Go to file
Matt Johnston 403c18a300 Dropbearkey can now print out pubkey portions
--HG--
extra : convert_revision : 2d897b12ba8710efe0b042b36b1fd31b2469eb15
2004-08-14 17:35:28 +00:00
debian Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
agentfwd.h Mostly done with the listener changeover 2004-06-03 17:22:48 +00:00
algo.h snapshot of stuff 2004-07-26 02:44:20 +00:00
atomicio.c get rid of the substitution... We want a fixed identifier 2004-07-30 11:27:52 +00:00
atomicio.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
auth.h - client pubkey auth works 2004-08-06 16:18:01 +00:00
bignum.c Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
bignum.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
buffer.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
buffer.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
CHANGES Simple text changes 2004-08-12 15:41:36 +00:00
channel.h Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
chansession.h added window-size change handling 2004-08-01 09:41:37 +00:00
cli-algo.c snapshot of stuff 2004-07-26 02:44:20 +00:00
cli-auth.c cleaning up the pubkey defines 2004-08-12 14:56:22 +00:00
cli-authpasswd.c cleaning up the pubkey defines 2004-08-12 14:56:22 +00:00
cli-authpubkey.c cleaning up the pubkey defines 2004-08-12 14:56:22 +00:00
cli-chansession.c Write the correct termcodes length 2004-08-09 08:18:37 +00:00
cli-kex.c add new entries to known_hosts 2004-08-09 08:06:57 +00:00
cli-main.c - Added terminal mode handling etc for the client, and window change 2004-08-01 08:54:01 +00:00
cli-runopts.c cleaning up the pubkey defines 2004-08-12 14:56:22 +00:00
cli-service.c Pubkey auth is mostly there for the client. Something strange with 2004-08-03 17:26:56 +00:00
cli-session.c cleaning up the pubkey defines 2004-08-12 14:56:22 +00:00
cli-tcpfwd.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
common-algo.c Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
common-channel.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
common-chansession.c Chantype handling is sorted 2004-06-02 04:59:49 +00:00
common-kex.c Handle differing c2s and s2c algorithms properly 2004-07-29 15:43:26 +00:00
common-runopts.c - client pubkey auth works 2004-08-06 16:18:01 +00:00
common-session.c added window-size change handling 2004-08-01 09:41:37 +00:00
compat.c Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
compat.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
config.guess Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
config.sub Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
configure.in Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
dbmulti.c Progressing client support 2004-07-27 16:30:46 +00:00
dbutil.c Dropbearkey can now print out pubkey portions 2004-08-14 17:35:28 +00:00
dbutil.h just checkpointing 2004-08-10 17:09:52 +00:00
debug.h - client pubkey auth works 2004-08-06 16:18:01 +00:00
dropbearconvert.c Dropbearkey can now print out pubkey portions 2004-08-14 17:35:28 +00:00
dropbearkey.c Dropbearkey can now print out pubkey portions 2004-08-14 17:35:28 +00:00
dss.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
dss.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
fake-rfc2553.c fake-rfc stuff 2004-08-12 14:39:17 +00:00
fake-rfc2553.h fake-rfc stuff 2004-08-12 14:39:17 +00:00
filelist.txt Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
gendss.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
gendss.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
genrsa.c Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
genrsa.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
includes.h Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
INSTALL Some doc changes 2004-08-13 10:58:51 +00:00
install-sh Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
kex.h Progressing client support 2004-07-27 16:30:46 +00:00
keyimport.c Dropbearkey can now print out pubkey portions 2004-08-14 17:35:28 +00:00
keyimport.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
LICENSE Simple text changes 2004-08-12 15:41:36 +00:00
listener.c - A nice cleaner structure for tcp (acceptor) forwarding. 2004-08-11 17:26:47 +00:00
listener.h - A nice cleaner structure for tcp (acceptor) forwarding. 2004-08-11 17:26:47 +00:00
loginrec.c get rid of the substitution... We want a fixed identifier 2004-07-30 11:27:52 +00:00
loginrec.h get rid of the substitution... We want a fixed identifier 2004-07-30 11:27:52 +00:00
Makefile.in Dropbearkey can now print out pubkey portions 2004-08-14 17:35:28 +00:00
MULTI Some doc changes 2004-08-13 10:58:51 +00:00
options.h adding inetd mode back from 0.43 2004-08-12 17:18:53 +00:00
packet.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
packet.h merge of abac2150ee4f4031a98016241fbd136d24fed127 2004-06-23 07:14:16 +00:00
process-packet.c Remove some unused commented-out code 2004-08-01 11:02:44 +00:00
progressmeter.c get rid of the substitution... We want a fixed identifier 2004-07-30 11:27:52 +00:00
progressmeter.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
queue.c Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
queue.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
random.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
random.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
README Some doc changes 2004-08-13 10:58:51 +00:00
rsa.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
rsa.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
runopts.h adding inetd mode back from 0.43 2004-08-12 17:18:53 +00:00
scp.c Progressing client support 2004-07-27 16:30:46 +00:00
scpmisc.c get rid of the substitution... We want a fixed identifier 2004-07-30 11:27:52 +00:00
scpmisc.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
service.h Client mostly works up to password auth 2004-07-28 16:44:16 +00:00
session.h TCP forwarding works. 2004-08-12 13:48:42 +00:00
signkey.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
signkey.h - Hostkey checking is mostly there, just aren't appending yet. 2004-08-08 16:17:05 +00:00
SMALL Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
ssh.h merge of abac2150ee4f4031a98016241fbd136d24fed127 2004-06-23 07:14:16 +00:00
sshpty.c get rid of the substitution... We want a fixed identifier 2004-07-30 11:27:52 +00:00
sshpty.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
svr-agentfwd.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
svr-algo.c snapshot of stuff 2004-07-26 02:44:20 +00:00
svr-auth.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
svr-authpasswd.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
svr-authpubkey.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
svr-chansession.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
svr-kex.c snapshot of stuff 2004-07-26 02:44:20 +00:00
svr-main.c adding inetd mode back from 0.43 2004-08-12 17:18:53 +00:00
svr-runopts.c adding inetd mode back from 0.43 2004-08-12 17:18:53 +00:00
svr-service.c Progressing client support 2004-07-27 16:30:46 +00:00
svr-session.c cleaning up the pubkey defines 2004-08-12 14:56:22 +00:00
svr-tcpfwd.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
svr-x11fwd.c Merging in the changes from 0.41-0.43 main Dropbear tree 2004-08-12 16:41:58 +00:00
tcp-accept.c Oops, forgot to call the actual code. 2004-08-12 13:54:31 +00:00
tcpfwd.h TCP forwarding works. 2004-08-12 13:48:42 +00:00
termcodes.c Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
termcodes.h Makefile.in contains updated files required 2004-06-01 02:46:09 +00:00
TODO Simple text changes 2004-08-12 15:41:36 +00:00
x11fwd.h Fixed stupid agentfwd error (using the listening FD, not the accepted on. gah) 2004-06-03 18:08:34 +00:00

