.TH SSH 1.SH NAMEssh \- ssh client.SH SYNOPSIS.B ssh[.B -d] [.B -t|.B -T.I term] [.B -A.I auth-methods] [.B -e.I enc-algs] [.B -m.I mac-algs] [.B -K.I kex-algs] [.B -H.I hostkey-algs] [.B -C.I compr-algs] [.B -k.I keyspec] [.B -s].I [user@]addr.I [cmd].br.B auth/sshkeys.SH DESCRIPTION.B Sshconnects to the ssh server at.I addrand executes a shell, command or ``subystem'' (internal program),connecting the local standard input, output and error to those ofthe program executed.Only version 2 of the protocol is supported.The.I username to log in as is optional, it is used by RSA and DSA publickey authentication, to select keys from.IR factotum (4). .PP.B Sshasks.B sshkeyswhether the host key sent by.I addris acceptable..B Sshkeys serves the file.I /chan/sshkeysto which.B sshwrites requests consisting of four quoted strings:.IR address ,.IR algorithm ,.I fingerprintand.IR "host key" .If the host key is acceptable, the write is returned with success, otherwise with an error..B Sshkeyslooks up the host key in.IR $home/lib/sshkeys ,prompting the user in case the address is new or the host keyconflicts with an existing entry.  It can optionally update thefile with keys.  If.B sshkeysis not running,.B sshwill read the $home/lib/sshkeysfile directly, only allowing the host key if an exact match is found..B Sshkeysis normally started from.IR $home/lib/wmsetup . .PPIf a pseudo terminal was allocated, i.e..B -tor.B -Twas specified,.I sshreads events from the file.BR /dev/termctl ,as served by.IR novt (1)..I Sshaccepts the ``dimensions'' and ``break'' control messages, and forwards them in appropriate form to the ssh server. .SS Options.TP.B -dPrint debugging messages.  A second option prints even more..TP.B -tRequest pseudo tty allocation from remote server.  The terminaltype is set to ``ansi''..TP.BI -T " term"Like.BR -t ,but sets the terminal type to.IR term ..TP.BI -A " auth-methods"Set the acceptable authentication methods.  Must be a comma separatedlist of methods, in order of preference.  Supported methods:.I publickeyand.IR password ..brDefault:.IR publickey,password ..TP.BI -e " enc-algs"Set comma separated, ordered list of acceptable encryption methods:.IR aes128-cbc ,.IR aes192-cbc ,.IR aes256-cbc ,.IR arcfour ,.IR aes128-ctr ,.IR aes192-ctr ,.IR aes256-ctr ,.IR arcfour128 ,.IR arcfour256 ,.IR 3des-cbc ..brDefault: .IR aes128-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr,arcfour128,arcfour256,arcfour,3des-cbc ..TP.BI -m " mac-algs"Set comma separated, ordered list of acceptable MAC algorithms:.IR hmac-sha1 ,.IR hmac-sha1-96 ,.IR hmac-md5 ,.IR hmac-md5-96 ..brDefault:.IR hmac-sha1-96,hmac-sha1,hmac-md5,hmac-md5-96 ..TP.BI -K " kex-algs"Set comma separated, ordered list of acceptable key exchange algorithms:.IR diffie-hellman-group1-sha1 ,.IR diffie-hellman-group14-sha1 ,.IR diffie-hellman-group-exchange-sha1 ,.brDefault:.IR diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 ..TP.BI -H " hostkey-algs"Set comma separated, ordered list of acceptable host key verificationalgorithms:.IR ssh-dss ,.IR ssh-rsa ..brDefault:.IR ssh-rsa,ssh-dss ..TP.BI -C " compr-algs"Set comma separated, ordered list of acceptable compression algorithms:.IR none ..brDefault:.IR none ..TP.BI -k " keyspec"Pass extra parameters.I keyspecto the requests to.IR factotum (4)..TP.B -sAsk server to start a ``subsystem'' instead of a normal program.The name of the subsystem to start is.I cmd ,so the second parameter must be present.A commonly used subsystem is.IR sftp ..SH FILES.B /chan/sshkeys.br.B $home/lib/sshkeys.SH SOURCE.B /appl/cmd/ssh.b.br.B /appl/lib/sshlib.m.br.B /appl/lib/sshlib.b.SH SEE ALSO.IR novt (1),.IR sftpfs (4),.IR factotum (4)..SH BUGSCompression is not supported.  It requires a deflate library that can flush its output at command.