SSH

General

• http://en.wikipedia.org/wiki/Secure_Shell
• https://wiki.archlinux.org/index.php/Secure_Shell

• http://blog.hyfather.com/blog/2013/04/18/ssh-uses-four-tcp-segments-for-each-character/

Server/client

• http://www.openssh.org/
  • http://en.wikipedia.org/wiki/OpenSSH

• https://matt.ucc.asn.au/dropbear/dropbear.html
  • http://en.wikipedia.org/wiki/Dropbear_(software)

Keys

Default file name format

~/.ssh/identity and ~/.ssh/identity.pub
  DSA key (old)

~/.ssh/id_rsa and ~/.ssh/id_rsa.pub
  RSA key

ssh-keygen
  create a key. rsa is default.

ssh-copy-id [-i [identity_file]] [user@]remote
  default identity_file is ~/.ssh/id_rsa.pub

Management and config

• ietf: Managing SSH Keys for Automated Access - Current Recommended Practice

ssh -i ~/.ssh/id_rsa_example.org

~/.ssh/config

Host example.org
 IdentityFile ~/.ssh/id_rsa_example.org

• http://nerderati.com/2011/03/simplify-your-life-with-an-ssh-config-file/
• SSH Can Do That? Productivity Tips for Working with Remote Servers
• Tips for Remote Unix Work (SSH, screen, and VNC) [1]

• http://blog.hypergeometric.com/2012/02/22/ssh-dos-and-donts/
• http://www.cyberciti.biz/tips/linux-unix-bsd-openssh-server-best-practices.html

• http://opensourcehacker.com/2012/10/24/ssh-key-and-passwordless-login-basics-for-developers/
• http://vimeo.com/54505525

• HOWTO: set up ssh keys
• Using Rsync and SSH - Keys, Validating, and Automation
• http://www.karan.org/blog/index.php/2009/08/25/multiple-ssh-private-keys

• http://www.cmdln.org/2008/02/11/restricting-ssh-commands/
  • http://www.hackinglinuxexposed.com/articles/20030115.html
  • https://github.com/gabor-udvari/authprogs
    • https://raw.github.com/gabor-udvari/authprogs/master/authprogs

• http://linux.die.net/man/1/ssh-keyscan

• http://en.wikipedia.org/wiki/Ssh-agent

• https://github.com/authy/authy-ssh

• http://www.unixwiz.net/techtips/ssh-agent-forwarding.html

randomart

VisualHostKey=yes

• http://superuser.com/questions/22535/what-is-randomart-produced-by-ssh-keygen
  • http://www.dirk-loss.de/sshvis/drunken_bishop.pdf

SCP

• scp -P [port] file.txt user@remotehose:~/file.txt

When scp on remote is initiated, it done so with -t flag, which is undocumented but might be required for precise command persmission configuration.

• https://blogs.oracle.com/janp/entry/how_the_scp_protocol_works

SSHFS

• http://fuse.sourceforge.net/sshfs.html
  • http://en.wikipedia.org/wiki/SSHFS

• Notes on SSHFS

Security

• http://www.semicomplete.com/articles/ssh-security/

• https://wiki.archlinux.org/index.php/Sshguard
• https://wiki.archlinux.org/index.php/Fail2ban

Honeypot

• https://code.google.com/p/kippo/
  • http://blog.macuyiko.com/2011/03/running-ssh-honeypot-with-kippo-lets.html

X11 forwarding

• http://blog.samat.org/2006/05/08/best-ssh-options-for-x11-forwarding

Tools

• https://github.com/turicas/sbc

To sort

• https://wiki.archlinux.org/index.php/Shfs