Lmst

I'm betting the answer here is "this isn't possible" but if anyone knows how to tell OpenSSH that when it's enumerating pubkeys it should check which of the two known authentication dongles is actually plugged into the computer, and only prompt me to unlock the SK key that belongs to that dongle, not both of them, please tell me how.

#openssh #yubikey

Vulnerabilidade grave no #OpenSSH afeta servidores #Linux populares - BoletimSec https://boletimsec.com.br/vulnerabilidade-grave-no-openssh-afeta-servidores-linux-populares/

OpenSSH Config Tags How To

https://mrod.space/2023/09/04/using-tags-in-ssh-config

To be honest I did not know tags existed in #OpenSSH

With a focus on usability, @almalinux OS 10 has been released
https://www.admin-magazine.com/News/AlmaLinux-OS-10-Released?utm_source=mam
#EnterpriseLinux #AlmaLinux #RHEL #cryptography #OpenSSH #sudo #SecureBoot

Warum genau liegt im Archiv mit dem Quelltext von #OpenSSH "openssh-10.0p2.tar.gz" der Quelltext von openssh-10.0p1?

Meine Pipeline ist auf die Nase gefallen, weil es p2 erwaret aber nur p1 findet...

Auch die Hashes von p1 und p2 sind gleich...

689148621a2eaa734497b12bed1c5202 openssh-10.0p1.tar.gz
689148621a2eaa734497b12bed1c5202 openssh-10.0p2.tar.gz

I found out that the way PuTTY stores the server finger print is different from the way OpenSSH does do it:

OpenSSH takes the hostname you provide, so foo and foo.example.net are two different ones, even if the search domains (in /etc/resolv.conf for example) makes it so that foo is actually foo.example.net.

PuTTY on the other hand looks at the DNS name, so if your foo which before pointed to foo.example.net now suddenly points to the CNAME of foo.example.net which points to bar.example.net, it will complain.

It will not properly complain. It will still say "I don't know the server fingerprint for foo", but at the top left of the PuTTY window title bar it will show "bar.example.net" instead of the expected name "foo.example.net" and that is the only indication on what went wrong.

So much for a "Let's prepare this change in DNS so that it will be transparent for users" 🙂

#dns #putty #openssh #ssh

To support legacy OpenSSH v8.1 #openssh #sftp

https://askubuntu.com/q/1549899/612

TIL: According to the ssh_config man page, comments in ~/.ssh/config need to be on their own line. In other words,

Host foo # my awesome host

is not a valid comment.

The ssh command seems pretty relaxed about this, but other tools (e.g. Paramiko) are not necessarily.

https://github.com/paramiko/paramiko/issues/2111

#SSH #OpenSSH #Paramiko #Python

I'm looking to hook up PerSourcePenalties in the sshd_config on my VPS, and can't find any examples of using them out there. They're a new-ish feature, so I wonder if anyone's an expert yet besides @djm.

Specifically, I'm getting a lot of attempted password logins on a system where "PasswordAuthentication no" is set, and I see five door-knocks from each IP before they get punted. Would rather have that kick in more quickly to keep the logs less cluttered.

#OpenBSD #OpenSSH

If you're on #Debian stable but would like a PQ key exchange algorithm on your SSH service, #OpenSSH 10 is available in the Bookworm backports with the following release notes.

#Security #CyberSecurity #Quantum

A screenshot of some of the changes to openssh-server, as reported by apt during the upgrade process. Of particular importance is the following bullet:

sshd(8): this release disables finite field (a.k.a modp) Diffie-Hellman
key exchange in sshd by default. Specifically, this removes the
"diffie-hellman-group*" and "diffie-hellman-group-exchange-*" methods
from the default KEXAlgorithms list. The client is unchanged and
continues to support these methods by default.

FileZilla will connect to VPS with password allthoug passwordAuthentication is set to no #2404 #openssh #vsftpd

https://askubuntu.com/q/1548064/612

Multiplexing will boost your SSH connectivity or speed by reusing existing TCP connections to a remote host. Here are commands that you can use to control multiplexing when using OpenSSH server or client on your Linux, macOS, FreeBSD or Unix-like systems. Not sure what SSH multiplexing is? Learn how to set it up and use it to speed up your SSH sessions with our handy guide: https://www.cyberciti.biz/faq/ssh-multiplexing-control-command-to-check-forward-list-cancel-stop-connections/

#linux #unix #freebsd #opensource #openssh #macos

List of ssh command to control an active connection multiplexing process on Linux or Unix such as: Valid commands are: “check” (check that the master process is running), “forward” (request forwardings without command
execution), “cancel” (cancel forwardings), “exit” (request the master to exit), and “stop” (request the master to stop accepting further multiplexing requests).

Today i've learned that i don't need coder. I am now deploying an #ubuntu container from a #Dockerfile with an #openssh #server installed. This is a much better setup. Nearly every #Codeeditor supports #ssh workspaces so i'm not limited.

But the best thing about this setup is that it is very easy to automate using #Ansible.

I've used the same approach to set up #kali #linux environments months ago and should have stuck with that. It just works.

#clouddevelopment #clouddeveloperenvironments #docker #programming #coding #selfhosting #homelab #automation #coder