SecureShells

From MissionTechWiki

Description of Secure Shells

Usually SSH - relates to an encrypted connection to a shell, usually running on a Linux or Unix system.

How are secure shells used in Missions?

Just like everywhere else they are used to access remote servers securely. They can also be used to create VPN by carring PPP over the SSH connection or by port mapping and forwarding (for basic access).

Issues with SSH

• v1 is insecure. Don't use it.
• Using passwords is not a good idea if it can be avoided. Use public keys. Using host trust is a definite no-no.

Different implementations and solutions usingSecure Shells.

Host

• Openssh

Client

(Comments from various folk on the ICCM-tech list)

• PuTTY is the defacto VT100 emulator with ssh support. It is also easy to setup port forwarding in PuTTY
• Tiny and does not need 'installed'. (also FREE)
• If you need Wyse60 support, try Multiview and AlphaComm.
• Tera Term Pro: http://hp.vector.co.jp/authors/VA002416/teraterm.html
  • SSH extension: http://www.zip.com.au/~roca/ttssh.html
  • Reported to only use SSHv1 - Bad idea
  • I like the Tera Term Pro program with the SSH extension. I have used it with all Win9x and later OSes without a problem. Don't know about any for *ix flavors, but for Windows OSes, it works great. It has the component to work either serial or via ethernet. The best one I have seen for terminal programs.
• SSH Secure Shell http://www.ssh.com/support/downloads/secureshellwks/non-commercial.html
  • I'd recommend SSH Secure Shell ... use it all the time. It also includes built in drag and drop SFTP which my users use in conjunction with Cygwin on our Studio Computers (cygwin under XP/Pro) to transfer audio files from their desktop PCs to the studios ... no need for insecure MS shares ...There is a pay for version called SSH Tectia but the free version is still licensed for non-commercial use.
  • Can be used for port tunelling as well.
• have a look at Penguinet http://www.siliconcircus.com,
  • a very nicely done client with builtin Explorer-style scp client and some other nice features. A 30-day trial version can be downloaded on the site and I think it's not very expensive... couldn't live without it anymore