HomeFreeBSD

ssh: update to OpenSSH v9.0p1

Description

ssh: update to OpenSSH v9.0p1

Release notes are available at https://www.openssh.com/txt/release-9.0

Some highlights:

  • ssh(1), sshd(8): use the hybrid Streamlined NTRU Prime + x25519 key exchange method by default ("sntrup761x25519-sha512@openssh.com"). The NTRU algorithm is believed to resist attacks enabled by future quantum computers and is paired with the X25519 ECDH key exchange (the previous default) as a backstop against any weaknesses in NTRU Prime that may be discovered in the future. The combination ensures that the hybrid exchange offers at least as good security as the status quo.
  • sftp-server(8): support the "copy-data" extension to allow server- side copying of files/data, following the design in draft-ietf-secsh-filexfer-extensions-00. bz2948
  • sftp(1): add a "cp" command to allow the sftp client to perform server-side file copies.

This commit excludes the scp(1) change to use the SFTP protocol by
default; that change will immediately follow.

MFC after: 1 month
Relnotes: Yes
Sponsored by: The FreeBSD Foundation

Details

Provenance
emasteAuthored on Apr 15 2022, 2:41 PM
Parents
rG10aa36702cdb: etc/mtree: Remove tabs
rG7f9f5c27f6f6: Vendor import of OpenSSH 9.0p1
Branches
Unknown
Tags
Unknown