From df3d2b945e91c91b10836e99a8e746535cbd326c Mon Sep 17 00:00:00 2001 From: Matt Johnston Date: Tue, 3 Dec 2013 21:03:23 +0800 Subject: Update README --- README | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/README b/README index b569283..9ff8d4f 100644 --- a/README +++ b/README @@ -42,8 +42,7 @@ If you have an OpenSSH-style private key ~/.ssh/id_rsa, you need to do: dropbearconvert openssh dropbear ~/.ssh/id_rsa ~/.ssh/id_rsa.db dbclient -i ~/.ssh/id_rsa.db -Currently encrypted keys aren't supported, neither is agent forwarding. At some -stage both hopefully will be. +Dropbear does not support encrypted hostkeys though can connect to ssh-agent. ============================================================================ @@ -52,13 +51,18 @@ dropbearkey's '-y' option. ============================================================================ -To run the server, you need to generate server keys, this is one-off: +To run the server, you need to server keys, this is one-off: ./dropbearkey -t rsa -f dropbear_rsa_host_key ./dropbearkey -t dss -f dropbear_dss_host_key +./dropbearkey -t ecdsa -f dropbear_dss_host_key or alternatively convert OpenSSH keys to Dropbear: ./dropbearconvert openssh dropbear /etc/ssh/ssh_host_dsa_key dropbear_dss_host_key +You can also get Dropbear to create keys when the first connection is made - +this is preferable to generating keys when the system boots. Make sure +/etc/dropbear/ exists and then pass '-R' to the dropbear server. + ============================================================================ If the server is run as non-root, you most likely won't be able to allocate a -- cgit v1.2.1