@ai-ecoverse/wasix-openssh 0.0.0-stage → 10.6.0-10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/LICENSE ADDED
@@ -0,0 +1,412 @@
1
+ This file is part of the OpenSSH software.
2
+
3
+ The licences which components of this software fall under are as
4
+ follows. First, we will summarize and say that all components
5
+ are under a BSD licence, or a licence more free than that.
6
+
7
+ OpenSSH contains no GPL code.
8
+
9
+ 1)
10
+ * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
11
+ * All rights reserved
12
+ *
13
+ * As far as I am concerned, the code I have written for this software
14
+ * can be used freely for any purpose. Any derived versions of this
15
+ * software must be clearly marked as such, and if the derived work is
16
+ * incompatible with the protocol description in the RFC file, it must be
17
+ * called by a name other than "ssh" or "Secure Shell".
18
+
19
+ [Tatu continues]
20
+ * However, I am not implying to give any licenses to any patents or
21
+ * copyrights held by third parties, and the software includes parts that
22
+ * are not under my direct control. As far as I know, all included
23
+ * source code is used in accordance with the relevant license agreements
24
+ * and can be used freely for any purpose (the GNU license being the most
25
+ * restrictive); see below for details.
26
+
27
+ [However, none of that term is relevant at this point in time. All of
28
+ these restrictively licenced software components which he talks about
29
+ have been removed from OpenSSH, i.e.,
30
+
31
+ - RSA is no longer included, found in the OpenSSL library
32
+ - IDEA is no longer included, its use is deprecated
33
+ - DES is now external, in the OpenSSL library
34
+ - GMP is no longer used, and instead we call BN code from OpenSSL
35
+ - Zlib is now external, in a library
36
+ - The make-ssh-known-hosts script is no longer included
37
+ - TSS has been removed
38
+ - MD5 is now external, in the OpenSSL library
39
+ - RC4 support has been replaced with ARC4 support from OpenSSL
40
+ - Blowfish is now external, in the OpenSSL library
41
+
42
+ [The licence continues]
43
+
44
+ Note that any information and cryptographic algorithms used in this
45
+ software are publicly available on the Internet and at any major
46
+ bookstore, scientific library, and patent office worldwide. More
47
+ information can be found e.g. at "http://www.cs.hut.fi/crypto".
48
+
49
+ The legal status of this program is some combination of all these
50
+ permissions and restrictions. Use only at your own responsibility.
51
+ You will be responsible for any legal consequences yourself; I am not
52
+ making any claims whether possessing or using this is legal or not in
53
+ your country, and I am not taking any responsibility on your behalf.
54
+
55
+
56
+ NO WARRANTY
57
+
58
+ BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
59
+ FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
60
+ OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
61
+ PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
62
+ OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
63
+ MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
64
+ TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
65
+ PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
66
+ REPAIR OR CORRECTION.
67
+
68
+ IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
69
+ WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
70
+ REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
71
+ INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
72
+ OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
73
+ TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
74
+ YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
75
+ PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
76
+ POSSIBILITY OF SUCH DAMAGES.
77
+
78
+ 3)
79
+ ssh-keyscan was contributed by David Mazieres under a BSD-style
80
+ license.
81
+
82
+ * Copyright 1995, 1996 by David Mazieres <dm@lcs.mit.edu>.
83
+ *
84
+ * Modification and redistribution in source and binary forms is
85
+ * permitted provided that due credit is given to the author and the
86
+ * OpenBSD project by leaving this copyright notice intact.
87
+
88
+ 4)
89
+ The Rijndael implementation by Vincent Rijmen, Antoon Bosselaers
90
+ and Paulo Barreto is in the public domain and distributed
91
+ with the following license:
92
+
93
+ * @version 3.0 (December 2000)
94
+ *
95
+ * Optimised ANSI C code for the Rijndael cipher (now AES)
96
+ *
97
+ * @author Vincent Rijmen <vincent.rijmen@esat.kuleuven.ac.be>
98
+ * @author Antoon Bosselaers <antoon.bosselaers@esat.kuleuven.ac.be>
99
+ * @author Paulo Barreto <paulo.barreto@terra.com.br>
100
+ *
101
+ * This code is hereby placed in the public domain.
102
+ *
103
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
104
+ * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
105
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
106
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
107
+ * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
108
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
109
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
110
+ * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
111
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
112
+ * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
113
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
114
+
115
+ 5)
116
+ One component of the ssh source code is under a 3-clause BSD license,
117
+ held by the University of California, since we pulled these parts from
118
+ original Berkeley code.
