[Request - Product] OpenSSH

[adriens]

❔ About

This first draft is an attempt to fix:

• [Request - Product] OpenSSH #4603

🔗 Related ressources

• I used the following page to put releases : https://www.openssh.com/openbsd.html
• OpenBSD Errata and Patches
• ReleaseNotes : https://www.openssh.com/releasenotes.html
• Github repo candidate for automation : https://github.com/openssh/openssh-portable
• https://www.openssh.com/security.html

[adriens]

ℹ️ I've added release links

[adriens]

Hi guys, is anything missing on this PR ?

[marcwrobel]

Some time to review it ;)

[adriens]

Thanks for the feedback @marcwrobel 🙏

[marcwrobel]

@adriens, the support policy is entirely missing. In my opinion there is not much value in adding this page without this.

Moreover very old releases, such as 1 (last update 2000) are still marked as maintained. This can't be.

[adriens]

Hi @marcwrobel thanks a lot for reviewing the PR

@adriens, the support policy is entirely missing.

You mean the url that points the official one ?

In my opinion there is not much value in adding this page without this.

Totally agree with you.

Moreover very old releases, such as 1 (last update 2000) are still marked as maintained. This can't be.

i'm looking for fixing it ⚡

[adriens]

As per "Open SSH End-of-Life Schedule?" thread :

We don't do major releases or minor versions, and we don't offer support
for any version*. We just fix bugs, add requested features and note
incompatibilities (almost always minor) that arise as we go.

Every now and then we'll make a change that causes some incompatibility,
e.g. killing ssh1 or deprecating weak crypto. We tend to announce these
years in advance to give people a chance to act.

The most interesting thing is :

"I mean, you can report a bug in any version and we'll look it it and try
to fix it if it is still present, but there's no LTS-like version where
we collect these bugfixes."

[adriens]

So :

• No LTS
• No EOL

[adriens]

Moreover very old releases, such as 1 (last update 2000) are still marked as maintained. This can't be.

I did this beacause of Open SSH End-of-Life Schedule? thread :

I was not able to find better schedule data 😓

[adriens]

We cannot drop them any issue nor discussion :

[adriens]

💡 I could use OpenSSH Removes SSHv1 Support :

In practical terms this means that starting with OpenBSD-current and snapshots as they will be very soon (and further down the road OpenBSD 6.2 with OpenSSH 7.6), the arcane options you used with ssh to connect to some end-of-life gear in a derelict data centre you don't want to visit anymore will no longer work and you will be forced do the reasonable thing. Upgrade.

[adriens]

WOuld it make sense to flag pre 7.6 all as eol @marcwrobel ?