HomeFreeBSD

ssh: update to OpenSSH v9.0p1

Description

ssh: update to OpenSSH v9.0p1

Release notes are available at https://www.openssh.com/txt/release-9.0

Some highlights:

  • ssh(1), sshd(8): use the hybrid Streamlined NTRU Prime + x25519 key exchange method by default ("sntrup761x25519-sha512@openssh.com"). The NTRU algorithm is believed to resist attacks enabled by future quantum computers and is paired with the X25519 ECDH key exchange (the previous default) as a backstop against any weaknesses in NTRU Prime that may be discovered in the future. The combination ensures that the hybrid exchange offers at least as good security as the status quo.
  • sftp-server(8): support the "copy-data" extension to allow server- side copying of files/data, following the design in draft-ietf-secsh-filexfer-extensions-00. bz2948
  • sftp(1): add a "cp" command to allow the sftp client to perform server-side file copies.

This commit excludes the scp(1) change to use the SFTP protocol by
default; that change will immediately follow.

MFC after: 1 month
Relnotes: Yes
Sponsored by: The FreeBSD Foundation

(cherry picked from commit 87c1498d1a7473ff983e5c0456f30608f3f1e601)
(cherry picked from commit 9fce8d4140370ca8bc03d6a5668fb64a040c00fc)
(cherry picked from commit e2cec5ba2c4385eec0b76d07469ec11d3ce3d6e2)

Details

Provenance
emasteAuthored on Apr 15 2022, 2:41 PM
Parents
rG6ac1039d047a: ssh: update to OpenSSH v8.9p1
Branches
Unknown
Tags
Unknown