119
+
120
+ * Copyright (c) 1983, 1990, 1992, 1993, 1995
121
+ * The Regents of the University of California. All rights reserved.
122
+ *
123
+ * Redistribution and use in source and binary forms, with or without
124
+ * modification, are permitted provided that the following conditions
125
+ * are met:
126
+ * 1. Redistributions of source code must retain the above copyright
127
+ * notice, this list of conditions and the following disclaimer.
128
+ * 2. Redistributions in binary form must reproduce the above copyright
129
+ * notice, this list of conditions and the following disclaimer in the
130
+ * documentation and/or other materials provided with the distribution.
131
+ * 3. Neither the name of the University nor the names of its contributors
132
+ * may be used to endorse or promote products derived from this software
133
+ * without specific prior written permission.
134
+ *
135
+ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
136
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
137
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
138
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
139
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
140
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
141
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
142
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
143
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
144
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
145
+ * SUCH DAMAGE.
146
+
147
+ 6)
148
+ Remaining components of the software are provided under a standard
149
+ 2-term BSD licence with the following names as copyright holders:
150
+
151
+ Markus Friedl
152
+ Theo de Raadt
153
+ Niels Provos
154
+ Dug Song
155
+ Aaron Campbell
156
+ Damien Miller
157
+ Kevin Steves
158
+ Daniel Kouril
159
+ Wesley Griffin
160
+ Per Allansson
161
+ Nils Nordman
162
+ Simon Wilkinson
163
+
164
+ Portable OpenSSH additionally includes code from the following copyright
165
+ holders, also under the 2-term BSD license:
166
+
167
+ Ben Lindstrom
168
+ Tim Rice
169
+ Andre Lucas
170
+ Chris Adams
171
+ Corinna Vinschen
172
+ Cray Inc.
173
+ Denis Parker
174
+ Gert Doering
175
+ Jakob Schlyter
176
+ Jason Downs
177
+ Juha Yrjölä
178
+ Michael Stone
179
+ Networks Associates Technology, Inc.
180
+ Solar Designer
181
+ Todd C. Miller
182
+ Wayne Schroeder
183
+ William Jones
184
+ Darren Tucker
185
+ Sun Microsystems
186
+ The SCO Group
187
+ Daniel Walsh
188
+ Red Hat, Inc
189
+ Simon Vallet / Genoscope
190
+
191
+ * Redistribution and use in source and binary forms, with or without
192
+ * modification, are permitted provided that the following conditions
193
+ * are met:
194
+ * 1. Redistributions of source code must retain the above copyright
195
+ * notice, this list of conditions and the following disclaimer.
196
+ * 2. Redistributions in binary form must reproduce the above copyright
197
+ * notice, this list of conditions and the following disclaimer in the
198
+ * documentation and/or other materials provided with the distribution.
199
+ *
200
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
201
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
202
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
203
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
204
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
205
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
206
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
207
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
208
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
209
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
210
+
211
+ 8) Portable OpenSSH contains the following additional licenses:
212
+
213
+ a) snprintf replacement
214
+
215
+ * Copyright Patrick Powell 1995
216
+ * This code is based on code written by Patrick Powell
217
+ * (papowell@astart.com) It may be used for any purpose as long as this
218
+ * notice remains intact on all source code distributions
219
+
220
+ b) Compatibility code (openbsd-compat)
221
+
222
+ Apart from the previously mentioned licenses, various pieces of code
223
+ in the openbsd-compat/ subdirectory are licensed as follows:
224
+
225
+ Some code is licensed under a 3-term BSD license, to the following
226
+ copyright holders:
227
+
228
+ Todd C. Miller
229
+ Theo de Raadt
230
+ Damien Miller
231
+ Eric P. Allman
232
+ The Regents of the University of California
233
+ Constantin S. Svintsoff
234
+ Kungliga Tekniska Högskolan
235
+
236
+ * Redistribution and use in source and binary forms, with or without
237
+ * modification, are permitted provided that the following conditions
238
+ * are met:
239
+ * 1. Redistributions of source code must retain the above copyright
240
+ * notice, this list of conditions and the following disclaimer.
241
+ * 2. Redistributions in binary form must reproduce the above copyright
242
+ * notice, this list of conditions and the following disclaimer in the
243
+ * documentation and/or other materials provided with the distribution.
244
+ * 3. Neither the name of the University nor the names of its contributors
245
+ * may be used to endorse or promote products derived from this software
246
+ * without specific prior written permission.
