It would be nice if OpenSSH would have features to circumvent network filters, like SSL tunneling
dtucker at dtucker.net
Thu Apr 20 15:40:19 AEST 2023
On Thu, 20 Apr 2023 at 12:04, Yuri <yuri at rawbw.com> wrote:
> I suggest that OpenSSH adds the SSL tunneling feature:
I don't think this is something we would be interested in doing.
1) it's a pretty niche feature.
2) it would require adding a dependency on OpenSSL's libssl which we
currently do not have.
3) as you note, there are already ways to do this kind of thing via
inetd/proxycommand and/or stunnel.
4) I don't think we'd want to play whack-a-mole with the middlebox
If I was trying to do this I'd probably start with stunnel and look at
adding the feature you want to that.
Darren Tucker (dtucker at dtucker.net)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860 37F4 9357 ECEF 11EA A6FA
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
More information about the openssh-unix-dev