Home | History | Annotate | Download | only in openssh 
      1 /* $OpenBSD: ssh.h,v 1.83 2015/12/11 03:19:09 djm Exp $ */
      2 
      3 /*
      4  * Author: Tatu Ylonen <ylo (at) cs.hut.fi>
      5  * Copyright (c) 1995 Tatu Ylonen <ylo (at) cs.hut.fi>, Espoo, Finland
      6  *                    All rights reserved
      7  *
      8  * As far as I am concerned, the code I have written for this software
      9  * can be used freely for any purpose.  Any derived versions of this
     10  * software must be clearly marked as such, and if the derived work is
     11  * incompatible with the protocol description in the RFC file, it must be
     12  * called by a name other than "ssh" or "Secure Shell".
     13  */
     14 
     15 /* Cipher used for encrypting authentication files. */
     16 #define SSH_AUTHFILE_CIPHER	SSH_CIPHER_3DES
     17 
     18 /* Default port number. */
     19 #define SSH_DEFAULT_PORT	22
     20 
     21 /*
     22  * Maximum number of certificate files that can be specified
     23  * in configuration files or on the command line.
     24  */
     25 #define SSH_MAX_CERTIFICATE_FILES	100
     26 
     27 /*
     28  * Maximum number of RSA authentication identity files that can be specified
     29  * in configuration files or on the command line.
     30  */
     31 #define SSH_MAX_IDENTITY_FILES		100
     32 
     33 /*
     34  * Maximum length of lines in authorized_keys file.
     35  * Current value permits 16kbit RSA and RSA1 keys and 8kbit DSA keys, with
     36  * some room for options and comments.
     37  */
     38 #define SSH_MAX_PUBKEY_BYTES		16384
     39 
     40 /*
     41  * Major protocol version.  Different version indicates major incompatibility
     42  * that prevents communication.
     43  *
     44  * Minor protocol version.  Different version indicates minor incompatibility
     45  * that does not prevent interoperation.
     46  */
     47 #define PROTOCOL_MAJOR_1	1
     48 #define PROTOCOL_MINOR_1	5
     49 
     50 /* We support both SSH1 and SSH2 */
     51 #define PROTOCOL_MAJOR_2	2
     52 #define PROTOCOL_MINOR_2	0
     53 
     54 /*
     55  * Name for the service.  The port named by this service overrides the
     56  * default port if present.
     57  */
     58 #define SSH_SERVICE_NAME	"ssh"
     59 
     60 /*
     61  * Name of the environment variable containing the process ID of the
     62  * authentication agent.
     63  */
     64 #define SSH_AGENTPID_ENV_NAME	"SSH_AGENT_PID"
     65 
     66 /*
     67  * Name of the environment variable containing the pathname of the
     68  * authentication socket.
     69  */
     70 #define SSH_AUTHSOCKET_ENV_NAME "SSH_AUTH_SOCK"
     71 
     72 /*
     73  * Environment variable for overwriting the default location of askpass
     74  */
     75 #define SSH_ASKPASS_ENV		"SSH_ASKPASS"
     76 
     77 /*
     78  * Force host key length and server key length to differ by at least this
     79  * many bits.  This is to make double encryption with rsaref work.
     80  */
     81 #define SSH_KEY_BITS_RESERVED		128
     82 
     83 /*
     84  * Length of the session key in bytes.  (Specified as 256 bits in the
     85  * protocol.)
     86  */
     87 #define SSH_SESSION_KEY_LENGTH		32
     88 
     89 /* Used to identify ``EscapeChar none'' */
     90 #define SSH_ESCAPECHAR_NONE		-2
     91 
     92 /*
     93  * unprivileged user when UsePrivilegeSeparation=yes;
     94  * sshd will change its privileges to this user and its
     95  * primary group.
     96  */
     97 #ifndef SSH_PRIVSEP_USER
     98 #define SSH_PRIVSEP_USER		"sshd"
     99 #endif
    100 
    101 /* Minimum modulus size (n) for RSA keys. */
    102 #define SSH_RSA_MINIMUM_MODULUS_SIZE	768
    103 
    104 /* Listen backlog for sshd, ssh-agent and forwarding sockets */
    105 #define SSH_LISTEN_BACKLOG		128
    106