Igama
I-sshd - i-daemon ye-OpenSSH SSH
Isiqubulo
i-sshd [- deiqtD46 ] [- b bits ] [- f config_file ] [- g login_grace_time ] [- h host_key_file ] [- k key_gen_time ] [- o option ] [- p port ] [- u len ]
Incazelo
i-sshd (i-SSH Daemon) uhlelo lwe-daemon lwe- ssh (1). Ngokubili lezi zinhlelo zifaka esikhundleni se- rlogin kanye ne- rsh , futhi unikeze ukuxhumana okuphephile kwe- encrypted phakathi kwamabutho amabili angaphenduliwe ngenethiwekhi engaphephile. Izinhlelo zihloswe ukuba zibe lula ukufaka nokusebenzisa ngangokunokwenzeka.
I-sshd yi-daemon elalela ukuxhumana kusuka kumakhasimende. Kuvame ukuqala ebhuthini kusuka / / etc / rc It forks daemon entsha for uxhumano ngamunye engenayo. AmaDememoni aqanjiwe aphatha ukushintshwa kokhiye, ukubethela, ukuqinisekiswa, ukukhishwa komyalo, nokushintshaniswa kwedatha. Lokhu kuqaliswa kwe- sshd kusekela kokubili inguqulo ye-SSH ye-protocol 1 no-2 ngesikhathi esisodwa.
I-SSH Protocol Ye-Protocol 1
Umphathi ngamunye unesihluthulelo esithile se-RSA esivakashile (ngokuvamile 1024 bits) esetshenziselwa ukukhomba umeshi. Ukwengeza, uma i-daemon iqala, ikhiqiza ukhiye we-RSA wesiphakeli (ngokuvamile u-768 bits). Lesi sikhiye sivame ukuvuselelwa njalo ngehora uma sisetshenzisiwe, futhi singalokothi sigcinwe ku-disk.
Noma nini lapho iklayenti ixhuma i-daemon iyaphendula ngokusingatha komphakathi nezikhiye ze-server. Iklayenti iqhathanisa ukhiye we-RSA wesibindi ngokumelene nedatha yayo siqu ukuqinisekisa ukuthi ayishintshile. Iklayenti ikhiqiza inani elingu-256-bit okungahleliwe. Ihlanganisa le namba okungahleliwe esebenzisa ukhiye wesiphethi kanye nenkinobho yesiphakeli futhi ithumela inombolo encrypted kuseva. Zombili izinhlangothi bese zisebenzisa le nombolo engahleliwe njengesihluthulelo seseshini esetshenziselwa ukubethela konke ukuxhumana okuqhubekayo esimisweni. Okunye kweseshini kubhalwe ngekhodi ngokujwayelekile, okwamanje i-Blowfish noma i-3DES, ne-3DES isetshenziswa ngokuzenzakalelayo. Iklayenti ikhetha i- algorithm yokubethela ukuyisebenzisa kusuka kulabo abanikezwa iseva.
Okulandelayo, iseva kanye neklayenti faka ingxoxo yokuqinisekisa. Iklayenti izama ukuziqinisekisa ngokusebenzisa ukuqinisekiswa kwamahosthosts, ukuqinisekiswa kwe-.hosthost kuhlanganiswe nokuqinisekiswa kwe-RSA, ukuqinisekiswa kwe-RSA-impendulo yokuphendula, noma ukuqinisekiswa okusekelwe ngephasiwedi .
Ukuqinisekiswa kwama-Rhosts kuvamise ukukhubazeka ngoba akuphephile kakhulu, kepha kungenziwa amandla kwifayela lokumisa iseva uma ufisa. Ukulondeka kwesistimu akuthuthukisiwe ngaphandle kokuthi i- rshd rlogind ne-rexecd zikhutshaziwe (ngaleyo ndlela ikhubaza ngokuphelele i-rlogin bese i-rsh emshinini).
I-SSH Protocol Ye-2
I-version 2 isebenza ngokufanayo: Umphathi ngamunye unesihluthulelo esithile sendawo (RSA noma i-DSA) esetshenziselwa ukukhomba umeshi. Noma kunjalo, uma i-daemon iqala, ayikhiqizi ukhiye wesiphakeli. Ukuphepha kwangaphambili kunikezwa ngesivumelwano esiyisihluthulelo se-Diffie-Hellman. Lesi sivumelwano esiyinhloko sibangela ukhiye weseshini okwabiwe.
