6.0.1 issue with dropbear
Martin Hejl <[email protected]> Tue, 3 Jan 2017 11:23:33 +0100
| Newsgroups | gmane.linux.leaf.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi all, there seems to be an issue with dropbear on Bering uClibc 6.0.1 - trying to connect to it with putty fails with the following error: "Couldn't agree a key exchange algorithm" It looks like the defines to enable Diffie Hellman key exchange (DROPBEAR_DH_GROUP1 and DROPBEAR_DH_GROUP14) are missing in options.h The following patch fixes the issue for me diff --git a/repo/dropbear/options.h b/repo/dropbear/options.h index 9e598ea..77e888a 100644 --- a/repo/dropbear/options.h +++ b/repo/dropbear/options.h @@ -168,6 +168,11 @@ If you test it please contact the Dropbear author */ * ECDSA above */ #define DROPBEAR_ECDH +/* Group14 (2048 bit) is recommended. Group1 is less secure (1024 bit) though + is the only option for interoperability with some older SSH programs */ +#define DROPBEAR_DH_GROUP1 1 +#define DROPBEAR_DH_GROUP14 1 + /* Control the memory/performance/compression tradeoff for zlib. * Set windowBits=8 for least memory usage, see your system's * zlib.h for full details. Martin ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot