← Back to context

Comment by gojomo

12 years ago

Does sshd only use TLS/OpenSSL "for crypto primitives"? Or not use OpenSSL at all?

sshd implements the SSH protocol, not the TLS protocol.

  • What about when using certificates?

    • when openssh uses certificates it still uses its own protocol (even with the x509 patch - without that, the certificates used by openssh are not even the same kind of certificate as those used by openssl).

      the problem with the openssl library is in the implementation of the TLS protocol. this is not used by openssh. so openssh is not affected by this problem. even when certificates are used. and even when x509 certificates are used (which requires a separate patch).