comparison dropbear.8 @ 1533:2e9b6d9c7e7d

clarify that -r skips default hostkeys
author Matt Johnston <matt@ucc.asn.au>
date Thu, 22 Feb 2018 21:57:47 +0800
parents a3a96dbf9a58
children d32bcb5c557d
comparison
equal deleted inserted replaced
1532:3616ec41d03d 1533:2e9b6d9c7e7d
146 Host Key Files 146 Host Key Files
147 147
148 Host key files are read at startup from a standard location, by default 148 Host key files are read at startup from a standard location, by default
149 /etc/dropbear/dropbear_dss_host_key, /etc/dropbear/dropbear_rsa_host_key, and 149 /etc/dropbear/dropbear_dss_host_key, /etc/dropbear/dropbear_rsa_host_key, and
150 /etc/dropbear/dropbear_ecdsa_host_key 150 /etc/dropbear/dropbear_ecdsa_host_key
151 or specified on the commandline with -r. These are of the form generated 151
152 by dropbearkey. The -R option can be used to automatically generate keys 152 If the -r command line option is specified the default files are not loaded.
153 Host key files are of the form generated by dropbearkey.
154 The -R option can be used to automatically generate keys
153 in the default location - keys will be generated after startup when the first 155 in the default location - keys will be generated after startup when the first
154 connection is established. This had the benefit that the system /dev/urandom 156 connection is established. This had the benefit that the system /dev/urandom
155 random number source has a better chance of being securely seeded. 157 random number source has a better chance of being securely seeded.
156 158
157 .TP 159 .TP