This is the first release with the new code in libspki. Unfortunately there are some incompatible changes. See the comments in the lsh-upgrade for more information. There are currently no tools for converting private keys.
This is also the first release that is made after xenofarm testing. See http://www.lysator.liu.se/~nisse/xeno-lsh/latest.html for recent results. I believe lsh-1.5.1 should compile out of the box on Linux and Solaris. There are minor problems on FreeBSD and HPUX that need to be sorted out. Other OS:es are mostly unknown, the other current client machines don't have the build dependencies (gmp and liboop) installed properly. If your favourite OS is missing on the list, you are encouraged to set up your own xenofarm client. See http://www.lysator.liu.se/xenofarm/ for more information, and mail me if you need any help in setting it up. News for the 1.5.1 release Incompatible change to key format, to comply with the current spki structure draft. You can use the script lsh-upgrade to copy and convert the information in the old .lsh/known-hosts to the new file .lsh/host-acls. The new code uses libspki. Fixed IPv6 bug reported by Simon Kowallik. lshd now does the equivalence of ulimit -n unlimited, this is inherited by processes started upon client requests. If you don't want this, you should use /etc/{profile,login,whatever} to set limits for your users. Do note that PAM-based solutions will NOT work as PAM is used from a separate process that terminates as soon as the authentication is finished (this of course goes for environment variables too). lsh and and lshg now parses options from LSHFLAGS and LSHGFLAGS, these are parsed before and can be overridden by the command line. As usual, available at http://www.lysator.liu.se/~nisse/archive/lsh-1.5.1.tar.gz ftp://ftp.lysator.liu.se/pub/security/lsh/lsh-1.5.1.tar.gz Happy hacking, /Niels _______________________________________________ lsh-bugs mailing list [EMAIL PROTECTED] http://lists.lysator.liu.se/mailman/listinfo/lsh-bugs
