Re: authorized key login Solaris/linux

From: Richard E. Silverman (slade@shore.net)
Date: 07/30/02 

From: slade@shore.net (Richard E. Silverman)
Date: 30 Jul 2002 01:25:16 -0400

>>>>> "BM" == Brian Miller <nospammers@CLIPTHISspringmail.com> writes:

    BM> OpenSSH and SSH1 have different structures for their public key
    BM> files, doesn't it?

No; they are the same -- or more precisely, they are the same for protocol
1, and of course SSH1 doesn't *do* protocol 2 at all.

    BM> You have to first export your key to SSH1 format and then copy to
    BM> authorized_keys. Try 'ssh-keygen -e -f opensshkey.pub
    BM> >ssh1key.pub'. ssh-keygen writes to STDOUT so you have to
    BM> redirect it.

This is all wrong; the ssh-keygen -[ei] functions convert between the
OpenSSH and ssh.com formats, not SSH1 (those are the same already). 

-- 
  Richard Silverman
  slade@shore.net

Relevant Pages

  • FreeBSD Security Advisory FreeBSD-SA-01:24.ssh
    ... OpenSSH is an implementation of the SSH1 and SSH2 secure shell ... An SSH1 client/server from ssh.com is included in the ports ... mistake in code intended to work around a protocol flaw in the SSH1 ... of the ssh port prior to ssh-1.2.27_3 are vulnerable to these attacks. ...
    (FreeBSD-Security)
  • Re: Request for Comments: Getting OpenSSH to work with ssh.com and itself
    ... All the titles involving mixed protocol versions ... "To be clear, the two protocol versions SSH1 and SSH2 do not interoperate, ... Leaving your keys around inside an ssh-agent indefinitely means ... > assume what you mean is connecting an SSH2 client to an OpenSSH server, ...
    (comp.security.ssh)
  • [HPADM] Summary: Running OpenSSH as a Daemon on HP-UX 11.11
    ... We chose OpenSSH instead of HP's SSH program because our main application ... The script is: ... # Checks for the existence of the host DSA key (protocol version 2) ... # Checks for the existence of the host RSA key ...
    (HP-UX-Admin)
  • Re: CVS and version 9.0
    ... I this OpenSSH version is removed kerberos support from protocol SSH1, ... users who use identity keys for remote login with passphrases. ... ssh-add is called and doesn't have a real TTY, ...
    (alt.os.linux.suse)
  • Re: Request for Comments: Getting OpenSSH to work with ssh.com and itself
    ... SSH userauth methods, and the choice depends strongly on whether the ... (openssh, protocol 1)-> ... Leaving your keys around inside an ssh-agent indefinitely means ...
    (comp.security.ssh)