Okunye kweseshini kubhalwe nge-cipher ehambisanayo, njengamanje angu-128 bit AES, Blowfish, 3DES, CAST128, i-Arcfour, i-192 bit AES, noma i-256 bit AES. Iklayenti ikhetha i-algorithm yokubethela ukuyisebenzisa kusuka kulabo abanikezwa iseva. Ukwengeza, ubuqotho beseshini buhlinzekwa ngekhodi yokuqinisekisa imilayezo ye-cryptographic (hmac-sha1 noma hmac-md5).
I-Protocol version 2 inikeza ukhiye womphakathi osuselwe kumsebenzisi (U-PubkeyAuthentication) noma umphathi weklayenti (indlela ye-HostbasedAuthentication) yokuqinisekiswa, ukuqinisekiswa kwephasiwedi evamile, nezinqubo ezisekelwe enselele-mpendulo.
UkuLawulwa kokuLawula kanye nokuDluliswa kwedatha
Uma iklayenti iyaziqinisekisa ngokuzenzekelayo, ingxoxo yokulungiselela iseshini ifakiwe. Ngalesi sikhathi iklayenti ingase icele izinto ezifana nokwazisa ama-pty, ukudlulisela uxhumano lwe-X11, ukudlulisela uxhumano lwe-TCP / IP, noma ukudlulisela uxhumano lwe-agent yokugunyaza phezu kwesiteshi esiphephile.
Ekugcineni, iklayenti ingacela igobolondo noma ukukhishwa komyalo. Izinhlangothi bese ufaka imodi yeseshini. Kulo modi, noma yiluphi uhlangothi lungathumela idatha nganoma isiphi isikhathi, futhi idatha enjalo ithunyelwa ku / kusuka kugobolondo noma umyalo ohlangothini lweseva, kanye nokuphela komsebenzisi kumkhasimende.
Uma uhlelo lomsebenzisi luphela futhi konke okudluliselwe i-X11 nokunye ukuxhumeka kuvaliwe, iseva ithumela isimo sokuphuma komyalo kuklayenti futhi zombili izinhlangothi ziphume.
I-sshd ingalungiswa ngokusebenzisa okukhethwa kukho komyalo we-command noma ifayela lokumisa. Izinketho zamakholi we-Command zidlula amanani afakwe efayeleni lokucushwa.
I-sshd iphinda ifunde kabusha ifayela layo yokucushwa uma ithola isignali ye- hangup , i- SIGHUP ngokuzikhandla ngegama liqalisiwe njengokuthi, / usr / sbin / sshd
Izinketho zilandelayo:
-b bits
Icacisa inani lezinkinobho ku-ephemeral protocol version 1 ukhiye wesiphakeli (okuzenzakalelayo 768).
-d
Imodi yokulungisa. Iseva ithumela umkhiqizo we-verbose we-debug ohlelweni lwesistimu futhi awuzibeki ngemuva. Iseva nayo ngeke isebenze futhi izocubungula kuphela uxhumano olulodwa. Lolu khetho luhloselwe kuphela ukulungisa iphutha kwi-server. Izinketho eziningi -d zandisa izinga lokususa iphutha. Ubukhulu bungu-3.
-e
Uma le nketho icacisiwe, i- sshd izothumela okukhiphayo kuphutha elijwayelekile esikhundleni selogi yesistimu.
-f ukuhlela_friji
Icacisa igama lefayela lokucushwa. Okuzenzakalelayo yi / etc / ssh / sshd_config sshd wenqaba ukuqala uma kungekho ifayela lokumisa.
-g login_grace_time
Inikeza isikhathi somusa kumakhasimende ukuba aziqinisekise (imizuzu engama-120 ezenzakalelayo). Uma iklayenti ehluleka ukuqinisekisa umsebenzisi phakathi nale mizuzwana eminingi, iseva ixhuma, futhi iphuma. Inani le-zero alikhombisi umkhawulo.
-h hp_key_file
Icacisa ifayela lapho ikhi lokusingatha lifundwa khona. Lolu khetho kufanele lunikezwe uma i- sshd ingasebenzi njengezimpande (njengoba amafayili ayisihluthulelo ajwayelekile ngokuvamile angafundwanga nanoma ubani kodwa impande). Okuzenzakalelayo kuyinto / etc / ssh / ssh_host_key ye-protocol version 1, kanye / etc / ssh / ssh_host_rsa_key kanye / etc / ssh / ssh_host_dsa_key ye-protocol version 2. Kungenzeka ukuba namafayela amaningi ayisihluthulelo wezinguqulo ezahlukene zeprotocol kanye neskhi i-algorithms.