This is Dropbear, a smallish SSH 2 server and client.

INSTALL has compilation instructions.

MULTI has instructions on making a multi-purpose binary (ie a single binary
which performs multiple tasks, to save disk space)

SMALL has some tips on creating small binaries.

See TODO for a few of the things I know need looking at, and please contact
me if you have any questions/bugs found/features/ideas/comments etc :)

Matt Johnston
matt@ucc.asn.au

============================================================================

Public key auth:

You can use ~/.ssh/authorized_keys in the same way as with OpenSSH, just put
the key entries in that file. They should be of the form:

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwVa6M6cGVmUcLl2cFzkxEoJd06Ub4bVDsYrWvXhvUV+ZAM9uGuewZBDoAqNKJxoIn0Hyd0Nk/yU99UVv6NWV/5YSHtnf35LKds56j7cuzoQpFIdjNwdxAN0PCET/MG8qyskG/2IE2DPNIaJ3Wy+Ws4IZEgdJgPlTYUBWWtCWOGc= someone@hostname

You must make sure that ~/.ssh, and the key file, are only writable by the
user.

NOTE: Dropbear ignores authorized_keys options such as those described in the
OpenSSH sshd manpage, and will not allow a login for these keys. 

To run the server, you need to generate server keys, this is one-off:
./dropbearkey -t rsa -f dropbear_rsa_host_key
./dropbearkey -t dss -f dropbear_dss_host_key

or alternatively convert OpenSSH keys to Dropbear:
./dropbearconvert openssh dropbear /etc/ssh/ssh_host_dsa_key dropbear_dss_host_key

And you can now run the server.
./dropbear

or './dropbear -h' to get options.

If the server is run as non-root, you most likely won't be able to allocate a
pty, and you cannot login as any user other than that running the daemon
(obviously). Shadow passwords will also be unusable as non-root.

The Dropbear distribution includes a standalone version of OpenSSH's scp
program. You can compile it with "make scp", you may want to change the path
of the ssh binary, specified near the top of the scp.c file. By default
the progress meter isn't compiled in to save space, you can enable it with
"make scp-progress".