2 ms·
Does sshd only use TLS/OpenSSL "for crypto primitives"? Or not use OpenSSL at all?
by gojomo 13y ago
Does sshd only use TLS/OpenSSL "for crypto primitives"? Or not use OpenSSL at all?
- tptacek 13y agosshd implements the SSH protocol, not the TLS protocol.
- jlgaddis 13y agoWhat about when using certificates?
- andrewcooke 13y agowhen openssh uses certificates it still uses its own protocol (even with the x509 patch - without that, the certificates used by openssh are not even the same kind of certificate as those used by openssl). the problem with the openssl library is in the implementation of the TLS protocol. this is not used by openssh. so openssh is not affected by this problem. even when certificates are used. and even when x509 certificates are used (which requires a separate patch).
- ominous_prime 13y agoTLS is a protocol, OpenSSL is a library, sshd uses the latter to implement the SSH protocol.