[Info-vax] SSH from VMS to 3Par

[Stephen Hoffman]

On 2021-10-11 13:36:02 +0000, pcoviello at gmail.com said:

> Steve, VSI's response was they were at the standard and 3Par was above. 
> there is a SSH patch in test right now.

The nice thing about standards is that there are so many to choose 
from, as the joke goes.

OpenVMS ssh has been reactive and not proactive for the last decade or 
two, and—prior to the OpenSSH work presently underway—updates are 
implemented only after something breaks.

Both KEX and Cipher lists have previously caused ssh outages as other 
major platforms have updated their requirements. MAC breakage was 
near-inevitable.

SSL/TLS support has been following a similarly reactive update pattern, 
both within OpenVMS, and within the Apache HTTP server SSL/TLS support.

I expect VSI SSL300 will become available within the next ~two years 
for instance, and hopefully sooner.

Make no mistake: maintaining an operating system is a large effort, and 
maintaining compatibility yet larger, and implementing 
feature-competitiveness far larger still.

> ...the reason I need access is that I'm running Cache on here and I 
> freeze my DB's and take snapshots then thaw out the DB's and mount the 
> snaps and then do the backups.

That much was obvious. For now and pending MAC updates and/or OpenSSH 
port availability, maybe setting up certificates and HTTPS and cURL, or 
a rather precarious trip through some other platform and ssh client. 
Though I haven't looked at remote-automation options available for 
3PAR. HPE tends to like web management interfaces and RedFish DMTF 
"RESTful" interfaces, too. OpenVMS hasn't done much in that area.



-- 
Pure Personal Opinion | HoffmanLabs LLC