SSH over Openssl over Haproxy - - contourner les blocages https://www.journalduhacker.net/s/mnw1al/ssh_over_openssl_over_haproxy_contourner https://blog.victor-hery.com/2024/02/ssh-openssl-haproxy.html #hébergement #openssh

#OpenSSH 10.0 has been released (#SSH / #SecureShell / #OpenBSD) https://openssh.com/

Neat, OpenSSH client adds variable expansion in "User".
This will allow for much simpler PAM (the privileged access management one) related configuration - for example, expanding user into user%original_hostname etc.

https://github.com/openssh/openssh-portable/commit/bd30cf784d6e825ef71592fb723c41d4f2fd407b

Elegir la identidad SSH que presenta un cliente al servidor

https://blog.jcea.es/posts/20231203-identidad_ssh.html

Heads up! Kiddos...measure...

#linuxadmin #opensource #tool #openssh

https://www.openssh.com/releasenotes.html#10.0p1

OpenSSH arriba a la versió 10.0. Entre d'altres, inclou l'algoritme mlkem768x25519-sha256, que diuen és a prova d'ordinadors quàntics.

https://www.phoronix.com/news/OpenSSH-10.0-Released

#OpenSSH #Quàntic #mlkem768x25519-sha256

In case anyone is wondering why #ssh (#openssh) is failing silently on #msys2 - seems they pushed out a version that depends on an msys2 runtime version that's stuck in some kind of release queue: https://github.com/msys2/MSYS2-packages/issues/5320

#openssh now defaults to #mlkem768x25519 algorithm for keys. In other words, welcome to quantum resistance being a thing.

Congrats to the team on this release!

https://www.openssh.com/txt/release-10.0

La décima versión de OpenSSH viene con el algoritmo mlkem768xto25519-sha256 activado por defecto, que se considera seguro ante ataques con ordenadores cuánticos y además se ha convertido en norma en el NIST #openssh -> https://hardlimit.com/archivo.php?n=2286

I see #OpenSSH got to fully removing DSA key support, so that means my “probably do that in #Paramiko” todo list item has no more excuses

Well, ok, it still has a few excuses (will be years before the average sshd is OpenSSH 10.0+) but still. Needs happenin' sometime and it ain't like old releases go away, so.

OpenSSH 10.0/10.0p2 released https://www.openssh.com/releasenotes.html#10.0p1

Portable OpenSSH 10.0p1 will not exist. It will be known as OpenSSH 10.0p2.

https://lists.mindrot.org/pipermail/openssh-unix-announce/2025-April/000163.html
- - -
OpenSSH portable 10.0p1 n’existera pas. Ce sera connue comme OpenSSH 10.0p2.

// Publication en anglais //

#OpenSSH 9.8 und höher kommt allmählich auf die Server. Da wird die Option PerSourcePenalties interessant (siehe https://undeadly.org/cgi?action=article;sid=20240607042157 ) die fail2ban u.ä. überflüssig machen könnte.

Konfig-Beispiele sind aber noch rar gesät. Nach der manpage zu urteilen, sollte aber

PerSourcePenalties authfail:3600s

dafür sorgen dass IPs, die Brute-Force Attacken fahren für 1 Stunde geblockt werden, korrekt?

OpenSSH 10.0 Released https://www.undeadly.org/cgi?action=article;sid=20250410053152 #openbsd #openssh #ssh #security #networking #development #newrelease #devops #sysadmin #freesoftware #libresoftware

#OpenSSH 10.0 Released with Major #Security and #Performance Upgrades https://medium.com/p/openssh-10-0-released-with-major-security-and-performance-upgrades-f7d61012b96e?source=social.tw

OpenSSH 10.0 released with hybrid post-quantum algorithm mlkem768x25519-sha256 as default key agreement, new cipher preference list, new options, bug fixes

https://www.openssh.com/releasenotes.html

OpenSSH 10.0: A Leap Forward in Secure Shell Technology

The release of OpenSSH 10.0 introduces significant enhancements in security and functionality, solidifying its status as a cornerstone of secure communications in the tech industry. With new features ...

https://news.lavx.hu/article/openssh-10-0-a-leap-forward-in-secure-shell-technology