openssh

Description:

An open source implementation of SSH protocol versions 1 and 2

Changes on AnNyung:

1. X 의존성 제거

2. 서버 기본 설정 변경 (/etc/ssh/sshd_config)

   • KeyRegenerationInterval 0

   • UseDNS no

   • GSSAPIAuthentication no

   • X11Forwarding no

   • Banner /etc/issue.net

   • AcceptEnv 에 USER_LANG 환경 변수 추가

3. 클라이언트 기본 설정 변경 (/etc/ssh/ssh_config)

   • GSSAPIAuthentication no

   • ForwardX11Trusted no

   • SendEnv 에 USER_LANG 환경 변수 추가

4. Banner 지시자에 지정된 파일(/etc/issue.net_)에 Magic Cookie 지원

5. ssh client에서 IDN 지원

   [root@an3 ~]$ ssh 청와대.com -v
   OpenSSH_6.6.1, OpenSSL 1.0.1e-fips 11 Feb 2013
   debug1: Reading configuration data /etc/ssh/ssh_config
   debug1: /etc/ssh/ssh_config line 49: Applying options for *
   debug1: Connecting to 청와대.com [211.234.63.232] port 22.
   ^C
   [root@an3 ~]$

6. host key check skip 옵션 추가 (-H)

   • 아래 예제는 둘다 동일한 방법임.

     [oops@an3 ~]$ ssh -H test.com
     [oops@an3 ~]$ ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no test.com

Sub packages:

• openssh-clients - An open source SSH client applications

• openssh-keycat - A mls keycat backend for openssh

• openssh-ldap - A LDAP support for open source SSH server daemon

• openssh-server - An open source SSH server daemon

• openssh-server-sysvinit - The SysV initscript to manage the OpenSSH server.

• pam_ssh_agent_auth - PAM module for authentication with ssh-agent