Background Process of SSH and Telnet

Lakshmana

What is the background process of SSH and Telnet?
How the machines are coonected by the SSH?

scottalanmiller

I do not understand the question. SSH and Telnet are not related. The background process of SSH is the SSH Dæmon.

scottalanmiller

How the machines are coonected by the SSH?

SSH itself is how they connect. SSH is a shell that communicates over a dedicated OpenSSL tunnel, basically a single application VPN.

Lakshmana

The server or any machine able to access through the SSH or telnet.
What is OpenSSL Tunnel and how it is working?

Lakshmana

@Lakshmana said:

What is OpenSSL Tunnel and how it is working?

How the process carried to take the SSH of the machine.??

scottalanmiller

@Lakshmana said:

What is OpenSSL Tunnel and how it is working?

It is an application specific VPN. Identical to the OpenSSL tunnel used in a secure website (HTTP + OpenSSL Tunnel becomes HTTPS.)

scottalanmiller

@Lakshmana said:

The server or any machine able to access through the SSH or telnet.

I don't understand this statement. Is it a question?

scottalanmiller

@Lakshmana said:

How the process carried to take the SSH of the machine.??

Over SSH. SSH itself is the communications protocol.

Lakshmana

How to find about OpenSSL Vulnerability in a server or ssh?

scottalanmiller

@Lakshmana said:

How to find about OpenSSL Vulnerability in a server or ssh?

I'm not sure what you mean? Just follow the news like any vulnerability concerns.

Lakshmana

OK.I understood

scottalanmiller

If you are regularly patching your systems and using an up to date enterprise OS, this should not be of serious concern. Even the biggest issues ever in OpenSSH were patched the same day that they were found and provided to the enterprise OS vendors the same day. If you had, for example, a standard weekly patch cycle on CentOS you would have been patched between zero and six days after the vulnerability was found, with an average of three days, without needing to even be aware of the issue.

To patch OpenSSL on CentOS, for example, is just this command:

yum -y update openssl

And, of course, requires no restart. So even if you needed to manually patch it, you could do that hourly through a script if you had a serious concern or anytime manually.