FreeBSD(鐃緒申鐃緒申鐃緒申Linux)»鐃緒申µ­

\½鐃緒申鐃�¼\¹鐃緒申鐃�«鐃緒申鐃緒申鐃緒申openssh鐃緒申鐃緒申鐃述�鐃緒申鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃�¾鐃緒申鐃�¹鐃緒申鐃緒申鐃渋￥申\³\鐃緒申鐃�\鐃緒申鐃�\鐃緒申\鐃緒申\鐃緒申鐃�\鐃緒申\·\鐃緒申鐃�\鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃�¼鐃緒申鐃緒申鐃�·鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申
hosts.allow/hosts.deny(TCP Wrappers)鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃渚™申鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申­鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃術�鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃渋￥申
鐃緒申鐃緒申鐃渋�鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申«鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃縦�鐃緒申鐃緒申鐃緒申鐃渋�鐃緒申鐃緒申臓鐃�

# ./configure --help | grep wrappers
--with-tcp-wrappers[=PATH] Enable tcpwrappers support (optionally in PATH)
#

\Ð\鐃緒申½鐃緒申鐃緒申鐃緒申µ鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申openssh 4.5p1鐃緒申鐃緒申\鐃緒申鐃�\鐃緒申鐃緒申鐃緒申¼\¹
鐃緒申鐃�µ鐃緒申鐃緒申鐃緒申鐃緒申鐃�½鐃緒申鐃緒申鐃緒申\鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�

鐃緒申鐃緒申鐃緒申½鐃緒申�ß�鐃緒申鐃緒申鐃�\Ð鐃緒申鐃�¼\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�³鐃緒申��鐃緒申鐃緒申
#telnet 192.168.11.1 22
Trying 192.168.11.1...
Connected to 192.168.11.1.
Escape character is '^]'.
SSH-1.99-OpenSSH_4.3
^]
telnet> q
Connection closed.
#

鐃緒申鐃緒申鐃緒申о鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃�\鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�
# wget http://gulus.usherbrooke.ca/pub/appl/ssh/OpenSSH/portable/openssh-4.5p1.tar.gz
# wget http://www.zlib.net/zlib-1.2.3.tar.gz
# tar xvfz openssh-4.5p1.tar.gz
# tar zxf zlib-1.2.3.tar.gz
# cd zlib-1.2.3 ; pwd
# ./configure && make
# cd ../openssh-4.5p1 ; pwd
# ./configure \
--prefix=/usr \
--with-zlib=../zlib-1.2.3 \
--with-md5-passwords \
--with-privsep-path=/var/empty \
--with-privsep-user=sshd \
--sysconfdir=/etc/ssh
# make
# make install

鐃緒申鐃�\鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�³鐃緒申��鐃緒申鐃緒申
#telnet 192.168.11.1 22
Trying 192.168.11.1...
Connected to 192.168.11.1.
Escape character is '^]'.
SSH-1.99-OpenSSH_4.5
^]
telnet> q
Connection closed.
#

鐃緒申�Á鐃暑Ǚ申鐃緒申鐃�

SSH :~/.ssh/authorized_keys ~/.ssh/identity.pub
OpenSSH1:~/.ssh/authorized_keys ~/.ssh/identity.pub
SSH2 :~/.ssh2/authrization鐃緒申鐃緒申鐃緒申»鐃緒申鐃緒申鐃緒申鐃緒申鐃� ~/.ssh2/identification鐃緒申鐃緒申鐃緒申»鐃緒申鐃緒申鐃緒申鐃緒申鐃�
OpenSSH2:~/.ssh/authorized_key ~/.ssh/ide_dsa.pub or id_rsa.pub

鐃緒申鐃�³鐃緒申��鐃緒申鐃緒申
[root@ hoge]# cat /etc/ssh/sshd_config | grep -i hostkey
HostKey for protocol version 1
HostKey /etc/ssh/ssh_host_key
# HostKeys for protocol version 2
#HostKey /etc/ssh/ssh_host_dsa_key
[root@ hoge]#

鐃緒申鐃�OpenSSH1鐃緒申鐃緒申�ºî�鐃緒申鐃緒申鐃�
[root@ .ssh]# pwd
/home/hoge/.ssh
[root@ .ssh]# ssh-keygen -b 1024 -t rsa1
Generating public/private rsa1 key pair.
Enter file in which to save the key (/root/.ssh/identity): identity
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in identity.
Your public key has been saved in identity.pub.
The key fingerprint is:
c0:78:db:18:4c:f6:69:87:a5:4a:07:e5:65:55:71:bd [email protected]
[root@ .ssh]# ls
identity identity.pub

