How is OpenSSL related to OpenSSH?

Question

Is OpenSSH using OpenSSL to encrypt traffic? Or something else?

This is not strictly a duplicate, however this earlier question is probably relevant to help explain the concepts. http://security.stackexchange.com/questions/1599/what-is-the-difference-between-ssl-vs-ssh-which-is-more-secure — , Apr 29 '11 at 23:01

score 26 · Accepted Answer · answered Apr 28 '11 at 23:16

26

OpenSSH is a program depending on OpenSSL the library, specifically OpenSSH uses the libcrypto part of OpenSSL.

answered Apr 28 '11 at 23:16

Bruno Rohée

14

It's worth mentioning that OpenSSH does not use the TLS protocol thats used for HTTPS etc. OpenSSH uses some of the OpenSSL cryptographic primatives. – JasperWallace Apr 22 '14 at 08:04

Ciro Santilli OurBigBook.com · Answer 2 · 2016-06-22T06:18:05.963

6

OpenSSH can be compiled without OpenSSL since 2014:

The author stated that this was in the making for a long time, but Heartbleed was likely the last straw.

edited Jun 22 '16 at 06:18

answered Dec 05 '14 at 12:11

2 Answers2