Recent SunSSH Enhancements in OpenSolaris

A few days ago I was giving an internal presentation here in Prague on new features that were recently integrated into SunSSH. There were quite a few resyncs with OpenSSH, a couple of new options based on ideas that materialized here or ideas of our customers, and also outlined there are some plans for the future.

I put the slides on SunSSH page at OpenSolaris.Org. If you are interested in what's going on around SunSSH, you can read the presentation slides here.

Comments:

Great presentation. I'm curious, though, are there any plans to implement the OpenSSL engine support in SunSSH? OpenSSH gained this ability a few versions ago, and it would be great to have hardware offload for crypto on my Solaris machines (the pkcs11 engine is really nice!).

Posted by Derek Morr on November 16, 2007 at 12:26 PM CET #

hi Derek, we have been discussing this here for some time. I know it's not the answer you are looking for, but it's a matter of priorities.

there're more ways how to achieve the goal of making use of Crypto Framework. If OpenSSL engine is to be used, we should make it configurable before that (see 6445288, 6591009, 6619049). I plan to make some tests and then blog about it but haven't got to it yet.

another way of doing it might be to replace OpenSSL API with PKCS#11 and to use CF directly. That would more complicated but connecting directly to CF would also have some advantages.

I'm sorry but I can't give you any specific answers aside from the one that we have been discussing that topic here.

Posted by Jan on November 17, 2007 at 04:57 AM CET #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Jan Pechanec

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today