topic Re: ssh version upgrade in Operating System - HP-UX

ssh version upgrade

denaro — Fri, 08 Sep 2017 06:32:47 GMT

Hi team! We have a vulnerability assessment in our HP-Ux boxes. As per this we have to update the ssh version from 1 to 2 . I check version ssh by "ssh -V"

OpenSSH_6.2p1+sftpfilecontrol-v1.3-hpn13v12, OpenSSL 0.9.8y 5 Feb 2013
HP-UX Secure Shell-A.06.20.006, HP-UX Secure Shell version

after I edit file "vi /opt/ssh/etc/ssh_config" and change Protocol 2,1 to Protocol 2

check by this command grep -i protocol /opt/ssh/etc/sshd_config
Protocol 2
# HostKey for protocol version 1
# HostKeys for protocol version 2
# similar for protocol version 2

I restarted ssh demon but when i check version ssh? he can't change

restarted by /sbin/init.d/secsh start and stop

and by this sh /sbin/init.d/secsh start and stop

Please help

Re: ssh version upgrade

Steven Schweda — Fri, 08 Sep 2017 13:31:31 GMT

> [...] I check version ssh by "ssh -V"

   A better start would be "uname -a".

> OpenSSH_6.2p1+sftpfilecontrol-v1.3-hpn13v12, OpenSSL 0.9.8y 5 Feb 2013
> HP-UX Secure Shell-A.06.20.006, HP-UX Secure Shell version

   Before I started playing with configuration files on an obsolete
version of Secure Shell, I'd investigate a current version of Secure
Shell. For example, a search for "secure shell" at hpe.com led to:
https://h20392.www2.hpe.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

> I restarted ssh demon but when i check version ssh? he can't change

   Did you expect to change the _program_ version by editing a
configuration file?

Re: ssh version upgrade

Bill Hassell — Fri, 08 Sep 2017 13:53:27 GMT

The protocol (as well as the dozens of other parameters in sshd_config) will not change the version. You can verify that protocol 1 won't work by running ssh -1 <yourHP-UXhost> from a remote system and looking at the result. It should say:

# ssh -1 atl6 date
Protocol major versions differ: 1 vs. 2
#

and will not connect.

The man page for ssh shows the command line options.

Re: ssh version upgrade

denaro — Sun, 10 Sep 2017 07:23:30 GMT

I checked connect by ssh -1 <yourHP-UXhost> and he gave message

Protocol major versions differ: 1 vs. 2

when i tried connect by ssh -2 <yourHP-UXhost> he asked password. It's mean ssh change yourself protocol?

Re: ssh version upgrade

denaro — Sun, 10 Sep 2017 07:27:20 GMT

Did you expect to change the _program_ version by editing a
configuration file?

I read manuals and many manuals say than change this configuration files and your ssh change protocol to v2

Re: ssh version upgrade

Bill Hassell — Sun, 10 Sep 2017 22:20:24 GMT

It sounds like ssh is working correctly. Is that right?