`Please send bug reports and patches to the mailing list`
Fix formatting. 2016-10-21 06:46:46 +08:00			`openssh-unix-dev@mindrot.org. The list is open to posting by unsubscribed`
			`users. Code contribution are welcomed, but please follow the OpenBSD`
mention libedit 2017-07-21 12:24:26 +08:00			`style guidelines[7].`
- (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK based on patch from Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> 2000-06-26 11:01:33 +08:00
Added INSTALL documentation Minor other doc updates 1999-11-12 11:35:58 +08:00			`Please refer to the INSTALL document for information on how to install`
Update links. Make links to openssh.com HTTPS now that it's supported, point release notes link to the HTML release notes page, and update a couple of other links and bits of text. 2016-10-21 02:22:55 +08:00			`OpenSSH on your system.`
Documentation updates 1999-11-12 13:06:47 +08:00
Change of employer :) 2000-10-28 10:22:06 +08:00			`Damien Miller <djm@mindrot.org>`
Initial revision 1999-10-27 11:42:43 +08:00
- djm@cvs.openbsd.org 2003/11/21 11:57:03 [everything] unexpand and delete whitespace at EOL; ok markus@ (done locally and RCS IDs synced) 2003-11-21 20:48:55 +08:00			`Miscellania -`
Initial revision 1999-10-27 11:42:43 +08:00
cleanups. 2001-02-24 17:00:23 +08:00			`This version of OpenSSH is based upon code retrieved from the OpenBSD`
			`CVS repository which in turn was based on the last free sample`
			`implementation released by Tatu Ylonen.`
Initial revision 1999-10-27 11:42:43 +08:00
Lots of changes: - Removed lots of unnecessary checks from autoconf - Added support and autoconf test for openpty() function (Unix98 pty support) - Fix for scp not finding ssh if not installed as /usr/bin/ssh - Added TODO file - Merged parts of Debian patch From Phil Hands <phil@hands.com>: - Added ssh-askpass program - Added ssh-askpass support to ssh-add.c - Create symlinks for slogin on install - Fix "distclean" target in makefile - Added example for ssh-agent to manpage - Added support for PAM_TEXT_INFO messages - Disable internal /etc/nologin support if PAM enabled - Merged latest OpenBSD CVS changes: - [sshd.c] don't send fail-msg but disconnect if too many authentication failures - [sshd.c] replace assert() with error, fatal or packet_disconnect - [sshd.c] remove unused argument. ok dugsong - [sshd.c] typo - [rsa.c] clear buffers used for encryption. ok: niels - [rsa.c] replace assert() with error, fatal or packet_disconnect - Fixed coredump after merge of OpenBSD rsa.c patch 1999-11-08 12:30:59 +08:00			`References -`

Update links. Make links to openssh.com HTTPS now that it's supported, point release notes link to the HTML release notes page, and update a couple of other links and bits of text. 2016-10-21 02:22:55 +08:00			`[0] https://www.openssh.com/`
Doc and spec updates 1999-11-11 07:50:04 +08:00			`[1] http://www.lothar.com/tech/crypto/`
- (djm) Mention PRNGd in documentation, it is nicer than EGD - (djm) Automatically search for "well-known" EGD/PRNGd sockets in autoconf 2001-01-25 07:51:46 +08:00			`[2] http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html`
- (stevesk) README: zlib location is http://www.gzip.org/zlib/ 2001-10-29 02:10:22 +08:00			`[3] http://www.gzip.org/zlib/`
- (djm) Mention PRNGd in documentation, it is nicer than EGD - (djm) Automatically search for "well-known" EGD/PRNGd sockets in autoconf 2001-01-25 07:51:46 +08:00			`[4] http://www.openssl.org/`
- (djm) [README README.privsep] Mention FreeBSD and NetBSD as being supported by privsep. Requested by des AT des.no 2005-06-05 07:21:41 +08:00			`[5] http://www.openpam.org`
Update links. Make links to openssh.com HTTPS now that it's supported, point release notes link to the HTML release notes page, and update a couple of other links and bits of text. 2016-10-21 02:22:55 +08:00			`http://www.kernel.org/pub/linux/libs/pam/`
- (djm) [README README.privsep] Mention FreeBSD and NetBSD as being supported by privsep. Requested by des AT des.no 2005-06-05 07:21:41 +08:00			`(PAM also is standard on Solaris and HP-UX 11)`
mention libedit 2017-07-21 12:24:26 +08:00			`[6] http://thrysoee.dk/editline/ (portable version)`
			`[7] http://man.openbsd.org/style.9`