OpenSSH 5.4 Released

HipToday writes "As posted on the OpenBSD Journal, OpenSSH 5.4 has been released: 'Some highlights of this release are the disabling of protocol 1 by default, certificate authentication, a new "netcat mode," many changes on the sftp front (both client and server) and a collection of assorted bugfixes. The new release can already be found on a large number of mirrors and of course on www.openssh.com.'"

Comments

Cygwin's package was updated, too

[klui]

The read-only feature of sftp makes it almost a replacement for anonymous ftp. Too bad it appears to be a global setting.

Re:Cygwin's package was updated, too

[Sancho]

Could you not do this with a combination of Match User and ForceCommand directives? Something like:

Match User anonymous
        ForceCommand sftp-server -R
        ChrootDirectory /home/anonymous

Re:Cygwin's package was updated, too

[roman_mir]

Yes, you are missing the point.

FTP is a fucking mess, I hate it, I wish I could kill it today everywhere. It is a disaster to manage with a firewall. The horrendous idea of using separate random ports for data connection vs control connections, the active/passive methods, it's is pure evil.

SFTP is not FTP over SSH if you did not understand, it is a proper FTP that happens to run over a secured link.

Thank you Open SSH devs

[overlordofmu]

I am reading this article and posting to it through a ssh tunnel using OpenSSH on a Gentoo Linux server at home and putty.exe on a work laptop running XP Pro at work.

Firefox sees it as a SOCKS 5 proxy at localhost. The tricky part was setting the config key in Firefox called "network.proxy.socks_remote_dns" to true. (Navigate to about:config and filter for "proxy" to find this setting quickly). The corporate network admins use bogus DNS resolution as a firewall.

I love you, OpenSSH devs. I sincerely thank you.

Please note:

[Anonymous Coward]

A brief quote from the project's home page:
Please take note of our Who uses it page, which list just some of the vendors who incorporate OpenSSH into their own products -- as a critically important security / access feature -- instead of writing their own SSH implementation or purchasing one from another vendor. This list specifically includes companies like Cisco, Juniper, Apple, Red Hat, and Novell; but probably includes almost all router, switch or unix-like operating system vendors. In the 10 years since the inception of the OpenSSH project, these companies have contributed not even a dime of thanks in support of the OpenSSH project (despite numerous requests).

So go and DONATE, as i've just done.

Thanks OpenSSH | Debian Devs DO NOT TOUCH.

[0100010001010011]

OpenSSH is nothing short of magic. I too use it to tunnel out of work's firewall.

Now, Debian Dev. DON'T TOUCH. :)