topic Re: ssh2 in Operating System - HP-UX

ssh2

Shivkumar — Fri, 13 Oct 2006 22:25:57 GMT

Hi,

How tunnelling works between ssh connection ?
Is ssh2 latest version of ssh ?

Thanks,
Shiv

Re: ssh2

Senthil Prabu.S_1 — Sat, 14 Oct 2006 01:44:32 GMT

Hi,

1. SH tunneling is nothing but,if you can SSH from one host to another, you can tunnel other TCP connections over the secure encrypted SSH session.[3] This allows you to protect an otherwise cleartext protocol like POP etc...

There are two kinds of tunneling - LocalForwards and RemoteForwards.

Please refer this link for more detailed explaination;

http://www.ssh.com/support/documentation/online/ssh/winhelp/32/Tunneling_Explained.html
http://www.rzg.mpg.de/networking/tunnelling.html

2. The latest version of OpenSSH is OpenSSH 4.4.

HTH,
Prabu.S

Re: ssh2

Balakumar M — Sat, 14 Oct 2006 02:08:56 GMT

Check the attached file.

Re: ssh2

Robert Fritz — Mon, 16 Oct 2006 13:06:13 GMT

One clarification.

There are two handshake protocols, 1 and 2.
I've heard them referred to as ssh1 and ssh2. You can select which ones you want on the protocol line in /etc/opt/ssh/ssh_config

Re: ssh2

Steven E. Protter — Mon, 16 Oct 2006 13:12:01 GMT

Shalom Shiv,

I reccommend if possible that sshd_config be modified to only permit ssh2 connections.

ssh1 which is supported by secure shell/openssh has proven vulnerable to security threats.

The config file is pretty easy to read and change.

SEP

Re: ssh2

spex — Mon, 16 Oct 2006 13:15:25 GMT

Hi Shiv,

To enable X-tunneling (also called X-forwarding), use the '-X' flag with 'ssh' (e.g. ssh -X -l root myserver).

ssh1 and ssh2 are two different protocols. Their numbering scheme should not be confused with that of SSH server/client software. The latest version of OpenSSH I could find a binary for is 4.3p2, available here:

http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-4.3p2/

PCS

Re: ssh2

Shivkumar — Tue, 17 Oct 2006 00:07:56 GMT

i used to think earlier that ssh1 and ssh2 are later version of ssh. it is really confusing naming convention.

regards,
shiv

Re: ssh2

Raj D. — Tue, 17 Oct 2006 01:14:33 GMT

Hi Shiv ,

In 1996, a revised version of the protocol, SSH-2, was designed, incompatible with SSH-1. In 2006, this protocol became a proposed Internet standard with the publication by the IETF "secsh" working group of RFCs (see references). SSH-2 features both security and feature improvements over SSH-1. Better security, for example, comes through Diffie-Hellman key exchange and strong integrity checking via MACs. New features of SSH-2 include the ability to run any number of shell sessions over a single SSH connection [2].

In 1999, developers wanting a free software version to be available went back to the older 1.2.12 release of the original ssh program, which was the last released under an open source license.

You can check this for details:

http://en.wikipedia.org/wiki/Secure_Shell

Chers,
Raj.