Subj : Re: Anonymous SSH login
To : acn
From : Fusion
Date : Mon Mar 22 2021 07:13 am
Re: Re: Anonymous SSH login
By: acn to Alpha on Mon Mar 22 2021 11:04 am
ac> 1.
ac> I would have to explore how a guest login/"new user login" etc. could be
ac> accomplished to make it look "normal".
not related directly to your post per se. but i set up stunnel today for "telnet/ssl" .. basically accepts the ssl connection on port 992 and forwards it to port 23 locally. i know of one client that supports this, which is ZOC (and it costs money..) but it works perfectly. it also doesn't do anything special with auth like SSH does, so it connects and displays text immediately like you'd expect of a bbs.
that said, ZOC at least didn't mention anything about the certificate. i might dig around in there to see if there's any info. so for at least off the top of my head the only way to verify the certificate is via using the openssl command:
openssl s_client -connect <host>:992
if anyone wanted to verify certificates they would need to check the hostname and match the certificates from the server to a local certificate store..
free certificates can be had from letsencrypt so that's not really a problem, or i'm assuming just something like "trust this certificate" on first login would suffice for most people..