Collaborate Disseminate
When using compression on openssh (a la ssh -C …), does this reduce entropy and make the tunnel traffic more vulnerable to cryptanalysis? Is compression an option I should disable server-side for this or any other reason?
I have a vagu… Continue reading Does it weaken the encryption of SSH to use compression?
What’s a quick and simple way to connect to my server over SSH when the SSH is blocked on the network I’m connected to?
I’m running MacOS on the client side and Ubuntu 18.04 on the server side. My first thought was to just throw the SSH … Continue reading How can I SSH into my server when SSH is blocked on the public network I’m connected to? [closed]
I’m a beginner at using SSH, and I’m trying to connect to a VM from a tablet using an app. The app says that it connects successfully, but soon, it loses the connection to the server.
I have installed OpenSSH, and when I chec… Continue reading How do I fix ‘Bad protocol version identification’ errors? [migrated]
With SSH, most of my servers use ed25519 (the twisted Edwards variant EC) for authentication.
I was wondering, after authentication with ed25519, does SSH protocol 2 simple use ephemeral/ephemeral ECDH over curve25519 for th… Continue reading SSH and the ECDH component
I want to force all users to use only ed25519 type keys when logging in via SSH / SFTP to a Linux server which is running a recent version* of OpenSSH.
Some general reasons for putting controls on SSH keys might include:
… Continue reading How to accept only user identity keys of type ed25519 on OpenSSH Linux server?
There are tutorials on the web, such as this one: https://blog.oddbit.com/post/2019-02-24-docker-build-learns-about-secr/
They show you sample code to run ssh-keyscan in an automated manner so that subsequent automation steps that depend … Continue reading Does `ssh-keyscan` verify the legitimacy of the host(s) it scans?
On Debian, I can generate new SSH server keys:
rm /etc/ssh/ssh_host_*
dpkg-reconfigure openssh-server
but that will generate the keys with default values, ie 2048 RSA key.
What is happening under the hood, when I execute dpkg-reconfigu… Continue reading changing defaults when generating new SSH server keys
Ubuntu 18.04.3 LTS (bionic) have OpenSSH server version 7.6p1 but that release is 2 years old by now. On my local Arch Linux machine I’m running 8.0p1 but Ubuntu naturally have slower pace.
The network analysis tool we use s… Continue reading Install openssh-server 8.0p1 on Ubuntu 18.04.3 LTS [migrated]
Bit new in ssh and have an issue in understanding. I got a code which uses ssh_auth_list routine as below.
method = ssh_auth_list(session);
printf(” %d ” , method);
I am using a ssh library and when I am calling this routi… Continue reading SSH (ssh_auth_list) authentication failing from windows to linux
To work with ECDSA keys I am using the python-ecdsa library. Unfortunately this library can not process keyfiles properly if they are provided in the OpenSSH format. Instead I generate them in the PEM format, which the librar… Continue reading Convert ECDSA keys (PEM, OpenSSH)