[Cialug] OpenSSH 6.2

Nicolai nicolai-cialug at chocolatine.org
Sat Mar 23 11:53:50 CDT 2013


Hi all,

OpenSSH 6.2 has just been released which comes with some exciting new
features.  If you can upgrade, that would be a good idea.  The most
important/interesting features IMO are:

 * encrypt-then-mac (finally)
 * AES-GCM (although this is debatable)
 * multiple authentication via AuthenticationMethods

The description of multiple authentication is as follows:

 * sshd(8): Added support for multiple required authentication in SSH
   protocol 2 via an AuthenticationMethods option. This option lists
   one or more comma-separated lists of authentication method names.
   Successful completion of all the methods in any list is required for
   authentication to complete. This allows, for example, requiring a
   user having to authenticate via public key or GSSAPI before they
   are offered password authentication.

Or another example would be requiring combined use of an SSH key and
yubikey.

Nicolai


More information about the Cialug mailing list