OpenSSH for Windows update

&gt; Leverage Windows crypto api’s instead of OpenSSL&#x2F;LibreSSL and run as Windows Service<p>Was wondering about that. I&#x27;m surprised the OpenBSD team is accepting the commits - something so fundamental and Windows specific doesn&#x27;t seem like their kind of thing - but great!<p>PS. If you&#x27;re coming from a Unix background and interested in learning posh: <a href="https:&#x2F;&#x2F;certsimple.com&#x2F;rosetta-stone" rel="nofollow">https:&#x2F;&#x2F;certsimple.com&#x2F;rosetta-stone</a>

&gt; Address POSIX compatibility concerns<p>Best way to address POSIX compatibility concerns is implementing a proper POSIX layer in Windows (and not in a half-baked manner like the now deprecated SUA). I can&#x27;t imagine how it would hurt anybody.

Will this OpenSSH server be able to run interactive console programs (like cmd.exe or python.exe), or will it be limited to (say) PowerShell?<p>Windows doesn&#x27;t have a good API for hosting a console--it&#x27;s not like Unix, where a pty has a master end and a slave end. Trying to run a console program in mintty.exe (<a href="https:&#x2F;&#x2F;github.com&#x2F;mintty&#x2F;mintty&#x2F;issues&#x2F;56" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;mintty&#x2F;mintty&#x2F;issues&#x2F;56</a>) or Cygwin SSHD fails for this reason. I wrote a tool, winpty, that makes a best-effort attempt to emulate a Unix pty master by scraping the console buffer, but it has some limitations, so I&#x27;m not sure Microsoft would want to use it. Maybe they would expand the console API?

Never was much of a windows fan, so a (slightly ignorant) question for someone who is a Win admin - can most administrative things nowadays be done via the command line on Windows (like we&#x27;ve been able to do in *nix land) or is there a gap between what can be done via the GUI vs the command line?

This is very goddamned awesome. All I hope is I can set the default user shell for my account. I already use msys2&#x27;s zsh for my shell (because I use zsh everywhere, on all OS), and being able to ssh into my Windows machine &#x27;normally&#x27; (for me, anyways) would be extremely useful.

I suggest making Update update, ie lower case, I was confused as to why Windows Update was getting ssh

The more things change..., from:<p><a href="https:&#x2F;&#x2F;github.com&#x2F;PowerShell&#x2F;Win32-OpenSSH&#x2F;wiki&#x2F;Deploy-Win32-OpenSSH" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;PowerShell&#x2F;Win32-OpenSSH&#x2F;wiki&#x2F;Deploy-Win3...</a><p>&quot;If you need key-based authentication:<p>Install key-auth package<p>run setup-ssh-lsa.cmd<p><i>reboot</i>&quot;<p>Reboot?<p>And this gem: &quot;SSH daemon needs to run as System to support key-based authentication&quot;.<p>Which means, either use weak authentication, or run the daemon as system. I don&#x27;t even understand why, it&#x27;s not like the public keys are particularly sensitive (certainly much less sensitive than being able to check passwords for validity)?

Very off topic - I thought that publically was a mis-spelling, but apparently it may be acceptable now!<p><a href="http:&#x2F;&#x2F;english.stackexchange.com&#x2F;questions&#x2F;45136&#x2F;difference-between-publicly-and-publically" rel="nofollow">http:&#x2F;&#x2F;english.stackexchange.com&#x2F;questions&#x2F;45136&#x2F;difference-...</a>

For those interested the source code is here: <a href="https:&#x2F;&#x2F;github.com&#x2F;PowerShell&#x2F;Win32-OpenSSH&#x2F;" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;PowerShell&#x2F;Win32-OpenSSH&#x2F;</a>

I am waiting the moment when I can throw away WinRM and SSH to all the servers.

I&#x27;m interested in how this is going to work in PowerShell with the way everything works now, if there happen to be any details about that (whether here, somewhere else, or a past link)?

It would be good if there was a good free terminal for Windows. The only option is putty.

This is exciting to hear.<p>I might be overly nitpicky, but holy inconsistent coding styles Batman: compare <a href="https:&#x2F;&#x2F;github.com&#x2F;PowerShell&#x2F;Win32-OpenSSH&#x2F;blob&#x2F;bafc1df7c5c15dbdd2e0c0112936a74d97d9f327&#x2F;contrib&#x2F;win32&#x2F;win32compat&#x2F;cng_cipher.c" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;PowerShell&#x2F;Win32-OpenSSH&#x2F;blob&#x2F;bafc1df7c5c...</a> to the other source files.

What&#x27;s the plan for supporting OpenSSH in the long run? Or is this just a one off port that will become stale after a few years?

I&#x27;ve been running OpenSSH on Windows servers for years, using Cygwin.

I&#x27;m a fan of Bitvise SSH for a Windows SSH server; it&#x27;s been enough to replace Terminal Services when each employee has their own work machine to remote desktop into.<p>It&#x27;s nice that Microsoft recognizes the need for this functionality; I wonder how they will approach the potential per-client licensing issues they like to bring up with their server OS&#x27;s.<p><a href="https:&#x2F;&#x2F;www.bitvise.com&#x2F;ssh-server" rel="nofollow">https:&#x2F;&#x2F;www.bitvise.com&#x2F;ssh-server</a>

Out of curiosity...why run this as a service?<p>EDIT: I misread this and though it was only a <i>client</i>. Geez. If it&#x27;s a server, then of course it should be a service.

A great openssh for windows for the time being. Being using this and it is great, only thing is not able to do powershell from it once connected to host.<p><a href="http:&#x2F;&#x2F;www.mls-software.com&#x2F;opensshd.html#botpage" rel="nofollow">http:&#x2F;&#x2F;www.mls-software.com&#x2F;opensshd.html#botpage</a>

I have had really good luck with this open source, native windows, ssh server. <a href="http:&#x2F;&#x2F;www.kpym.com&#x2F;2&#x2F;kpym&#x2F;index.htm" rel="nofollow">http:&#x2F;&#x2F;www.kpym.com&#x2F;2&#x2F;kpym&#x2F;index.htm</a> I have no affiliation with the project, i just thought i&#x27;d mention that it is a nice alternative i found.

That is great, i have tried some ssh servers for windows they have all been constantly crashing or not working with ssh keys.

Cool. Looks like Userify.com (SSH Key management) will support yet another platform sometime next year.<p>(disclaimer: I work there.)

Interesting, they&#x27;re still using MinGW. I wonder if they&#x27;ll ever get it to build under MSVC?

That&#x27;s a good engineering project. Lucky team working on it!

The comment submit button doesn&#x27;t even work in Safari. That must have taken some effort to break.