-i
Icacisa ukuthi i- sshd iyasebenza kusukela ku-inetd. I-sshd ivame ukugijima kusuka ku-inetd ngoba idinga ukhiqiza ukhiye we-server ngaphambi kokuthi iphendule iklayenti, futhi lokhu kungathatha amashumi eminithi. Amaklayenti kuzodingeka alinde isikhathi eside uma ukhiye uvuselelwa njalo. Kodwa-ke, ngamasayizi amancane ayisihluthulelo (isb., 512) usebenzisa i- sshd kusuka ku-inetd ingenzeka.
-k key_gen_time
Icacisa ukuthi kaningi kangakanani ukhiye we-server we-ephemeral protocol version 1 ovuselelwe (imizuzu engama-3600 ezenzakalelayo, noma ihora elilodwa). Isisusa sokuvuselela ukhiye ngokujwayelekile ukuthi isihluthulelo asigcini ndawo, futhi ngemva kwehora, akunakwenzeka ukubuyisela ukhiye wokuchithwa kwezokuxhumana ngaphandle kokuthi umshini uphonswe noma uthathwe ngokomzimba. Inani le-zero libonisa ukuthi ukhiye ngeke uphinde uvuselelwe.
-okhetho
Kungasetshenziselwa ukunikeza izinketho ngesakhiwo esetshenziselwa ifayela lokumisa. Lokhu kuyasiza ekucaciseni izinketho ezingekho ifulegi yomugqa womyalo ohlukile.
-p port
Icacisa ichweba lapho i-server ilalela ukuxhumana (okuzenzakalelayo 22). Izinketho eziningi ze-port zivunyelwe. Amaports okucacisiwe kwifayili yokucushwa ayakwaziswa uma i-port line yomyalo icacisiwe.
-q
Imodi eqinile. Akukho okuthunyelwe kwirekhodi lesistimu. Ngokuvamile ukuqala, ukuqinisekiswa, nokuqedwa koxhumano ngalunye kungene ngemvume.
-t
Imodi yokuhlola. Hlola kuphela ukufaneleka kwefayili yokucushwa kanye ne-sanity yezihluthulelo. Lokhu kuyasiza ekubuyekezeni i- sshd ngokuthembekile njengoba izinketho zokulungisa zingashintsha.
-u len
Lolu khetho lusetshenziselwa ukucacisa usayizi wensimu kwisakhiwo se- utmp esiphethe igama lesikhathi esikude. Uma igama lesikhamuzi elixazululiwe lide kunalokhu kusetshenziswe i-decimal yedasimali kunalokho. Lokhu kuvumela abakwa-Amanina ngamagama asebambe isikhathi eside kakhulu ukuthi agcwalise le nsimu ukuze ahlonishwe ngokukhethekile. Ukucacisa - u0 ubonisa ukuthi amakheli amadayimenti kuphela afanele afakwe efayeleni le-utmp. - u0 futhi isetshenziselwa ukuvimbela i- sshd ekwenzeni izicelo ze-DNS ngaphandle kokuthi indlela yokuqinisekisa noma ukumisa kudinga yona. Izinqubo zokuqinisekisa ukuthi zingadinga i-DNS zifaka amahostela amaRhostsAuthentication RhostsRSAAuthentication HostbasedUkuqinisekisa futhi usebenzisa okukhethwa kukho ku- = iphethini-uhlu lokukhethwa kukho kwifayili eyinhloko. Izinketho zokuhlela ezidinga i-DNS zihlanganisa ukusebenzisa i-USER @ HOST iphethini kuma- AllowUsers noma ama- DenyUsers
-D
Uma le nketho icacisiwe ukuthi i- sshd ngeke ikwazi ukuthola futhi ingabi i-daemon. Lokhu kuvumela ukuqapha okulula kwe- sshd
-4
AmaSshs sshd ukusebenzisa ikheli le-IPv4 kuphela.
-6
Amabutho sshd ukusebenzisa ikheli le-IPv6 kuphela.
Ifayela lokuhlela
I-sshd ifunda idatha yokucushwa kusuka ku- / etc / ssh / sshd_config (noma ifayili ecacisiwe nge - f kumgqeni womyalo). Ifomethi yefayili nezinketho zokucushwa zichazwe ku-sshd_config5.
