suSSHi OpenSSH Client Patches
It is very important to mention, that the provided OpenSSH client patches are not required in any way for the suSSHi Suite to work.
The patches are provided as a convenience for users who want to have a better experience when using OpenSSH with suSSHi, but they are not a requirement for suSSHi to work. You can use any SSH client you like, and suSSHi will work just fine.
The patches add the feature of setting the suSSHi gateway username and hostname in standard OpenSSH client configuration and patch the SFTP client to not disable Agent-Forwarding when connecting to a suSSHi Gateway. This allows users to use the standard OpenSSH client with suSSHi without having to worry about losing Agent-Forwarding functionality when connecting to a target requesting end-user key authentication via the suSSHi Gateway.
Overview
Applying the Patch
Download the portable OpenSSH version from www.openssh.com and untar the archive:
$ cd ~/Downloads $ tar xzvf openssh-9.8p1.tar.gz
Download the correct patch and place it in the same download folder.
Apply the patch:
$ cd openssh-9.8p1 $ patch < ../openssh-9.8p1-susshi.patch
Build OpenSSH with your preferred options:
$ ./configure --sysconfdir=/etc/ssh --prefix=/usr/local --with-pam $ make
The following files are affected by the patch and thus may replace the system installed ones:
scp
scp.1
sftp
sftp.1
ssh
ssh.1
ssh_config.5
If you prefer, you may also install the whole freshly compiled OpenSSH suite instead of the system provided:
$ sudo make install
Tip
On macOS you may have to install the brew package “openssl” upfront and append the option
--with-ssl-dir=/usr/local/opt/opensslwhen configuring OpenSSH:$ brew install openssl $ CFLAGS="-fzero-call-used-regs=all -ftrivial-auto-var-init=zero" \ ./configure --sysconfdir=/etc/ssh --prefix=/usr/local --with-pam --with-ssl-dir=/opt/homebrew/opt/openssl $ make $ sudo make install