[root@ .ssh]# cat ./identity.pub >> ./authorized_keys
[root@ .ssh]# chmod 600 ./authorized_keys

鐃緒申鐃�OpenSSH2鐃緒申鐃緒申�ºî�鐃緒申鐃緒申鐃�
[root@ .ssh]# ssh-keygen -b 1024 -t dsa 鐃緒申鐃緒申鐃峻�鐃緒申鐃緒申鐃� ssh-keygen -b 1024 -t rsa
[root@ .ssh]# ./id_dsa.pub >> ./authorized_keys 鐃緒申鐃緒申鐃峻�鐃緒申鐃緒申鐃� cat ./id_rsa.pub >> ./authorized_keys
[root@ .ssh]# chmod 600 ./authorized_keys

鐃緒申��鐃遵Ǚ申¾\µ鐃緒申鐃�¼\Ð鐃緒申鐃緒申鐃緒申\鐃緒申鐃�\¹\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申·鐃緒申鐃緒申鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申鐃�\鐃緒申鐃�

鐃緒申鐃�¾\µ鐃緒申鐃�¼\Ð鐃緒申鐃緒申鐃渋�鐃緒申鐃緒申\鐃緒申\«\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃� /home/hoge/.ssh/authorized_keys 鐃緒申鐃緒申鐃緒申
鐃緒申�î�鐃緒申鐃緒申�™申·鐃緒申鐃緒申鐃緒申 authorized_keys 鐃緒申鐃緒申鐃述�鐃緒申鐃緒申鐃�²鐃緒申鐃緒申鐃緒申¹鐃緒申鐃緒申鐃緒申

鐃緒申��鐃緒申windows\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申\鐃緒申鐃�\鐃緒申鐃緒申鐃緒申鐃緒申鐃�\鐃緒申��鐃緒申¼\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃緒申鐃緒申«鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申³«鐃緒申鐃緒申�Ǚ申鐃緒申¾鐃緒申�™申鐃緒申鐃�\鐃緒申鐃�\鐃緒申\鐃緒申鐃�\鐃緒申鐃�

identity 鐃緒申鐃緒申鐃緒申\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\·\鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申��鐃緒申­\鐃緒申��鐃緒申¼\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申¹鐃緒申鐃緒申鐃緒申

鐃緒申鐃緒申�Æ鐃緒申�™申鐃緒申��鐃緒申鐃緒申�Ǚ申鐃緒申鐃�
OpenSSH鐃緒申鐃緒申鐃述�鐃暑Ǚ申鐃緒申鐃�·鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申\鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�
鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申zlib鐃緒申鐃緒申鐃緒申OpenSSL鐃緒申鐃緒申鐃緒申\鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�

鐃緒申鐃緒申鐃緒申½鐃緒申�ß�鐃緒申鐃緒申鐃�\Ð鐃緒申鐃�¼\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�³鐃緒申��鐃緒申鐃緒申
bash-2.05b# openssl version
OpenSSL 0.9.7d 17 Mar 2004
鐃緒申�Ǚ申鐃緒申鐃�·鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申 openssl-0.9.7e 鐃緒申鐃� \鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�

bash-2.05b# telnet 0 22
Trying 0.0.0.0...
Connected to 0.
Escape character is '^]'.
SSH-1.99-OpenSSH_3.5p1 FreeBSD-20030924
鐃緒申�Ǚ申鐃緒申鐃�·鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申4.0 鐃緒申鐃� \鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�

bash-2.05b# less /usr/include/zlib.h
version 1.1.4, March 11th, 2002
鐃緒申�Ǚ申鐃緒申鐃�·鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申1.1.4 鐃緒申鐃� 鐃緒申鐃�½¾鐃緒申悄�Ǚ申»鐃緒申鐃�

鐃緒申鐃�OpenSSL\鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�
bash-2.05b# fetch http://www.openssl.org/source/openssl-0.9.7e.tar.gz
openssl-0.9.7e.tar.gz 100% of 2971 kB 106 kBps 00m00s
bash-2.05b# tar xvfz openssl-0.9.7e.tar.gz
bash-2.05b# cd openssl-0.9.7e ; pwd
/usr/src/openssl-0.9.7e
bash-2.05b# ./config --prefix=/usr --openssldir=/usr/bin 鐃書¨�鐃緒申½鐃緒申�ß�鐃緒申鐃緒申鐃緒申鐃緒申鐃殉�鐃緒申鐃緒申鐃�\鐃緒申鐃�\鐃緒申\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃緒申鐃緒申鐃緒申鐃�»鐃緒申鐃緒申鐃緒申鐃緒申鐃�
bash-2.05b# make 鐃緒申»鐃緒申弌鐃緒申鐃緒申³鐃緒申鐃緒申«鐃緒申鐃緒申鐃緒申鐃緒申鐃�¹鐃緒申鐃緒申鐃緒申
bash-2.05b# make test 鐃書¨�鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申·鐃緒申鐃緒申鐃緒申
bash-2.05b# make install