Ukungena kwenqubo
Uma umsebenzisi engena ngempumelelo, i- sshd yenza lokhu okulandelayo:
- Uma ukungena ngemvume ku-tty, futhi akukho myalelo ocacisiwe, uhlela isikhathi sokungena sokugcina kanye / njll / motd (ngaphandle uma ivinjelwe efayeleni lokucushwa noma nge $ HOME / .hushlogin bheka isigaba se-Sx FILES).
- Uma ukungena ngemvume ku-tty, urekhoda isikhathi sokungena ngemvume.
- Ukuhlola / njll / i-nologin uma ikhona, iphrinta okuqukethwe kanye nama-quits (ngaphandle kokuthi izimpande).
- Izinguquko zokugijima ngamalungelo omsebenzisi avamile.
- Ibeka imvelo eyisisekelo.
- Ifunda $ HOME / .ssh / imvelo uma ikhona futhi abasebenzisi bavunyelwe ukushintsha imvelo yabo. Bheka inketho ye- PermitUserEnvironment ku-sshd_config5.
- Izinguquko kumhlahlandlela wasekhaya womsebenzisi.
- Uma i-HOME HOME / .ssh / rc ikhona, igijima; kungenjalo uma / etc / ssh / sshrc ikhona, igijima; kungenjalo kugijima i-xauth. Amafayela `` rc '' anikezwa i-X11 protocol yokuqinisekisa kanye nekhukhi ngokufaka okujwayelekile.
- Igijima igobolondo lomsebenzisi noma umyalo.
I-Authorized_Keys Ifomethi yefayela
$ HOME / .ssh / igunya_keys ifayela elizenzakalelayo elibala izinkomba zomphakathi ezivunyelwe ukuqinisekiswa kwe-RSA ku-version ye-protocol 1 kanye nokuqinisekiswa kwesihluthulelo somphakathi (i-PubkeyUkuqinisekisa) in version ye-protocol 2. I- AuthorizedKeysFile ingasetshenziswa ukucacisa ifayela ehlukile.
Umugqa ngamunye wefayela uqukethe ukhiye owodwa (imigqa engenalutho nemigqa eqala ngo- `# 'ayinakwa njengamazwana). Ikhiye lomphakathi ngamunye we-RSA siqukethe izinkambu ezilandelayo, ezihlukaniswe ngezikhala: izinketho, izingqikithi, i-exponent, modulus, amazwana. Inkinobho yomphakathi ngayinye ye-protocol ye-protocol iqukethe: izinketho, ikhibhodi, ukhiye wekhompiyutha we-base64, amazwana. Insimu yokukhetha iyakhethwa; Ukuba khona kwayo kunqunywa ukuthi umzila uqala ngenombolo noma cha (insimu yezinketho ayifuni iqala ngenombolo). Ama-bits, ama-exponent, ama-modulus kanye namazwana wokuphawula anika ukhiye we-RSA ngenqubo ye-protocol 1; inkambu yokuphawula ayisetshenziselwa noma yini (kepha ingase ibe lula ngomsebenzisi ukukhomba ukhiye). Ku-protocol version 2 isihluthulelo ngu `` ssh-dss '' noma `` ssh-rsa ''
Qaphela ukuthi imigqa kule fayela ivame ngamakhulu ama-byte amakhulu ubude (ngenxa yobukhulu besikhokhelo somkhiqizo womphakathi). Awufuni ukuwafakela; esikhundleni salokho, kopisha ubunikazi.pub id_dsa.pub noma ifayela id_rsa.pub bese uyihlela.
i-sshd iphoqa ubuncane be-modalus ye-RSA ye-modulus usayizi we-protocol 1 kanye ne-protocol 2 okhiye abangu-768 bits.
