		 Debiantelnet-sslؤѥå
 		(ECDSAؤбmacOSؤΰܿ)

							2025/10/12
							nide@ics.nara-wu.ac.jp

1. Ϥ

  Debian GNU/Linuxˤϡnetkit-telnetSSLб˲¤telnet-ssl
telnetd-sslȤѥåޤ⡼ȥȤSSHɸ
θߤˤäƤϡϤ٤ʴϤޤԤDebianκǿ
trixieˤƤ⡢ȯȤϸ񤤤ΤΤޤݼϤƤ褦Ǥ
  telnetd-sslθ(2025/10/10)ǤηȤơtelnetdϥ
оΰŹ沽RSAˤбƤޤ󡣾ECDSASSL
³telnetd顼ФƤޤޤ
  ǡtelnetd-sslơоΰŹ沽RSAǤʤ
ˤб뤳Ȥʤ1ŪǤ
  ޤ2ŪϡDebiantelnet-ssltelnetd-sslmacOSǤ⥳
ѥ뤷ư褦ˤ뤳ȤǤ

  ʤϡDebian trixietelnet-ssltelnetd-sslѥå(2Ĥ
϶)ΡǤκǿС 0.17.41+really0.17-6 Ф
ѥåǤѥå

	(1) telnet-ssl-0.17.41+really0.17-6.local-patch
	(2) telnet-ssl-0.17.41+really0.17-6.macos-local-patch

2Ĥʤꡢ(1)RSAʳξؤбѡ(2)macOSؤбѤǤ
DebianǻȤ(1)Τ߻ȤޤmacOSǻȤϡ(1)Ƥ(2)
Ȥޤ(2)ñȤǤϻȤޤ
  trixieʳ(bookwormʤ)DebianľܻȤ褦ˤϺäƤޤ󤬡
ѥå򾯡ľ뤳Ȥǡ¾СDebianǤⲼ2.ȤۤƱͤ
ǻȤ뤫Ȼפޤ
  ʤpublic domainȤޤ(󡢥ѥåƤtelnet(d)-sslˤ
Ƥϰ³ꥸʥΥ饤󥹤ޤ)


2. DebianǤλȤ

  Debian trixieˤơapt-get source telnetd-ssl telnetd-sslΥ
嵭1.(1)ΥѥåƤޤǥѰդϴǤȤ
ŬѥʤꡢDebianѥåκʤԤޤѥ
ʤŵŪʼϡnetkit-telnet-ssl-0.17.41+really0.17 cd

	debian/rules build

Ȥ뤳ȤˤʤǤ礦ǤǤäin.telnetd (obj-x86_64-linux-
gnu/telnetd ǥ쥯ȥ˺ޤ)ϡоRSAǤʤƤư
ΤˤʤäƤޤȤϤ򡢴˥󥹥ȡ뤵Ƥtelnetd-
sslѥå/usr/sbin/in.telnetd˾񤭤нλǤ뤤ϡ
debuildʤɤǥѥåѤtelnetd-sslDebianѥåƤ饤
ȡ뤹⤢Ǥ礦
  ѥ뤹telnet-sslΥ饤Ȥޤ(ʥѥ
ˤ⡢ѥηٹб뤿telnet-ssl饤ȤؤΥѥå
ޤޤƤޤ)in.telnetd(telnetd-sslѥå)ؤ
­ޤ


3. macOSǤλȤ

  ޤDebiantelnetd-sslΥꤹɬפޤDebianδĶ
С嵭Ʊͤapt-get source telnetd-sslǼơMac¦
˻äƤФΤǤDebianδĶʤϡźդΥ륹
ץ src-download-on-macos.sh ¹ԤФۤƱΤȤǤ褦ˤ
ƤޤDebiantelnetd-sslΥѥå졢С
ѤäϡΥץȤϽľɬפޤ
  ˾嵭1.(1), (2)νǥѥåƤޤ netkit-telnet-
ssl-0.17.41+really0.17 cd

	rm VERSION
	cmake .
	make
	sudo make install

ǥ󥹥ȡޤǤϤǤޤ/usr/local/bin/telnetroot:wheel 755ǡ
/usr/local/sbin/in.telnetdroot:wheel 755ǡ/usr/local/lib/telnetlogin
root:daemon 4754ǺޤǽVERSIONեrmǺƤ
ʤȡmake̤ޤ

  󥹥ȡ뤬λ顢󥹥ȡ뤷in.telnetdư褦ˤ
ȡо֤ɬפǤin.telnetdưʤϡ(㤨Mac
Ports)inetdȤʤɡŬǲMacPortsinetd (inetutils
ѥåˤޤ)Ȥ(inetdΤΤϴdaemondoʤɤ鵯
ưߤȤ)/opt/local/etc/inetd.conf 㤨

	telnet stream tcp nowait nobody:daemon (ƱԤ³)
	  /usr/local/sbin/in.telnetd in.telnetd -z secure

Ƚ񤤤inetdƵưФ褤Ǥ(-z secureդƤȡSSLǤ³
ޤ)뤤ϡin.telnetdinetdľܵΤǤʤtcpd
ͳƵΤ褤Ǥ礦³¤ʤɤŬԤäƲ
ʤSequoiaʹߤǤϡ³˻Ȥ륵(ˤäin.telnetdΤ
äinetdätcpdä)Фơsocketfilterfw³Ĥ
ɬפޤŪˤ㤨(inetdȤ)

	/usr/libexec/ApplicationFirewall/socketfilterfw (ƱԤ³)
	  --add /opt/local/libexec/ginetd

Τ褦ˤƤ顢inetdƵưޤ
  ϡ餫μʤǼѤߤΤΤФȤäƤ褤
ʾǤ褱㤨

  openssl req -new -x509 -nodes -out XXX.pem -keyout XXX.pem -days 3650 

Τ褦ˤƤޤѰդϡ/usr/local/etc/telnetd-ssl/
telnetd.pemroot:demon 640֤ޤ
