mirror of
https://github.com/freebsd/freebsd-src.git
synced 2026-10-28 11:25:21 +01:00
Ed Maste
8e28d84935
Full release notes are available at https://www.openssh.com/txt/release-10.0 Selected highlights from the release notes: Potentially-incompatible changes - This release removes support for the weak DSA signature algorithm. [This change was previously merged to FreeBSD main.] - This release has the version number 10.0 and announces itself as "SSH-2.0-OpenSSH_10.0". Software that naively matches versions using patterns like "OpenSSH_1*" may be confused by this. - sshd(8): this release removes the code responsible for the user authentication phase of the protocol from the per-connection sshd-session binary to a new sshd-auth binary. Security - sshd(8): fix the DisableForwarding directive, which was failing to disable X11 forwarding and agent forwarding as documented. [This change was previously merged to FreeBSD main.] New features - ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement. Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D51630
94 lines
2.5 KiB
C
94 lines
2.5 KiB
C
/* $OpenBSD: ssh.h,v 1.91 2024/09/25 23:01:39 jsg Exp $ */
|
|
|
|
/*
|
|
* Author: Tatu Ylonen <[email protected]>
|
|
* Copyright (c) 1995 Tatu Ylonen <[email protected]>, Espoo, Finland
|
|
* All rights reserved
|
|
*
|
|
* As far as I am concerned, the code I have written for this software
|
|
* can be used freely for any purpose. Any derived versions of this
|
|
* software must be clearly marked as such, and if the derived work is
|
|
* incompatible with the protocol description in the RFC file, it must be
|
|
* called by a name other than "ssh" or "Secure Shell".
|
|
*/
|
|
|
|
/* Default port number. */
|
|
#define SSH_DEFAULT_PORT 22
|
|
|
|
/*
|
|
* Maximum number of certificate files that can be specified
|
|
* in configuration files or on the command line.
|
|
*/
|
|
#define SSH_MAX_CERTIFICATE_FILES 100
|
|
|
|
/*
|
|
* Maximum number of RSA authentication identity files that can be specified
|
|
* in configuration files or on the command line.
|
|
*/
|
|
#define SSH_MAX_IDENTITY_FILES 100
|
|
|
|
/*
|
|
* Major protocol version. Different version indicates major incompatibility
|
|
* that prevents communication.
|
|
*
|
|
* Minor protocol version. Different version indicates minor incompatibility
|
|
* that does not prevent interoperation.
|
|
*
|
|
* We support only SSH2
|
|
*/
|
|
#define PROTOCOL_MAJOR_2 2
|
|
#define PROTOCOL_MINOR_2 0
|
|
|
|
/*
|
|
* Name for the service. The port named by this service overrides the
|
|
* default port if present.
|
|
*/
|
|
#define SSH_SERVICE_NAME "ssh"
|
|
|
|
/*
|
|
* Name of the environment variable containing the process ID of the
|
|
* authentication agent.
|
|
*/
|
|
#define SSH_AGENTPID_ENV_NAME "SSH_AGENT_PID"
|
|
|
|
/*
|
|
* Name of the environment variable containing the pathname of the
|
|
* authentication socket.
|
|
*/
|
|
#define SSH_AUTHSOCKET_ENV_NAME "SSH_AUTH_SOCK"
|
|
|
|
/*
|
|
* Environment variable for overwriting the default location of askpass
|
|
*/
|
|
#define SSH_ASKPASS_ENV "SSH_ASKPASS"
|
|
|
|
/*
|
|
* Environment variable to control whether or not askpass is used.
|
|
*/
|
|
#define SSH_ASKPASS_REQUIRE_ENV "SSH_ASKPASS_REQUIRE"
|
|
|
|
/*
|
|
* Length of the session key in bytes. (Specified as 256 bits in the
|
|
* protocol.)
|
|
*/
|
|
#define SSH_SESSION_KEY_LENGTH 32
|
|
|
|
/* Used to identify ``EscapeChar none'' */
|
|
#define SSH_ESCAPECHAR_NONE -2
|
|
|
|
/*
|
|
* unprivileged user when UsePrivilegeSeparation=yes;
|
|
* sshd will change its privileges to this user and its
|
|
* primary group.
|
|
*/
|
|
#ifndef SSH_PRIVSEP_USER
|
|
#define SSH_PRIVSEP_USER "sshd"
|
|
#endif
|
|
|
|
/* Listen backlog for sshd, ssh-agent and forwarding sockets */
|
|
#define SSH_LISTEN_BACKLOG 128
|
|
|
|
/* Limits for banner exchange */
|
|
#define SSH_MAX_BANNER_LEN 8192
|
|
#define SSH_MAX_PRE_BANNER_LINES 1024
|