Eurotech ZEUS Manual de usuario descargar pdf (Pagina 24)

Arcom Embedded Linux Technical Manual Secure Shell (SSH)

Secure Shell (SSH)

Introduction to SSH

SSH (Secure SHell) is a secure replacement for several common Internet protocols, all

of which have security flaws when used in a non-trusted network environment (primarily

the plaintext exchange of passwords across a non-trusted network). These include, for

example, the Berkley r* tools (rlogin, rsh, rexec), FTP and telnet.

SSH has several advantages over these tools. These include:

All traffic sent across the network is encrypted using strong encryption. Critically,

this includes passwords.

•

Prevention of spoofing and man-in-the-middle attacks using host keys.

Tunnelling of arbitrary connections through an SSH pipe, known as port forwarding

(in particular X11 forwarding).

Enhanced authentication methods that improve on normal password-based

mechanisms.

The server also benefits from SSH, especially if it is running a number of services. If

you use port forwarding, otherwise insecure protocols (such as POP) can be encrypted

for secure communication with remote machines. SSH makes it relatively simple to

encrypt different types of communication normally sent insecurely over public networks.

However, SSH is generally designed for use in interactive situations. For non-interactive

use you may find an SSL based solution more useful. For example, you could use the

OpenSSL libraries to implement native SSL support in your application or use the

stunnel utility to create an SSL tunnel between two machines. Both OpenSSL and

stunnel are provided on the Development Kit CD.

For more information about SSH, see www.openssh.org

A large number of client and server programs can use the SSH protocol, including many

open source and freely available applications. Several different SSH client versions are

available for almost every major operating system in use today.

Please see the documentation for your host system for an explanation of how to install

and deploy OpenSSH on your host system.

Several SSH clients are also available for non-Linux systems. These include Microsoft

Windows platforms, such as:

PuTTY: A Windows version of the ssh program. This is provided on the Development

Kit CD, in the folder /host/windows, and at

www.chiark.greenend.org.uk/~sgtatham/putty

•

WinSCP: A graphical version of SCP for windows. This is also provided in

/host/windows, and at winscp.net

•

1 2 ... 19 20 21 22 23 24 25 26 27 28 29 ... 71 72

Sin comentarios

Eurotech ZEUS Manual de usuario Pagina 24