OpenSSH is available on the RH6.1 distro - at least it is on the one that
was published by APC.
There was/is a problem with the RSA lib implementation of ssh - some sort
of vulnerability - check CERT or AUSCERT or BUGTRAQ for details. I don't
think the problem affects ssh if it is not compiled with the RSA libs.
Howard.
______________________________________________________
LANNet Computing Associates <http://www.lannet.com.au>
On Sun, 30 Apr 2000, Anand Kumria wrote:
> On Sun, Apr 30, 2000 at 06:59:12PM +1000, erich wrote:
> > I have read a lot of people talking about not using telnet over the
> > internet, the question is:
> > How do make "secure" (read, secure as practical) remote connections
> > over the internet ?
>
> Most people will use `ssh' for interactive remote connection (presumably
> what you were after). Something to keep in mind is that there are two
> versions of the protocol ssh-1 and secsh.
>
> F-Secure / Datafellows ssh and OpenSSH both implement ssh-1; almost
> every distribution has F-Secure ssh available. Often, however, they
> are only available from the "non-us" servers.
>
> [ For Redhat: http://orcus.progsoc.org/pub/Linux/redhat-non-US
> For Debian: http://orcus.progsoc.org/pub/Linux/debian-non-US
> Others, I'm not sure about, anyone have URLs? ]
>
> In all cases keep in mind that they use RSA which presents no problems
> in Australia but does if the machine in question is located in the US
> (Until September 20th 2000).
>
> A better option will be to use OpenSSH. It will be available in the
> next releases of most distributions if it is not already I believe.
>
> Another option is to use SSLTelnet, which is similiar to the security
> you get when going to "secure" websites. Again carried at most "non-us"
> distribution sites.
>
> Finally if you don't need interactive access you have other options
> (like SFS, X11 tokens, etc.)
>
> Hope this helps,
> Anand
> --
> SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
> To unsubscribe send email to [EMAIL PROTECTED] with
> unsubscribe in the text
>
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