Izinketho (uma zikhona) ziqukethe izinkomba ezikhethiwe ezikhethwe ngama-comma. Azikho izikhala ezivunyelwe, ngaphandle kwezingcaphuno ezimbili. Izincazelo ezilandelayo zenketho zisekelwa (phawula ukuthi amagama angukhiye okukhethwa kukho angamangalelwa):
kusuka ku- = uhlu lwamaphethini
Icacisa ukuthi ngaphezu kokuqinisekiswa kwesihluthulelo somphakathi, igama le-canonical ye-host host elimele kude kumele libe khona ohlwini lwamakhemikhali ahlukaniswe ngama-comma (`* 'ne`?' Asebenza njengamasango omhlaba). Uhlu lungabuye luqukathe amaphethini alunqatshelwe ngokuqamba ngokuthi '!' ; uma igama le-hoston ye-canonical lihambisana nephethini elinganakiwe, ukhiye awamukeli. Inhloso yalolu khetho ukukhetha ukwandisa ukuphepha: ukuqinisekiswa kokhiye womphakathi ngokwakho akuthembi inethiwekhi noma amaseva egama noma noma yini (kodwa ukhiye); Kodwa-ke, uma ngabe ngandlela-thile othile eba isihluthulelo, isihluthulelo sivumela ummangali ukuba angene ngemvume noma yikuphi emhlabeni. Lolu khetho olwengeziwe lwenza ukhiye kunzima kakhulu (izinsiza zamagama kanye / noma ama-routers kuzodingeka ahlehliswe ngaphezu kwesihluthulelo kuphela).
umyalo = umyalo
Icacisa ukuthi umyalo ukwenziwa noma nini lapho lesi sikhiye sisetshenziselwa ukuqinisekiswa. Umyalo ohlinzekwa ngumsebenzisi (uma ikhona) unganakwa. Umyalo ugijima kwi-pty uma iklayenti icela i-pty; kungenjalo kugijima ngaphandle kwe-tty. Uma kudingeka isiteshi esihlanzekile esingu-8-bit, umuntu akumelwe acele i-pty noma kufanele acacise akukho-pty Isiqu esingafakwa kumyalo ngokukucaphuna nge-backslash. Le ndlela ingase ibe usizo ukuvimbela okhiye abathile bomphakathi ukwenza umsebenzi oqondile nje. Isibonelo singase sibe isihluthulelo esivumela izipele ezikude ngaphandle kokunye okunye. Qaphela ukuthi iklayenti ingacacisa i-TCP / IP kanye / noma i-X11 ukudlulisela ngaphandle uma ivinjelwe ngokucacile. Qaphela ukuthi lokhu kukhetha kusebenza kugobolondo, umyalo noma ukusethwa kwe-subsystem.
indawo = NAME = value
Icacisa ukuthi izintambo kufanele zengezwe kwimvelo uma ungena ngemvume usebenzisa le key. Izinguquko zendawo zenzelwe ngale ndlela zithinta ezinye izindinganiso zemvelo ezizenzakalelayo. Izinketho eziningi zalolu hlobo zivunyelwe. Ukucubungulwa kwemvelo kukhutshaziwe ngokuzenzakalelayo futhi kulawulwa ngekhetho le- PermitUserEnvironment . Le nketho ikhutshaziwe ngokuzenzakalelayo uma i- UseLogin inikwe amandla.
akukho-port-ukudlulisela
Iyakwenqabela ukudluliselwa kwe-TCP / IP uma lesi sikhiye sisetshenziselwa ukuqinisekiswa. Noma yikuphi izicelo ezihamba phambili zekhompuyutha yiklayenti izobuyisela iphutha. Lokhu kungasetshenziswa, isb, ngokuphathelene nenketho yomyalo .
akukho-X11-ukudlulisela
Inqabela ukuthumela i-X11 uma lesi sikhiye sisetshenziselwa ukuqinisekiswa. Noma yiziphi izicelo ze-X11 ezithunyelwa phambili yiklayenti izobuyisela iphutha.
akukho-agent-ukudlulisela
Iqabela ukugunyazwa kwe-agent yokuqinisekisa uma lesi sikhiye sisetshenziselwa ukuqinisekiswa.
akukho-pty
Ukuvimbela ukunikezwa kwe-tty (isicelo sokunikezela i-pty sizohluleka).
permopen = umphathi: port
Nciphisa indawo `` ssh -L '' yendawo ekudluliselwa kuyo ukuze ixhumane kuphela kumphathi ocacisiwe kanye nechweba. Amakheli we-IPv6 angacaciswa nge-syntax ehlukile: umphathi / i-port Izinketho eziningi zepopopopen zingasetshenziswa zihlukaniswe ngama-commas. Akukho okufana nephethini eyenziwa kuma-hostnames akhethiwe, kufanele abe yizindaweni zangempela noma amakheli.
