comparison README @ 874:68e2a0f6c1ef

Update README
author Matt Johnston <matt@ucc.asn.au>
date Tue, 03 Dec 2013 21:03:23 +0800
parents f8b28a3de6cb
children 8bc704f417f3
comparison
equal deleted inserted replaced
873:17b15683648d 874:68e2a0f6c1ef
40 If you have an OpenSSH-style private key ~/.ssh/id_rsa, you need to do: 40 If you have an OpenSSH-style private key ~/.ssh/id_rsa, you need to do:
41 41
42 dropbearconvert openssh dropbear ~/.ssh/id_rsa ~/.ssh/id_rsa.db 42 dropbearconvert openssh dropbear ~/.ssh/id_rsa ~/.ssh/id_rsa.db
43 dbclient -i ~/.ssh/id_rsa.db <hostname> 43 dbclient -i ~/.ssh/id_rsa.db <hostname>
44 44
45 Currently encrypted keys aren't supported, neither is agent forwarding. At some 45 Dropbear does not support encrypted hostkeys though can connect to ssh-agent.
46 stage both hopefully will be.
47 46
48 ============================================================================ 47 ============================================================================
49 48
50 If you want to get the public-key portion of a Dropbear private key, look at 49 If you want to get the public-key portion of a Dropbear private key, look at
51 dropbearkey's '-y' option. 50 dropbearkey's '-y' option.
52 51
53 ============================================================================ 52 ============================================================================
54 53
55 To run the server, you need to generate server keys, this is one-off: 54 To run the server, you need to server keys, this is one-off:
56 ./dropbearkey -t rsa -f dropbear_rsa_host_key 55 ./dropbearkey -t rsa -f dropbear_rsa_host_key
57 ./dropbearkey -t dss -f dropbear_dss_host_key 56 ./dropbearkey -t dss -f dropbear_dss_host_key
57 ./dropbearkey -t ecdsa -f dropbear_dss_host_key
58 58
59 or alternatively convert OpenSSH keys to Dropbear: 59 or alternatively convert OpenSSH keys to Dropbear:
60 ./dropbearconvert openssh dropbear /etc/ssh/ssh_host_dsa_key dropbear_dss_host_key 60 ./dropbearconvert openssh dropbear /etc/ssh/ssh_host_dsa_key dropbear_dss_host_key
61
62 You can also get Dropbear to create keys when the first connection is made -
63 this is preferable to generating keys when the system boots. Make sure
64 /etc/dropbear/ exists and then pass '-R' to the dropbear server.
61 65
62 ============================================================================ 66 ============================================================================
63 67
64 If the server is run as non-root, you most likely won't be able to allocate a 68 If the server is run as non-root, you most likely won't be able to allocate a
65 pty, and you cannot login as any user other than that running the daemon 69 pty, and you cannot login as any user other than that running the daemon