🚀 go-pugleaf

Ollivier Robert wrote:
> 
> [copie de cet article par courrier �lectronique]
> 
> Dans l'article <3567AFF7.1E9A3642@micronet.fr>,
> ASTY Patrick  <pasty@micronet.fr> disait :
> > Is there an "official" patch ssh-1.2.22-ssl.patch?
> 
> No, why do you want to use SSL with SSH ? What does SSL that SSH doesn't
> natively for you ? Note that the latest version of SSH is 1.2.23 now.

The "ssh-ssl" patch I've found has been made by Neil Dunbar. Here is
what it does:

"Basically, the ability to use X.509v3 certificates in addition to
the RSA public key format. Certificates can be verified against
the publicly available certificates of their issuers, have finite
life spans, and are not forgeable. Furthermore, certificates which
belong to entities no longer authorised to use them, or which have
become compromised owing to private key disclosure, can be revoked,
and the resulting Certificate Revocation List (CRL). The SSH programs
will check to see whether a certificate has been revoked, and refuse
to allow invalid certificates as proof of identity.

The changes also subsitute the use of the SSLeay symmetric key ciphers
for the SSH ones (with the exception of TSS, which is not a standard
cipher)."

> 
> > As I didn't find one, I have "patched" ssh-1.2.20-ssl.patch
> > (http://www.micronet.fr/~pasty/pasty/ssh-1.2.22-ssl.patch.gz).
> 

As this patch is for ssh-1.2.20, I upgraded it for 1.2.22 (and soon for
1.2.23)...

> Beware that you may be illegally supplying cryptographic material which is
> very strictly regulated by French law...
> --
> Ollivier ROBERT  -=- FreeBSD: The Power to Serve! -=-  roberto@freebsd.org
> Usenet Canal Historique

-- 
A.C.I.C. / ASTY Patrick

tel.: +33 1 45 32 37 00
mail: pasty@micronet.fr