- djm@cvs.openbsd.org 2009/08/12 00:13:00
[openssh-git.git] / ssh.h
blob186cfff9642f064cc0d048557cbe1a24a561a061
1 /* $OpenBSD: ssh.h,v 1.78 2006/08/03 03:34:42 deraadt Exp $ */
3 /*
4 * Author: Tatu Ylonen <ylo@cs.hut.fi>
5 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
6 * All rights reserved
8 * As far as I am concerned, the code I have written for this software
9 * can be used freely for any purpose. Any derived versions of this
10 * software must be clearly marked as such, and if the derived work is
11 * incompatible with the protocol description in the RFC file, it must be
12 * called by a name other than "ssh" or "Secure Shell".
15 /* Cipher used for encrypting authentication files. */
16 #define SSH_AUTHFILE_CIPHER SSH_CIPHER_3DES
18 /* Default port number. */
19 #define SSH_DEFAULT_PORT 22
21 /* Maximum number of TCP/IP ports forwarded per direction. */
22 #define SSH_MAX_FORWARDS_PER_DIRECTION 100
25 * Maximum number of RSA authentication identity files that can be specified
26 * in configuration files or on the command line.
28 #define SSH_MAX_IDENTITY_FILES 100
31 * Maximum length of lines in authorized_keys file.
32 * Current value permits 16kbit RSA and RSA1 keys and 8kbit DSA keys, with
33 * some room for options and comments.
35 #define SSH_MAX_PUBKEY_BYTES 8192
38 * Major protocol version. Different version indicates major incompatibility
39 * that prevents communication.
41 * Minor protocol version. Different version indicates minor incompatibility
42 * that does not prevent interoperation.
44 #define PROTOCOL_MAJOR_1 1
45 #define PROTOCOL_MINOR_1 5
47 /* We support both SSH1 and SSH2 */
48 #define PROTOCOL_MAJOR_2 2
49 #define PROTOCOL_MINOR_2 0
52 * Name for the service. The port named by this service overrides the
53 * default port if present.
55 #define SSH_SERVICE_NAME "ssh"
58 * Name of the environment variable containing the process ID of the
59 * authentication agent.
61 #define SSH_AGENTPID_ENV_NAME "SSH_AGENT_PID"
64 * Name of the environment variable containing the pathname of the
65 * authentication socket.
67 #define SSH_AUTHSOCKET_ENV_NAME "SSH_AUTH_SOCK"
70 * Environment variable for overwriting the default location of askpass
72 #define SSH_ASKPASS_ENV "SSH_ASKPASS"
75 * Force host key length and server key length to differ by at least this
76 * many bits. This is to make double encryption with rsaref work.
78 #define SSH_KEY_BITS_RESERVED 128
81 * Length of the session key in bytes. (Specified as 256 bits in the
82 * protocol.)
84 #define SSH_SESSION_KEY_LENGTH 32
86 /* Used to identify ``EscapeChar none'' */
87 #define SSH_ESCAPECHAR_NONE -2
90 * unprivileged user when UsePrivilegeSeparation=yes;
91 * sshd will change its privileges to this user and its
92 * primary group.
94 #ifndef SSH_PRIVSEP_USER
95 #define SSH_PRIVSEP_USER "sshd"
96 #endif
98 /* Minimum modulus size (n) for RSA keys. */
99 #define SSH_RSA_MINIMUM_MODULUS_SIZE 768
101 /* Listen backlog for sshd, ssh-agent and forwarding sockets */
102 #define SSH_LISTEN_BACKLOG 128