OpenSSH - Revision history

PhilippeTeuwen: Reverted edits by Etegohy (Talk) to last revision by PhilippeTeuwen

2010-11-24T20:34:02Z

Reverted edits by Etegohy (Talk) to last revision by PhilippeTeuwen

Can't load revision 6823

at 00:28, 24 November 2010

2010-11-24T00:28:58Z

Can't load revision 6666

PhilippeTeuwen: /* Patch for login with eID */

2008-04-02T13:21:57Z

Patch for login with eID

← Older revision		Revision as of 13:21, 2 April 2008
Line 18:		Line 18:
	ssh -I 0 user@host.com		ssh -I 0 user@host.com
	Here is the patch:		Here is the patch:
			<pre>
	<source lang=diff>

	diff -Naur openssh-4.7p1.orig/debian/control openssh-4.7p1/debian/control		diff -Naur openssh-4.7p1.orig/debian/control openssh-4.7p1/debian/control
	--- openssh-4.7p1.orig/debian/control 2008-02-05 01:27:54.000000000 +0100		--- openssh-4.7p1.orig/debian/control 2008-02-05 01:27:54.000000000 +0100
Line 546:		Line 545:
	options.num_identity_files < SSH_MAX_IDENTITY_FILES &&		options.num_identity_files < SSH_MAX_IDENTITY_FILES &&
	(keys = sc_get_keys(options.smartcard_device, NULL)) != NULL) {		(keys = sc_get_keys(options.smartcard_device, NULL)) != NULL) {
	</~~source~~>		</pre>

	==Patch for faster transfers==		==Patch for faster transfers==

PhilippeTeuwen: /* Patch for login with eID */

2008-04-02T13:20:01Z

Patch for login with eID

Show changes

PhilippeTeuwen: /* Patch for login with eID */

2008-04-02T13:17:33Z

Patch for login with eID

← Older revision		Revision as of 13:17, 2 April 2008
Line 1:		Line 1:
	==Patch for login with eID==		==Patch for login with eID==

	cf [[Belgian_eID#SSH]]
			Inspired from http://simi.be/?page_id=9

			Getting the patch from http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=355274 and porting it to v4.7p1
			<br>Some rejs easy to solve from v4.2 to v4.7 and one less obvious change in debian/control: fix the debconf dependancies (was ${debconf:Depends} I think):
			Package: openssh-client-sc
			Architecture: any
			Depends: ${shlibs:Depends}, debconf (>= 1.2.0) \| debconf-2.0,...
			<br>I recompile ssh with smartcard support.
			apt-get source openssh-client
			cd openssh-4.7p1
			patch -p1 < ../mypatch
			dpkg-buildpackage -uc -us -rfakeroot
			Sending my public key to the ssh server:
			pkcs15-tool --read-ssh-key 2 \|tail -n1\|ssh user@host 'cat - >> ~/.ssh/authorized_keys'
			Then logging, being prompted for my PIN:
			ssh -I 0 user@host.com

	==Patch for faster transfers==		==Patch for faster transfers==

PhilippeTeuwen: /* Login with eID */

2008-04-02T13:16:55Z

← Older revision		Revision as of 13:16, 2 April 2008
Line 1:		Line 1:
	==~~Login~~ with eID==		==Patch for login with eID==
	cf [[Belgian_eID#SSH]]		cf [[Belgian_eID#SSH]]

	==Patch for faster transfers==		==Patch for faster transfers==
	See http://www.psc.edu/networking/projects/hpn-ssh/		See http://www.psc.edu/networking/projects/hpn-ssh/

PhilippeTeuwen at 13:08, 2 April 2008

2008-04-02T13:08:30Z

← Older revision		Revision as of 13:08, 2 April 2008
Line 2,346:		Line 2,346:
	#endif		#endif
	</pre>		</pre>

			Some results:
			<pre>
			# ssh -c arcfour -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			[50.5MB/s]
			# ssh -c arcfour128 -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			[50.5MB/s]
			# ssh -c blowfish-cbc -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			[31.9MB/s]
			# ssh -c aes128-cbc -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			[30.7MB/s]
			# ssh -c aes128-ctr -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			[25.9MB/s]
			# ssh -c aes256-cbc -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			[ 25MB/s]
			# ssh -c aes256-ctr -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			[16.2MB/s]
			# ssh -c cast128-cbc -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			[13.1MB/s]
			# ssh -c arcfour256 -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			[12.9MB/s]
			</pre>
			Results give the same order as on the official page, arcfour ranked #1, blowfish #2 & aes128 #3
			<pre>
			# ssh -t -c none -oNoneSwitch=yes -oNoneEnabled=yes -p8322 localhost "dd if=/dev/zero" \|pv > /dev/null
			Pre-authentication none cipher requests are not allowed.
			</pre>
			(even with NoneEnabled=yes on the server-side :-( )

PhilippeTeuwen at 12:23, 2 April 2008

2008-04-02T12:23:46Z

← Older revision		Revision as of 12:23, 2 April 2008
Line 6:		Line 6:
	Here is the patch OpenSSH-4.7p1-hpn13 v1 ported to Debian OpenSSH-4.7p1-5		Here is the patch OpenSSH-4.7p1-hpn13 v1 ported to Debian OpenSSH-4.7p1-5

			<pre>
	<source lang=diff>
	diff -Naur openssh-4.7p1-debian/HPN12-README openssh-4.7p1/HPN12-README		diff -Naur openssh-4.7p1-debian/HPN12-README openssh-4.7p1/HPN12-README
	--- openssh-4.7p1-debian/HPN12-README 1970-01-01 01:00:00.000000000 +0100		--- openssh-4.7p1-debian/HPN12-README 1970-01-01 01:00:00.000000000 +0100
Line 2,345:		Line 2,345:
	+#define SSH_RELEASE SSH_VERSION SSH_PORTABLE SSH_HPN		+#define SSH_RELEASE SSH_VERSION SSH_PORTABLE SSH_HPN
	#endif		#endif
	</~~source~~>		</pre>

PhilippeTeuwen: New page: ==Login with eID== cf Belgian_eID#SSH ==Patch for faster transfers== See http://www.psc.edu/networking/projects/hpn-ssh/ Here is the patch OpenSSH-4.7p1-hpn13 v1 ported to Debian Open...

2008-04-02T12:22:52Z

New page: ==Login with eID== cf Belgian_eID#SSH ==Patch for faster transfers== See http://www.psc.edu/networking/projects/hpn-ssh/ Here is the patch OpenSSH-4.7p1-hpn13 v1 ported to Debian Open...

Show changes