openssl 과 ssh 의 설치과정과

다음은 openssl 과 ssh 의 설치과정과 실행방법입니다.
LAN환경에서 Packet Sniffing을 방지하기 위해 telnet통신을 ssh로 대처하는 것도
보안에 대한 대비책이라고 생각합니다. 
먼저 ssh 설치전에 ssl이 설치되어야 한다는 군요..



ftp.openssl.org/source/openssl-0.9.6.tar.gz

[선결요건]
------------------------------------
* Perl 5
* an ANSI C compiler
* a supported Unix operating system
------------------------------------

[설치]
---------------------------------------
$ ./config --prefix=/usr/local/openssl
$ make
$ make test
$ make install
--------------------------------------- 


[설치되는 디렉토리]
----------------------------------------------------------------------------------
certs      Initially empty, this is the default location for certificate files.
man/man1    Manual pages for the 'openssl' command line tool
man/man3    Manual pages for the libraries (very incomplete)
misc        Various scripts.
private    Initially empty, this is the default location for private key files.
bin        Contains the openssl binary and a few other utility programs.
include/openssl 
Contains the header files needed if you want to compile programs with libcrypto or
libssl.
lib        Contains the OpenSSL library files themselves. 
-----------------------------------------------------------------------------------












ftp.ssh.com/pub/ssh-2.4.0.tar.gz


[설치]
---------------------------------------
$ ./config --prefix=/usr/local/ssh
$ make
$ make test
$ make install
--------------------------------------- 



[설치되는 파일들]
-------------------------------------------------------------------------------------
ssh2            The SSH2 client.
sshd2          The SSH2 daemon.
sftp2          The SFTP client (needs ssh2). Type "?" in the command line for help.
sftp-server2    The SFTP server (executed by sshd2).
scp2            The SCP client.
ssh-keygen2    The utility for generating keys. Use -h for help.
ssh-add2        Add identities to the authentication agent.
ssh-agent2      The authentication agent.
ssh-askpass2    X11 utility for querying passwords.
ssh-signer2    A small program that signs "hostbased" authentication
                packets. Executed by ssh2, and for proper function,
                must be suid root. (This is done by 'make install'.)
ssh-pam-client  Helper program, that the server uses with PAM authentication.
ssh-probe2      Program to probe a given network for ssh2
                servers. See ssh-probe(1) and sshd2_config(5)
                for MaxBroadcastsPerSecond.
ssh-pubkeymgr  Utility script for generating user public keys and
                uploading them and setting up the ~/.ssh2/authorization
                and ~/.ssh2/identification files.
ssh-chrootmgr  Utility to ease setting up chrooted environment for users. 
-----------------------------------------------------------------------------------


[StartUp 파일]

# cp /usr/local/src/ssh-2.4.0/sshd2.startup /etc/rc.d/init.d/sshd
# ln -s /etc/rc.d/init.d/sshd /etc/rc.d/rc3.d/S??sshd //??는 적당한 숫자

vi로 /etc/rc.d/init.d/sshd 파일을 열어 /usr/local/sbin/sshd2 라고 되어 있는 
부분을 /usr/local/ssh/sbin/sshd2 로 모두 변경해 준다.


[Secure Shell Deamon의 실행]

# /etc/rc.d/init.d/sshd start

Starting sshd2 in port 22: sshd2: SSH Secure Shell 2.4.0 (non-commercial version
) on i586-pc-linux-gnu
done. 


[ssh 를 사용한 접속]


# ssh -l root localhost

Host key not found from database.
Key fingerprint:
124334dr-4235g-balot-rroh-kinep-cy656v-878l-v656575-ty6557in-m56g-va75757x
You can get a public key's fingerprint by running
% ssh-keygen -F publickey.pub
on the keyfile.
Are you sure you want to continue connecting (yes/no)? yes <Enter>
   
Host key saved to /root/.ssh2/hostkeys/key_22_localhost.pub
host key for localhost, accepted by root Fri Apr 06 2001 16:18:24 +0900

root's password: ************ <Enter>

Authentication successful.
Last login: Thu Apr 05 2001 19:54:43 +0900 from
No mail.
#