topic Re: Secure Shell Validation in Operating System - HP-UX

Secure Shell Validation

Coleman Blake_2 — Tue, 20 May 2003 16:12:34 GMT

Has the Secure Shell product (OpenSSH 3.50, the depot name starts with T1471AA)been validated by NIST or some similar organization?

For future reference, does HP keep a list of security validated software?

Coleman Blake.

Re: Secure Shell Validation

James A. Donovan — Tue, 20 May 2003 16:39:52 GMT

Can't help you with what HP does, but maybe these sites will help answer some of your questions....

http://www.openssh.org
http://www.openssh.org/security.html
http://www.openbsd.org/security.html

Re: Secure Shell Validation

Steven E. Protter — Tue, 20 May 2003 18:08:43 GMT

My understanding is HP ported a secure open source version to HP-UX, allowing for the proprietary aspects of the OS.

If the source of the port is validated, one would think the end product is as well. At least it should be.

As a practical matter, Secure Shell 3.5 and earlier versions are solid products, you can rely on. I use them on five machines.

SEP

Re: Secure Shell Validation

Berlene Herren — Wed, 21 May 2003 16:05:27 GMT

I have asked that our security team take a look at this thread.

Berlene

Re: Secure Shell Validation

Bill Douglass — Wed, 21 May 2003 17:38:27 GMT

Is that a good thing or a bad thing?