247
+ *
248
+ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
249
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
250
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
251
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
252
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
253
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
254
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
255
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
256
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
257
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
258
+ * SUCH DAMAGE.
259
+
260
+ Some code is licensed under an ISC-style license, to the following
261
+ copyright holders:
262
+
263
+ Internet Software Consortium.
264
+ Todd C. Miller
265
+ Reyk Floeter
266
+ Chad Mynhier
267
+
268
+ * Permission to use, copy, modify, and distribute this software for any
269
+ * purpose with or without fee is hereby granted, provided that the above
270
+ * copyright notice and this permission notice appear in all copies.
271
+ *
272
+ * THE SOFTWARE IS PROVIDED "AS IS" AND TODD C. MILLER DISCLAIMS ALL
273
+ * WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
274
+ * OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL TODD C. MILLER BE LIABLE
275
+ * FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
276
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
277
+ * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
278
+ * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
279
+
280
+ Some code is licensed under a MIT-style license to the following
281
+ copyright holders:
282
+
283
+ Free Software Foundation, Inc.
284
+
285
+ * Permission is hereby granted, free of charge, to any person obtaining a *
286
+ * copy of this software and associated documentation files (the *
287
+ * "Software"), to deal in the Software without restriction, including *
288
+ * without limitation the rights to use, copy, modify, merge, publish, *
289
+ * distribute, distribute with modifications, sublicense, and/or sell *
290
+ * copies of the Software, and to permit persons to whom the Software is *
291
+ * furnished to do so, subject to the following conditions: *
292
+ * *
293
+ * The above copyright notice and this permission notice shall be included *
294
+ * in all copies or substantial portions of the Software. *
295
+ * *
296
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS *
297
+ * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF *
298
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. *
299
+ * IN NO EVENT SHALL THE ABOVE COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, *
300
+ * DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR *
301
+ * OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR *
302
+ * THE USE OR OTHER DEALINGS IN THE SOFTWARE. *
303
+ * *
304
+ * Except as contained in this notice, the name(s) of the above copyright *
305
+ * holders shall not be used in advertising or otherwise to promote the *
306
+ * sale, use or other dealings in this Software without prior written *
307
+ * authorization. *
308
+ ****************************************************************************/
309
+
310
+ The Blowfish cipher implementation is licensed by Niels Provos under
311
+ a 3-clause BSD license:
312
+
313
+ * Blowfish - a fast block cipher designed by Bruce Schneier
314
+ *
315
+ * Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>
316
+ * All rights reserved.
317
+ *
318
+ * Redistribution and use in source and binary forms, with or without
319
+ * modification, are permitted provided that the following conditions
320
+ * are met:
321
+ * 1. Redistributions of source code must retain the above copyright
322
+ * notice, this list of conditions and the following disclaimer.
323
+ * 2. Redistributions in binary form must reproduce the above copyright
324
+ * notice, this list of conditions and the following disclaimer in the
325
+ * documentation and/or other materials provided with the distribution.
326
+ * 3. The name of the author may not be used to endorse or promote products
327
+ * derived from this software without specific prior written permission.
328
+ *
329
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
330
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
331
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
332
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
333
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
334
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
335
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
336
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
337
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
338
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
339
+
340
+ Some replacement code is licensed by the NetBSD foundation under a
341
+ 2-clause BSD license:
342
+
343
+ * Copyright (c) 2001 The NetBSD Foundation, Inc.
344
+ * All rights reserved.
345
+ *
346
+ * This code is derived from software contributed to The NetBSD Foundation
347
+ * by Todd Vierling.
348
+ *
349
+ * Redistribution and use in source and binary forms, with or without
350
+ * modification, are permitted provided that the following conditions
351
+ * are met:
352
+ * 1. Redistributions of source code must retain the above copyright
353
+ * notice, this list of conditions and the following disclaimer.
354
+ * 2. Redistributions in binary form must reproduce the above copyright
355
+ * notice, this list of conditions and the following disclaimer in the
356
+ * documentation and/or other materials provided with the distribution.
357
+ *
358
+ * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
359
+ * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
360
+ * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
361
+ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
362
+ * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
363
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
364
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
365
+ * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
366
+ * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
367
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
368
+ * POSSIBILITY OF SUCH DAMAGE.
369
+
370
+ The replacement base64 implementation has the following MIT-style
371
+ licenses:
372
+
373
+ * Copyright (c) 1996 by Internet Software Consortium.