Izibonelo
1024 33 12121 ... 312314325 ylo@foo.bar
kusuka = "*. niksula.hut.fi,! pc.niksula.hut.fi" 1024 35 23 ... 2334 ylo @ niksula
umyalo = "ukulahlwa / ikhaya", akukho-pty, ukudluliselwa kwe-port 1024 33 23 ... 2323 backup.hut.fi
imvumeopen = "10.2.1.55:80", permopen = "10.2.1.56:25" 1024 33 23 ... 2323
Ifomethi yefayela yeSsh_Known_Hosts
I-etc / ssh / ssh_known_hosts kanye ne-$ HOME / .ssh / know_hosts amafayela aqukethe okhiye bomphakathi obambelela kuwo wonke amaHhovisi aziwayo. Ifayela lomhlaba wonke kufanele lilungiswe ngumlawuli (okukhethwa kukho), futhi ifayela ngalinye lomsebenzisi ligcinwa ngokuzenzekela: noma nini lapho umsebenzisi exhuma kusuka kumuntu ongaziwa ukhiye wakhe ungeziwe efayeleni lomsebenzisi ngamunye.
Umugqa ngamunye kulawa mafayela uqukethe izinkambu ezilandelayo: ama-hostname, ama-bits, ama-exponent, ama-modulus, amazwana. Amasimu ahlukaniswa izikhala.
Ama-Hostnames uhlu lwamakhemikhali ahlukaniswe ngama-comma ('*' futhi '?' Enza njengezinhlamvu zasendle); Iphethini ngayinye, futhi, ihambelana ngokumelene negama le-canonical host (lapho liqinisekisa iklayenti) noma ngokumelene negama elihlinzekwa ngumsebenzisi (lapho uqinisekisa iseva). Iphethini lingase lilandelwe yi- `! ' ukukhombisa ukungabi nalutho: uma igama lomphathi lihambisana nephethini elinganakiwe, alwamukeli (yilolo gqa) noma ngabe lilinganisa elinye iphethini emgqeni.
Ama-bits, i-exponent, ne-modulus athathwa ngqo kusuka kukhiye we-RSA wesiphequluli; zingatholakala, isib, kusuka /etc/ssh/ssh_host_key.pub Inkambu yokuphawula ekhethwayo iyaqhubeka ekupheleni komugqa, futhi ayisetshenzisiwe.
Imigqa eqala ngo- `# 'nemigqa engenalutho ayinakwa njengamazwana.
Uma wenza ubuqiniso bokusingatha, ukuqinisekiswa kwamukelwa uma kunomugqa ofanayo onokhiye ofanelekile. Ngakho-ke kuvumelekile (kodwa hhayi Kunconywa) ukuba nemigqa eminingana noma izinkinobho ezihlukene zokusingatha zamagama afanayo. Lokhu kuzokwenzeka uma kwenzeka izinhlobo ezincane zamagama ezishaya ezizindeni ezahlukene zifakwe efayeleni. Kungenzeka ukuthi amafayela aqukethe ulwazi oluphikisanayo; ukuqinisekiswa kwamukelwa uma ulwazi oluvumelekile lungatholakala kusuka kunoma iyiphi ifayela.
Qaphela ukuthi imigqa kulawa mafayili ngokuvamile amakhulu ezinhlamvu isikhathi eside, futhi ngokuqinisekile awufuni ukuthayipha okhiye bamakhethi ngesandla. Kunalokho, ubenze nge-script noma ngokuthatha /etc/ssh/ssh_host_key.pub futhi ungeze amagama esiphezulu ngaphambili.
Izibonelo
closenet, ..., 130.233.208.41 1024 37 159 ... 93 closenet.hut.fi cvs.openbsd.org, 199.185.137.3 ssh-rsa AAAA1234 ..... =Bona futhi
scp (1), sftp (1), ssh (1), ssh-add1, ssh-agent1, ssh-keygen1, login.conf5, moduli (5), sshd_config5, sftp-server8
U-T. Ylonen T. Kivinen M. Saarinen T. Rinne S. Lehtinen "I-SSH Protocol Architecture" isakhiwo sokuhlela-ietf-secsh-12.txt NgoJanuwari 2002 umsebenzi oqhubekayo
UMnu Friedl N. Provos WA Simpson "I-Diffie-Hellman Group Exchange ye-SSH Transport Layer Protocol" I- draft-ietf-secsh-dh-exchange-group-02.txt ngoJanuwari 2002 isebenza ngokuqhubekayo
Okubalulekile: Sebenzisa umyalo womuntu ( % umuntu ) ukuze ubone ukuthi umyalo usetshenziswe kanjani kukhompyutha yakho ethile.