Confusing! ssh, ssh1, ssh2, etc.

From: overbored (overboredNO_at_SPAMoverbored.net)
Date: 09/24/04

  • Next message: Richard E. Silverman: "Re: port forwading problem" 
    Date: Thu, 23 Sep 2004 22:07:06 +0000 (UTC)

    I've tried searching for answers to my questions but SSH2 gives me a lot of
    false hits. One good page is http://www.snailbook.com/faq/scp-ossh-to-
    ssh2.auto.html.

    This is how I understand the current situation of SSH. PLEASE correct any
    misconceptions!

    SSH Communications Corp has ssh1 and ssh2 as separate programs.
    OpenSSH has both protocol 1 and protocol 2 in one program.

    SSH Comm Corp's ssh1 uses the same protocol as OpenSSH's protocol 1, but
    SSH Comm Corp's ssh2 uses a completely different protocol than OpenSSH's
    protocol 2.

    I'm able to connect from my OpenSSH box into an SSH Comm Corp server just
    fine, where the server only has ssh2 installed. (The opposite is also true;
    I can connect from SSH Comm Corp box to OpenSSH box.) This implies that
    OpenSSH's protocol 2 (not protocol 1) and ssh2 are somehow compatible.

    However, the two are for some obscure reason incompatible when it comes to
    scp, as that web page described. (1) Can anyone explain this? (2) And does
    anybody know if there's any way around this (short of downloading SSH Comm
    Corp's proprietary ssh2 client, or using sftp...see below)?

    Lastly, is sftp simply an interface on top of scp (that is, it's just a
    shell that uses scp or some identical code from scp to do transfers)?
    That's what I thought, until I found that sftp still works (though scp
    doesn't).

    Can anybody clear up these issues? Thanks in advance!

  • Next message: Richard E. Silverman: "Re: port forwading problem"

    Relevant Pages

    • Re: SSH Version question
      ... However, your older daemon is having a higher number, "2.0", ... because it is configured to only support the SSH2 protocol. ...
      (Security-Basics)
    • SSH Key Exchange Algorithm
      ... The Secure Shell 2 (SSH2) protocol is a presentation layer protocol used to ... diffie-hellman-group1-sha1 key exchange algorithm. ... Sent from the SSH (Secure Shell) mailing list archive at Nabble.com. ...
      (SSH)
    • Re: SSH Vulnerability
      ... Almost all reports of "the SSH1 vulnerability" are traceable back to ... SSH2 was created for a ... primarily, IMHO, to get away from the patented RSA protocol. ...
      (comp.security.ssh)
    • SCP batchmode
      ... But if i try to connect in batch mode i've this error message: ... " scp: warning: ssh2 client failed to authenticate. ...
      (comp.security.ssh)
    • Re: What could be the possible security risks with SSH?
      ... How does SSH2 fare better than .rhosts or in other words what security ... > protocol only, using AES or Blowfish. ...
      (comp.os.linux.security)