鐃書¨�鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃署¨�鐃緒申鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申鐃緒申鐃渋¢´�鐃遵™申鐃緒申鐃緒申鐃緒申鐃殉�鐃緒申¾\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃�\鐃緒申\鐃緒申鐃緒申鐃緒申¼鐃緒申鐃縮�鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申��鐃緒申鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�

bash-2.05b# mv -i man man.old
bash-2.05b# mv -i openssl openss.old

bash-2.05b# make install 鐃緒申���鐃緒申鐃緒申鐃緒申�Ǚ申鐃緒申鐃�

鐃書¨�鐃緒申�Å鐃緒申�™申鐃緒申鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申鐃�

鐃緒申鐃�³鐃緒申��鐃緒申鐃緒申
bash-2.05b# openssl version
OpenSSL 0.9.7e 25 Oct 2004
bash-2.05b# which openssl
/usr/bin/openssl
bash-2.05b#

鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申臓鐃�³鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃�­鐃緒申鐃緒申鐃緒申鐃緒申鐃�·鐃緒申鐃緒申鐃縦�鐃渋°¡￥申

鐃緒申鐃�OpenSSH鐃緒申鐃緒申鐃緒申\鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�

鐃緒申鐃�Tcp Wrappers\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申鐃緒申鐃暑��鐃�³鐃緒申��鐃緒申鐃緒申

/usr/lib/libwrap.a
/usr/include/tcpd.h 鐃緒申鐃緒申鐃緒申2鐃緒申鐃緒申鐃緒申鐃緒申鐃縮�鐃緒申鐃縮�鐃緒申鐃淳�鐃緒申鐃緒申鐃緒申鐃緒申·鐃緒申鐃緒申鐃緒申

bash-2.05b# ls /usr/lib/libwrap.a
/usr/lib/libwrap.a
bash-2.05b# ls /usr/include/tcpd.h
/usr/include/tcpd.h

鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申 鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃�·鐃緒申鐃緒申鐃緒申

鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\¹\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃�
bash-2.05b# fetch http://gulus.usherbrooke.ca/pub/appl/ssh/OpenSSH/portable/openssh-4.0p1.tar.gz
openssh-4.0p1.tar.gz 100% of 869 kB 29 kBps 00m00s
bash-2.05b# tar xvfz openssh-4.0p1.tar.gz
bash-2.05b# cd openssh-4.0p1 ; pwd
/usr/src/openssh-4.0p1
bash-2.05b# ./configure --with-tcp-wrappers

鐃緒申\鐃緒申\鐃緒申鐃緒申鐃緒申¼鐃緒申鐃緒申½Ð鐃緒申鐃緒申鐃緒申 OpenSSL鐃緒申鐃緒申鐃緒申¾鐃緒申鐃�½鐃緒申��鐃緒申­\鐃緒申\鐃緒申鐃�\鐃緒申\鐃緒申\鐃緒申鐃緒申鐃緒申¼\鐃緒申鐃緒申鐃緒申��鐃緒申鐃緒申鐃暑ø�鐃緒申鐃緒申鐃緒申鐃緒申·鐃緒申鐃緒申鐃緒申
checking OpenSSL header version... 90705f (OpenSSL 0.9.7e 25 Oct 2004)
checking OpenSSL library version... 90704f (OpenSSL 0.9.7d 17 Mar 2004)
checking whether OpenSSL's headers match the library... no
configure: error: Your OpenSSL headers do not match your library.
Check config.log for details.

鐃緒申libcrypto.a鐃緒申鐃緒申鐃緒申libcrypto.so鐃緒申鐃緒申鐃緒申\·\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃�\鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申·鐃緒申鐃緒申鐃緒申²鐃緒申��鐃緒申鐃緒申鐃�
bash-2.05b# ln -s libcrypto.a libcrypto.so

bash-2.05b# ./configure --with-tcp-wrappers --prefix=/usr
bash-2.05b# make
bash-2.05b# make install

鐃緒申鐃�³鐃緒申��鐃緒申鐃緒申
-bash-2.05b$ telnet 0 22
Trying 0.0.0.0...
Connected to 0.
Escape character is '^]'.
SSH-1.99-OpenSSH_4.0

¾鐃緒申�ºÙǙ申鐃緒申��鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃緒申鐃暑Ǚ申¹鐃緒申��鐃緒申鐃緒申鐃緒申鐃渋�鐃緒申