Secure Shell Validation

[Coleman Blake_2]

Has the Secure Shell product (OpenSSH 3.50, the depot name starts with T1471AA)been validated by NIST or some similar organization?

For future reference, does HP keep a list of security validated software?

Coleman Blake.

[James A. Donovan]

Can't help you with what HP does, but maybe these sites will help answer some of your questions....

http://www.openssh.org
http://www.openssh.org/security.html
http://www.openbsd.org/security.html

[Steven E. Protter]

My understanding is HP ported a secure open source version to HP-UX, allowing for the proprietary aspects of the OS.

If the source of the port is validated, one would think the end product is as well. At least it should be.

As a practical matter, Secure Shell 3.5 and earlier versions are solid products, you can rely on. I use them on five machines.

SEP

[Berlene Herren]

I have asked that our security team take a look at this thread.

Berlene

[Bill Douglass]

Is that a good thing or a bad thing?