374
+ *
375
+ * Permission to use, copy, modify, and distribute this software for any
376
+ * purpose with or without fee is hereby granted, provided that the above
377
+ * copyright notice and this permission notice appear in all copies.
378
+ *
379
+ * THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS
380
+ * ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
381
+ * OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE
382
+ * CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
383
+ * DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
384
+ * PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
385
+ * ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
386
+ * SOFTWARE.
387
+
388
+ * Portions Copyright (c) 1995 by International Business Machines, Inc.
389
+ *
390
+ * International Business Machines, Inc. (hereinafter called IBM) grants
391
+ * permission under its copyrights to use, copy, modify, and distribute this
392
+ * Software with or without fee, provided that the above copyright notice and
393
+ * all paragraphs of this notice appear in all copies, and that the name of IBM
394
+ * not be used in connection with the marketing of any product incorporating
395
+ * the Software or modifications thereof, without specific, written prior
396
+ * permission.
397
+ *
398
+ * To the extent it has a right to do so, IBM grants an immunity from suit
399
+ * under its patents, if any, for the use, sale or manufacture of products to
400
+ * the extent that such products are used for performing Domain Name System
401
+ * dynamic updates in TCP/IP networks by means of the Software. No immunity is
402
+ * granted for any product per se or for any other function of any product.
403
+ *
404
+ * THE SOFTWARE IS PROVIDED "AS IS", AND IBM DISCLAIMS ALL WARRANTIES,
405
+ * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
406
+ * PARTICULAR PURPOSE. IN NO EVENT SHALL IBM BE LIABLE FOR ANY SPECIAL,
407
+ * DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER ARISING
408
+ * OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE, EVEN
409
+ * IF IBM IS APPRISED OF THE POSSIBILITY OF SUCH DAMAGES.
410
+
411
+ ------
412
+ $OpenBSD: LICENCE,v 1.20 2017/04/30 23:26:16 djm Exp $
package/README.md CHANGED
@@ -1,3 +1,92 @@
1
- # Temporary Holding Version
1
+ # `@ai-ecoverse/wasix-openssh`
2
2
 
3
- This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
3
+ [OpenSSH](https://www.openssh.com/) portable **10.6p1** client tools for the
4
+ [slicc](https://github.com/ai-ecoverse/slicc) WASIX realm: `ssh`, `ssh-keygen`,
5
+ `scp`, `sftp`, and `ssh-add`.
6
+
7
+ Built with the pinned wasixcc on **wasix-sysroot 2025.9.30-29** (since
8
+ 10.6.0-8; -7 was on -28, -6 on -22, -5 on -18), linking
9
+ **wasix-openssl 3.5.9-3** and **wasix-zlib 1.3.1-2** via pkg-config only
10
+ (`-Wl,--fatal-warnings`). No `sshd` in this package.
11
+
12
+ ```bash
13
+ ssh-keygen -t ed25519 -N '' -f ~/.ssh/id_ed25519
14
+ ssh -o StrictHostKeyChecking=accept-new user@host true
15
+ GIT_SSH_COMMAND=ssh git clone ssh://user@host/repo.git
16
+ ```
17
+
18
+ ## Identity and `~/.ssh`
19
+
20
+ Since 10.6.0-6 the user is the kernel's (wasix-sysroot -20 credentials,
21
+ slicc-kernel ≥ 1.44.0): the default remote user and `~` come from the
22
+ kernel's passwd, `root` with `/root`, or an added user with its own home, and
23
+ files ssh writes (keys, `known_hosts`) belong to that user. Key files need
24
+ mode **0600**; a private key readable by others is refused (`UNPROTECTED
25
+ PRIVATE KEY FILE`).
26
+
27
+ ## Interactive PTY (`ssh -t`)
28
+
29
+ Since 10.6.0-6 (wasix-sysroot -21 per-descriptor termios, slicc-kernel ≥
30
+ 1.48.0) `enter_raw_mode` really clears `ISIG` / `IEXTEN` / `OPOST`, so a
31
+ local **^C** reaches the remote, and resizing the local terminal reaches the
32
+ remote pty (SIGWINCH → window-change). With -5, or on older kernels, ^C hit
33
+ the local `ssh` ([slicc-kernel#247](https://github.com/ai-ecoverse/slicc-kernel/issues/247)).
