Re: Openssh and sendmail signatures

From: Michael Zimmermann (zim@vegaa.de)
Date: 09/12/02


From: Michael Zimmermann <zim@vegaa.de>
To: "focus-linux" <focus-linux@securityfocus.com>
Date: Thu, 12 Sep 2002 00:55:39 +0200


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At Mittwoch, 11. September 2002 20:48 Kurt Seifried wrote:
> > How do I prevent Openssh telling which version is running?
> Part of the OpenSSH spec requires you to tell the remote end what version
> you are running, i.e. so it knows what the capabilities are.

Nope. You're mixing protocol version with software version.

If one wants to hide the latter, compilation from source
is needed (with a different version string set in version.h).

> You could
> pretend to run a different version but may run into trouble.

No trouble with different software versions (as explained above).

Greetings
- --
Michael Zimmermann (Vegaa Safety and Security for Internet Services)
Key fingerprint = 1E47 7B99 A9D3 698D 7E35 9BB5 EF6B EEDB 696D 5811
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9f8n472vu22ltWBERAgurAJ9Ep4Hfs1PFyq8izDhtZp6QebDgyQCfQPLA
EXtvZzHru5PloVUDc+VXlkE=
=j7qX
-----END PGP SIGNATURE-----