1*0Sstevel@tonic-gate[ A Japanese translation of this document is available at 2*0Sstevel@tonic-gate[ http://www.unixuser.org/%7Eharuyama/security/openssh/index.html 3*0Sstevel@tonic-gate[ Thanks to HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp> 4*0Sstevel@tonic-gate 5*0Sstevel@tonic-gate******* IMPORTANT 6*0Sstevel@tonic-gate* On systmes which lack a /dev/random driver, version of this port 7*0Sstevel@tonic-gate* prior to 1.2.2 were not correctly seeding OpenSSL's random number 8*0Sstevel@tonic-gate* pool. This resulted in lower quality RSA keys being generated. If 9*0Sstevel@tonic-gate* you generated host or user keys with v1.2.2 or previous versions, 10*0Sstevel@tonic-gate* please generate new ones using a more recent version. 11*0Sstevel@tonic-gate 12*0Sstevel@tonic-gateThis is the port of OpenBSD's excellent OpenSSH[0] to Linux and other 13*0Sstevel@tonic-gateUnices. 14*0Sstevel@tonic-gate 15*0Sstevel@tonic-gateOpenSSH is based on the last free version of Tatu Ylonen's SSH with 16*0Sstevel@tonic-gateall patent-encumbered algorithms removed (to external libraries), all 17*0Sstevel@tonic-gateknown security bugs fixed, new features reintroduced and many other 18*0Sstevel@tonic-gateclean-ups. More information about SSH itself can be found in the file 19*0Sstevel@tonic-gateREADME.Ylonen. OpenSSH has been created by Aaron Campbell, Bob Beck, 20*0Sstevel@tonic-gateMarkus Friedl, Niels Provos, Theo de Raadt, and Dug Song. It has a 21*0Sstevel@tonic-gatehomepage at http://www.openssh.com/ 22*0Sstevel@tonic-gate 23*0Sstevel@tonic-gateThis port consists of the re-introduction of autoconf support, PAM 24*0Sstevel@tonic-gatesupport (for Linux and Solaris), EGD[1] support and replacements for 25*0Sstevel@tonic-gateOpenBSD library functions that are (regrettably) absent from other 26*0Sstevel@tonic-gateunices. This port has been best tested on Linux, Solaris, HPUX, NetBSD 27*0Sstevel@tonic-gateand Irix. Support for AIX, SCO, NeXT and other Unices is underway. 28*0Sstevel@tonic-gateThis version actively tracks changes in the OpenBSD CVS repository. 29*0Sstevel@tonic-gate 30*0Sstevel@tonic-gateThe PAM support is now more functional than the popular packages of 31*0Sstevel@tonic-gatecommercial ssh-1.2.x. It checks "account" and "session" modules for 32*0Sstevel@tonic-gateall logins, not just when using password authentication. 33*0Sstevel@tonic-gate 34*0Sstevel@tonic-gateOpenSSH depends on Zlib[2], OpenSSL[3] and optionally PAM[4]. 35*0Sstevel@tonic-gate 36*0Sstevel@tonic-gateThere is now several mailing lists for this port of OpenSSH. Please 37*0Sstevel@tonic-gaterefer to http://www.openssh.com/list.html for details on how to join. 38*0Sstevel@tonic-gate 39*0Sstevel@tonic-gatePlease send bug reports and patches to the mailing list 40*0Sstevel@tonic-gateopenssh-unix-dev@mindrot.org. The list is open to posting by 41*0Sstevel@tonic-gateunsubscribed users. 42*0Sstevel@tonic-gate 43*0Sstevel@tonic-gateIf you are a citizen of the USA or another country which restricts 44*0Sstevel@tonic-gateexport of cryptographic products, then please refrain from sending 45*0Sstevel@tonic-gatecrypto-related code or patches to the list. We cannot accept them. 46*0Sstevel@tonic-gateOther code contribution are accepted, but please follow the OpenBSD 47*0Sstevel@tonic-gatestyle guidelines[5]. 48*0Sstevel@tonic-gate 49*0Sstevel@tonic-gatePlease refer to the INSTALL document for information on how to install 50*0Sstevel@tonic-gateOpenSSH on your system. There are a number of differences between this 51*0Sstevel@tonic-gateport of OpenSSH and F-Secure SSH 1.x, please refer to the OpenSSH FAQ[6] 52*0Sstevel@tonic-gatefor details and general tips. 53*0Sstevel@tonic-gate 54*0Sstevel@tonic-gateDamien Miller <djm@mindrot.org> 55*0Sstevel@tonic-gate 56*0Sstevel@tonic-gateMiscellania - 57*0Sstevel@tonic-gate 58*0Sstevel@tonic-gateThis version of SSH is based upon code retrieved from the OpenBSD CVS 59*0Sstevel@tonic-gaterepository which in turn was based on the last free 60*0Sstevel@tonic-gateversion of SSH released by Tatu Ylonen. 61*0Sstevel@tonic-gate 62*0Sstevel@tonic-gateReferences - 63*0Sstevel@tonic-gate 64*0Sstevel@tonic-gate[0] http://www.openssh.com/faq.html 65*0Sstevel@tonic-gate[1] http://www.lothar.com/tech/crypto/ 66*0Sstevel@tonic-gate[2] ftp://ftp.freesoftware.com/pub/infozip/zlib/ 67*0Sstevel@tonic-gate[3] http://www.openssl.org/ 68*0Sstevel@tonic-gate[4] http://www.kernel.org/pub/linux/libs/pam/ (PAM is standard on Solaris) 69*0Sstevel@tonic-gate[5] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9&apropos=0&manpath=OpenBSD+Current 70*0Sstevel@tonic-gate[6] http://www.openssh.com/faq.html 71