Status of SSH 2.0 protocol support?

Markus Friedl markus.friedl at
Tue May 2 08:57:07 EST 2000

On Mon, May 01, 2000 at 03:02:03PM -0700, John Hardin wrote:
> Just to bring everyone up to date, could we get a report on the status
> of support for the 2.x protocol?

why do you want SSH2?

% cat README.openssh2
$Id: README.openssh2,v 1.7 2000/04/28 08:10:20 markus Exp $

	1) generate server key:
		$ ssh-keygen -d -f /etc/ssh_host_dsa_key -N ''
	2) enable ssh2:
		server: add 'Protocol 2,1' to /etc/sshd_config
		client: ssh -o 'Protocol 2,1', or add to .ssh/config
	3) DSA authentication similar to RSA (add keys to ~/.ssh/authorized_keys2)
	   interop w/ dsa-keys:
		ssh-keygen -f /key/from/ -X >> ~/.ssh/authorized_keys2
	   and vice versa
		ssh-keygen -f /privatekey/from/openssh -x > ~/.ssh2/
		echo Key >> ~/.ssh2/authorization

	secsh-transport: works w/o rekey
		proposal exchange, i.e. different enc/mac/comp per direction
		encryption: blowfish-cbc, 3des-cbc, arcfour, cast128-cbc
		mac: hmac-md5, hmac-sha1, (hmac-ripemd160)
		compression: zlib, none
	secsh-userauth: passwd and pubkey with DSA
	secsh-connection: pty+shell or command, flow control works (window adjust)
		tcp-forwarding: -L works, -R incomplete
	dss/dsa: host key database in ~/.ssh/known_hosts2
	client interops w/ sshd2, lshd
	server interops w/ ssh2, lsh,'s Windows client, SecureCRT, F-Secure SSH Client 4.0
	server supports multiple concurrent sessions (e.g. with Windows client)
	secsh-connection features:
		 tcp-forwarding, agent-fwd
	auth other than passwd, and DSA-pubkey:
		 keyboard-interactive, (PGP-pubkey?)
	server-auth w/ old host-keys
	advanced key storage?

$Date: 2000/04/28 08:10:20 $

> The home page says "next major release"

next major release of OpenBSD, i.e. OpenBSD 2.7

> - is that 1.3 or 2.0? And is there any feel for when it'll be generally
> available?

you can get OpenSSH w/ proto 1 and 2 support from the openbsd cvs right now.


More information about the openssh-unix-dev mailing list