annotate dropbearconvert.1 @ 1861:2b3a8026a6ce

Add re-exec for server This allows ASLR to re-randomize the address space for every connection, preventing some vulnerabilities from being exploitable by repeated probing. Overhead (memory and time) is yet to be confirmed. At present this is only enabled on Linux. Other BSD platforms with fexecve() would probably also work though have not been tested.
author Matt Johnston <matt@ucc.asn.au>
date Sun, 30 Jan 2022 10:14:56 +0800
parents 80cacacfec23
children 863f31b4cf3c
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
820
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
1 .TH dropbearconvert 1
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
2 .SH NAME
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
3 dropbearconvert \- convert between Dropbear and OpenSSH private key formats
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
4 .SH SYNOPSIS
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
5 .B dropbearconvert
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
6 .I input_type
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
7 .I output_type
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
8 .I input_file
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
9 .I output_file
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
10 .SH DESCRIPTION
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
11 .B Dropbear
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
12 and
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
13 .B OpenSSH
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
14 SSH implementations have different private key formats.
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
15 .B dropbearconvert
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
16 can convert between the two.
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
17 .P
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
18 Dropbear uses the same SSH public key format as OpenSSH, it can be extracted
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
19 from a private key by using
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
20 .B dropbearkey \-y
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
21 .P
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
22 Encrypted private keys are not supported, use ssh-keygen(1) to decrypt them
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
23 first.
1174
80cacacfec23 Fix minor manpage formatting issues
Guilhem Moulin <guilhem@fripost.org>
parents: 999
diff changeset
24 .SH ARGUMENTS
820
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
25 .TP
1174
80cacacfec23 Fix minor manpage formatting issues
Guilhem Moulin <guilhem@fripost.org>
parents: 999
diff changeset
26 .I input_type
820
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
27 Either
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
28 .I dropbear
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
29 or
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
30 .I openssh
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
31 .TP
1174
80cacacfec23 Fix minor manpage formatting issues
Guilhem Moulin <guilhem@fripost.org>
parents: 999
diff changeset
32 .I output_type
820
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
33 Either
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
34 .I dropbear
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
35 or
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
36 .I openssh
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
37 .TP
1174
80cacacfec23 Fix minor manpage formatting issues
Guilhem Moulin <guilhem@fripost.org>
parents: 999
diff changeset
38 .I input_file
820
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
39 An existing Dropbear or OpenSSH private key file
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
40 .TP
1174
80cacacfec23 Fix minor manpage formatting issues
Guilhem Moulin <guilhem@fripost.org>
parents: 999
diff changeset
41 .I output_file
999
295a08e9d07e Document ~/.ssh/id_dropbear
Matt Johnston <matt@ucc.asn.au>
parents: 820
diff changeset
42 The path to write the converted private key file. For client authentication ~/.ssh/id_dropbear is loaded by default
820
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
43 .SH EXAMPLE
999
295a08e9d07e Document ~/.ssh/id_dropbear
Matt Johnston <matt@ucc.asn.au>
parents: 820
diff changeset
44 # dropbearconvert openssh dropbear ~/.ssh/id_rsa ~/.ssh/id_dropbear
820
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
45 .SH AUTHOR
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
46 Matt Johnston ([email protected]).
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
47 .SH SEE ALSO
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
48 dropbearkey(1), ssh-keygen(1)
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
49 .P
830fae485d40 Add manpage for dropbearconvert
Matt Johnston <matt@ucc.asn.au>
parents:
diff changeset
50 https://matt.ucc.asn.au/dropbear/dropbear.html