replace dropbear with openssh-server #5

New Issue

PeterSurda · 2023-01-24T04:55:50Z

PeterSurda commented

2023-01-24 04:55:50 +00:00

dropbear doesn't support ed25519 keys for example

lee.miller was assigned by PeterSurda

2023-01-24 06:24:41 +00:00

lee.miller commented

2023-01-24 22:40:46 +00:00

make menuconfig disagrees:

  │ ┌─────────────────────────────────────────────────────────────────────┐ │  
  │ │    [*] Curve25519 support                                           │ │  
  │ │    [ ] Elliptic curve cryptography (ECC)                            │ │  
  │ │    [*] Ed25519 support                                              │ │  
  │ │    [*] Chacha20-Poly1305 support                                    │ │  
  │ │    [ ] Enable compression                                           │ │  
  │ │    [*] Build dropbear with dbclient                                 │ │  
  │ │    [*]   Enable agent forwarding in dbclient                        │ │  
  │ │    [*] Build dropbear with scp                                      │ │  
  │ │    [ ] Enable askpass helper support                                │ │  
  │ │    [*] Enable agent forwarding                                      │ │

$ grep DROPBE .config
CONFIG_DROPBEAR_CURVE25519=y
# CONFIG_DROPBEAR_ECC is not set
CONFIG_DROPBEAR_ED25519=y
...

`make menuconfig` disagrees: ``` │ ┌─────────────────────────────────────────────────────────────────────┐ │ │ │ [*] Curve25519 support │ │ │ │ [ ] Elliptic curve cryptography (ECC) │ │ │ │ [*] Ed25519 support │ │ │ │ [*] Chacha20-Poly1305 support │ │ │ │ [ ] Enable compression │ │ │ │ [*] Build dropbear with dbclient │ │ │ │ [*] Enable agent forwarding in dbclient │ │ │ │ [*] Build dropbear with scp │ │ │ │ [ ] Enable askpass helper support │ │ │ │ [*] Enable agent forwarding │ │ ``` ``` $ grep DROPBE .config CONFIG_DROPBEAR_CURVE25519=y # CONFIG_DROPBEAR_ECC is not set CONFIG_DROPBEAR_ED25519=y ... ```

lee.miller referenced this issue

2023-01-25 09:09:13 +00:00

Try to replace dropbear by openssh-server using imagebuilder #9

PeterSurda commented

2023-02-14 11:01:05 +00:00

regarding ed25519, maybe it's been upgraded since I last used it, I remember it didn't work on older versions of openwrt. maybe I should retest it and revert to dropbear then.

PeterSurda self-assigned this 2023-02-14 11:01:13 +00:00

lee.miller closed this issue

2023-02-23 15:50:49 +00:00

lee.miller commented

2023-02-23 20:56:19 +00:00

In 85c081d you might remove DISABLED_SERVICES="dropbear" instead of /sbin/service dropbear enable.

In 85c081d you might remove [DISABLED_SERVICES="dropbear"](https://git.bitmessage.org/Sysdeploy/openwrt/src/branch/main/.buildbot/openwrt/build.sh#L96) instead of `/sbin/service dropbear enable`.

Sign in to join this conversation.

No Label

No Milestone

No project

No Assignees

2 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Sysdeploy/openwrt#5

replace dropbear with openssh-server #5

replace `dropbear` with `openssh-server` #5