LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 09-06-2013, 03:25 PM   #1
Altiris
Member
 
Registered: Mar 2013
Posts: 554

Rep: Reputation: Disabled
Is SSH alone secure?


I have a CentOS 6.4 box and I use SSH when I am away to read some log files from the FTP and mail server and also to restart some services or just check if the server is online. The SSH I am talking about is when I can log into a server and am presented with a terminal/command line only interface. Is this secure, meaning, does it work like how VNC and RDP work, sending your password in plain text through the internet or no? If not, can I setup SSL with it or something?
 
Old 09-06-2013, 03:38 PM   #2
Keith Hedger
Senior Member
 
Registered: Jun 2010
Location: Wiltshire, UK
Distribution: Linux From Scratch, Slackware64, Partedmagic
Posts: 2,253

Rep: Reputation: 559Reputation: 559Reputation: 559Reputation: 559Reputation: 559Reputation: 559
If you are worried about security set up public/private keys which avoid the problem of passwords and I think use 128bit encryption but even so this
Code:
...Finally, if other authentication methods fail, ssh prompts the user for a
     password.  The password is sent to the remote host for checking; however,
     since all communications are encrypted, the password cannot be seen by
     someone listening on the network...
from the man page would point to paswwords being reasonably secure ( depending on the password of course "abc123" is NOT a good password ).

In these situations the manpage is your friend!
 
Old 09-06-2013, 03:41 PM   #3
Jenni
Member
 
Registered: Oct 2011
Distribution: Slackware, Fedora
Posts: 158

Rep: Reputation: Disabled
Quote:
Originally Posted by Altiris View Post
I have a CentOS 6.4 box and I use SSH when I am away to read some log files from the FTP and mail server and also to restart some services or just check if the server is online. The SSH I am talking about is when I can log into a server and am presented with a terminal/command line only interface. Is this secure, meaning, does it work like how VNC and RDP work, sending your password in plain text through the internet or no? If not, can I setup SSL with it or something?
I think SSHv2 uses mostly the same encryption that SSL uses anyway. SSHv1 (which has fallen out of use mostly, for good reason) is less secure. to disable SSHv1 support go to your /etc/ssh_config file and change the protocol line to:

# Protocol 2

This will disallow use of the less secure older protocol. (By default on many systems 2 and 1 are enabled)
 
Old 09-06-2013, 03:59 PM   #4
Altiris
Member
 
Registered: Mar 2013
Posts: 554

Original Poster
Rep: Reputation: Disabled
Oh okay so SSH is secure then, sweet. I will be doing SSH tunneling for RDP and VNC now.
 
Old 09-06-2013, 08:49 PM   #5
szboardstretcher
Senior Member
 
Registered: Aug 2006
Location: Detroit, MI
Distribution: GNU/Linux systemd
Posts: 3,821

Rep: Reputation: 1347Reputation: 1347Reputation: 1347Reputation: 1347Reputation: 1347Reputation: 1347Reputation: 1347Reputation: 1347Reputation: 1347Reputation: 1347
Is SSH alone secure?

ssh requires the openssl library. ssh stands for secure shell. you are fine. its encrypted.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How Secure is SSH? AvatarofVirgo Linux - Security 8 08-14-2011 01:37 PM
how secure ssh is ahmad19 Linux - Security 6 04-28-2008 03:53 AM
What is the best way to secure SSH? punjabipredator Linux - Security 21 01-04-2007 10:19 AM
LXer: University of Michigan Selects SSH Tectia for Secure System Administration and Secure File Transfers LXer Syndicated Linux News 0 04-25-2006 01:54 AM
how to secure ssh chongluo Linux - Security 3 11-04-2004 08:16 AM


All times are GMT -5. The time now is 08:35 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration