Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade from OpenSSH 7.5p1 to newer version #41

Open
jtesta opened this issue Jun 12, 2021 · 0 comments
Open

Upgrade from OpenSSH 7.5p1 to newer version #41

jtesta opened this issue Jun 12, 2021 · 0 comments

Comments

@jtesta
Copy link
Owner

jtesta commented Jun 12, 2021

SSH MITM is currently based on OpenSSH 7.5p1. This was intentionally frozen due to the fact that several old algorithms were fully removed in 7.6 and later; these algorithms are needed in order to MITM old servers, which are surprisingly still present in corporate environments (like in networking equipment and embedded devices).

However, OpenSSH 7.5p1 is dependent on OpenSSL 1.0.2, which is no longer supported. While the AppArmor profiles may reduce its exploitable surface, depending on it in the long term may not be a good strategy. Therefore, we may need to create a new branch of SSH MITM to use new versions of OpenSSH & OpenSSL, and let users decide if they want to use the current branch with a higher security risk but better compatibility.

Upgrading the OpenSSH version is likely to be a major undertaking. Help from the community would be much appreciated!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant