Halaman manual

• ssh - The basic rlogin/rsh-like client program.
  
• sshd - The daemon that permits you to login.
  
• ssh-agent - An authentication agent that can store private keys.
  
• ssh-add - Tool which adds keys to in the above agent.
  
• sftp - FTP-like program that works over SSH1 and SSH2 protocol.
  
• scp - File copy program that acts like rcp(1).
  
• ssh-keygen - Key generation tool.
  
• sftp-server - SFTP server subsystem (started automatically by sshd).
  
• ssh-keyscan - Utility for gathering public host keys from a number of hosts.
  
• ssh-keysign - Helper program for hostbased authentication.
  

The SSH2 protocol implemented in OpenSSH is standardized by the IETF secsh working group and is specified in several drafts. The overall structure of SSH2 is described in the architecture draft. It is composed of three layered components:

• The transport layer provides algorithm negotiation and a key exchange. The key exchange includes server authentication and results in a cryptographically secured connection: it provides integrity, confidentiality and optional compression.
• The user authentication layer uses the established connection and relies on the services provided by the transport layer. It provides several mechanisms for user authentication. These include traditional password authentication as well as public-key or host-based authentication mechanisms.
• The connection layer multiplexes many different concurrent channels over the authenticated connection and allows tunneling of login sessions and TCP-forwarding. It provides a flow control service for these channels. Additionally, various channel-specific options can be negotiated.

• The interactive authentication draft provides support for new authentication schemes like S/Key or TIS authentication.
• The SFTP file transfer protocol is specified in the filexfer draft. OpenSSH implements a SFTP client and server.
• A file format for public keys is specified in the publickeyfile draft. The command ssh-keygen can be used to convert an OpenSSH public key to this file format.
• The Diffie-Hellman Group Exchange allows clients to request more secure groups for the Diffie-Hellman key exchange.

There is also a mailing list for general discussions about the SSH2 protocol (ietf-ssh@netbsd.org).