34
+
35
+
36
+ ## `ssh-add` / agent
37
+
38
+ This package ships **`ssh-add`** but **not `ssh-agent`**. Without an agent
39
+ (`SSH_AUTH_SOCK` unset or dead), `ssh-add -l` exits **2** with
40
+ `Could not open a connection to your authentication agent.` Use keys via
41
+ `-i` / `IdentityFile`, or run an agent from another package/host if you need
42
+ one.
43
+
44
+ ## Auth
45
+
46
+ - `none` (for link servers that allow it)
47
+ - publickey: ed25519, ecdsa, rsa
48
+ - keyboard-interactive / password
49
+ - `~/.ssh/config`, `known_hosts` (`StrictHostKeyChecking`, `accept-new`)
50
+
51
+ ## Fork / spawn
52
+
53
+ Outbound TCP uses kernel sockets (uplink-routed). Exec mode needs no fork.
54
+ `scp` / `sftp` spawn the `ssh` helper with **`posix_spawnp`** (patch
55
+ `0002-wasix-scp-sftp-posix-spawn.patch`) over a `socketpair`, building each
56
+ call's argv on a **copy** of the option list so multi-source / `-3` stay
57
+ correct. They need a kernel with working `sock_pair`
58
+ (`engines.slicc-kernel` **≥ 1.41.0**; cert pin **1.41.3**).
59
+
60
+ **Unsupported (still `fork` in upstream OpenSSH):** `ProxyCommand`,
61
+ `ProxyJump` (`-J`), and `SSH_ASKPASS` / `ssh-askpass`. They fail with
62
+ `fork failed: Function not implemented`. Use a direct route or inject keys
63
+ with `-i` / `IdentityFile` instead. ControlMaster / `-f` / true daemonize
64
+ are likewise unsupported.
65
+
66
+ `set_sock_tos` ignores `ENOSYS` / `EOPNOTSUPP` / `ENOPROTOOPT` so missing
67
+ `IP_TOS` does not pollute stderr (patch `0003`). `ssh-keygen -R` / `-H`
68
+ backs up `known_hosts` with a copy when `link()` is unavailable (patch
69
+ `0004`).
70
+
71
+ ## Sysroot
72
+
73
+ **wasix-sysroot 2025.9.30-29**: select/pselect timeouts and socketpair
74
+ flags (-18), signals and EINTR (-19), the kernel's users (-20), per-fd
75
+ terminals (-21), the `slicc.libc` marker in every binary (-22), so
76
+ slicc-kernel gives it EINTR semantics, real signal masks (-28,
77
+ slicc-kernel ≥ 1.88.0), and a `ppoll` that takes pollfds asking for no
78
+ events (-29). OpenSSH 10.6's client loop blocks SIGWINCH, SIGINT, SIGTERM
79
+ and friends and waits in **ppoll** with its unblocking mask, passing events-0
80
+ pollfds for idle channels. Since 10.6.0-8 that's the libc's `ppoll`, whose
81
+ wait is atomic (`slicc.sigmask_poll`), so a signal that arrives while ssh is
82
+ busy is handled at the next wait instead of waiting out its timeout.
83
+ 10.6.0-7 used OpenSSH's own openbsd-compat `ppoll` on top of `pselect`,
84
+ because -28's libc `ppoll` refused events-0 pollfds (ENOSYS); 10.6.0-6 and
85
+ older ignored the mask.
86
+
87
+ ## Not in v1
88
+
89
+ `sshd`, PKCS#11, security keys, Kerberos, PAM, SELinux. `ProxyCommand` /
90
+ `ProxyJump` / `SSH_ASKPASS` (see above).
91
+
92
+ Recipe: [homescoop/packages/wasix-openssh](https://github.com/ai-ecoverse/homescoop/tree/main/packages/wasix-openssh).
package/SOURCES.md ADDED
@@ -0,0 +1,11 @@
1
+ # Sources
2
+
3
+ Upstream tarball (OpenBSD portable), with `patches/` applied when present:
4
+
5
+ | tarball | sha256 |
6
+ | --- | --- |
7
+ | openssh-10.6p1.tar.gz | `a9dc9565dffe8640f64d863cd29a32bc4a3dbdec0566a7fc44c5d6ee767d5f39` |
8
+ | @ai-ecoverse/wasix-openssl 3.5.9-3 | (recipe sources.wasix_openssl) |
9
+ | @ai-ecoverse/wasix-zlib 1.3.1-2 | (recipe sources.wasix_zlib) |
10
+
11
+ Build recipe: https://github.com/ai-ecoverse/homescoop/tree/main/packages/wasix-openssh