Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/crypto/dist/ssh Add a COMPATIBILITY section, mentioning the ...



details:   https://anonhg.NetBSD.org/src/rev/8d008b34768d
branches:  trunk
changeset: 501802:8d008b34768d
user:      mycroft <mycroft%NetBSD.org@localhost>
date:      Sun Jan 07 20:48:06 2001 +0000

description:
Add a COMPATIBILITY section, mentioning the lossage with IDEA-encrypted keys.

diffstat:

 crypto/dist/ssh/ssh.1 |  22 +++++++++++++++++++---
 1 files changed, 19 insertions(+), 3 deletions(-)

diffs (57 lines):

diff -r 86019ef2ebf9 -r 8d008b34768d crypto/dist/ssh/ssh.1
--- a/crypto/dist/ssh/ssh.1     Sun Jan 07 19:39:08 2001 +0000
+++ b/crypto/dist/ssh/ssh.1     Sun Jan 07 20:48:06 2001 +0000
@@ -1,6 +1,6 @@
 .\"  -*- nroff -*-
 .\"
-.\" $NetBSD: ssh.1,v 1.3 2000/11/20 06:42:05 mason Exp $
+.\" $NetBSD: ssh.1,v 1.4 2001/01/07 20:48:06 mycroft Exp $
 .\"
 .\" Author: Tatu Ylonen <ylo%cs.hut.fi@localhost>
 .\" Copyright (c) 1995 Tatu Ylonen <ylo%cs.hut.fi@localhost>, Espoo, Finland
@@ -36,7 +36,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd August 6, 2000
+.Dd January 7, 2001
 .Dt SSH 1
 .Os
 .Sh NAME
@@ -608,12 +608,13 @@
 .It Cm Cipher
 Specifies the cipher to use for encrypting the session.
 Currently,
-.Dq blowfish ,
+.Dq blowfish
 and
 .Dq 3des
 are supported.
 The default is
 .Dq 3des .
+(Also see the COMPATIBILITY section below.)
 .It Cm Ciphers
 Specifies the ciphers allowed for protocol version 2
 in order of preference.
@@ -1171,6 +1172,21 @@
 .Sx ENVIRONMENT
 above.
 .El
+.Sh COMPATIBILITY
+This implementation of SSH does not support the IDEA cipher.  If you have
+.Dq Cm Cipher No idea
+in
+.Pa $HOME/.ssh/config
+or
+.Pa /etc/ssh.conf ,
+you will need to change this (e.g. to
+.Dq Cm Cipher No 3des ) .
+Also, if you have private keys encrypted with IDEA, you will need to
+reencrypt them.  This can be done with the non-free SSH package from ssh.fi
+or with F-Secure SSH, using the
+.Dq Fl u
+option to
+.Xr ssh-keygen 1 .
 .Sh AUTHOR
 Tatu Ylonen <ylo%cs.hut.fi@localhost>, Markus Friedl, Theo de Raadt, Niels Provos,
 Dug Song, Aaron Campbell



Home | Main Index | Thread Index | Old Index