NameDateSize

..11-Jul-20144 KiB

agentfwd.h11-Jul-20141.6 KiB

algo.h11-Jul-20142.4 KiB

Android.mk11-Jul-20141.5 KiB

atomicio.c11-Jul-20142 KiB

atomicio.h11-Jul-20141.6 KiB

auth.h11-Jul-20143.6 KiB

bignum.c11-Jul-20142.4 KiB

bignum.h11-Jul-20141.4 KiB

buffer.c11-Jul-20148.4 KiB

buffer.h11-Jul-20142.5 KiB

CHANGES11-Jul-201421.1 KiB

channel.h11-Jul-20144.5 KiB

chansession.h11-Jul-20142.3 KiB

circbuffer.c11-Jul-20143.6 KiB

circbuffer.h11-Jul-20142 KiB

CleanSpec.mk11-Jul-20142.2 KiB

cli-algo.c11-Jul-20142.9 KiB

cli-auth.c11-Jul-20147.5 KiB

cli-authinteract.c11-Jul-20144.3 KiB

cli-authpasswd.c11-Jul-20143.8 KiB

cli-authpubkey.c11-Jul-20145.6 KiB

cli-channel.c11-Jul-20142 KiB

cli-chansession.c11-Jul-20149.1 KiB

cli-kex.c11-Jul-20148.8 KiB

cli-main.c11-Jul-20143.3 KiB

cli-runopts.c11-Jul-201410.3 KiB

cli-service.c11-Jul-20142.7 KiB

cli-session.c11-Jul-20148.8 KiB

cli-tcpfwd.c11-Jul-20145.3 KiB

common-algo.c11-Jul-20146.1 KiB

common-channel.c11-Jul-201427.9 KiB

common-chansession.c11-Jul-20141.5 KiB

common-kex.c11-Jul-201421.6 KiB

common-runopts.c11-Jul-20141.8 KiB

common-session.c11-Jul-20149.2 KiB

compat.c11-Jul-20148.1 KiB

compat.h11-Jul-20141.7 KiB

config.guess11-Jul-201443.5 KiB

config.h11-Jul-201410.9 KiB

config.h.in11-Jul-201410.3 KiB

config.sub11-Jul-201431.9 KiB

configure11-Jul-2014420.5 KiB

configure.in11-Jul-201417.7 KiB

dbclient.111-Jul-20141.8 KiB

dbmulti.c11-Jul-20142.7 KiB

dbutil.c11-Jul-201417 KiB

dbutil.h11-Jul-20142.8 KiB

debian/11-Jul-20144 KiB

debug.h11-Jul-20142.9 KiB

dropbear.811-Jul-20141.9 KiB

dropbearconvert.c11-Jul-20143.9 KiB

dropbearkey.811-Jul-2014822

dropbearkey.c11-Jul-20148.4 KiB

dss.c11-Jul-201411 KiB

dss.h11-Jul-20141.9 KiB

fake-rfc2553.c11-Jul-20146 KiB

fake-rfc2553.h11-Jul-20144.9 KiB

filelist.txt11-Jul-20143.1 KiB

gendss.c11-Jul-20144.7 KiB

gendss.h11-Jul-20141.3 KiB

genrsa.c11-Jul-20143.9 KiB

genrsa.h11-Jul-20141.3 KiB

includes.h11-Jul-20143.3 KiB

INSTALL11-Jul-20143.2 KiB

install-sh11-Jul-20145.5 KiB

kex.h11-Jul-20142.3 KiB

keyimport.c11-Jul-201442.8 KiB

keyimport.h11-Jul-20141.5 KiB

libtomcrypt/11-Jul-20144 KiB

libtommath/11-Jul-20144 KiB

LICENSE11-Jul-20143.5 KiB

listener.c11-Jul-20144.3 KiB

listener.h11-Jul-20142.1 KiB

loginrec.c11-Jul-201433.8 KiB

loginrec.h11-Jul-20145.8 KiB

Makefile.in11-Jul-20145.8 KiB

MODULE_LICENSE_BSD_LIKE11-Jul-20140

MULTI11-Jul-2014766

netbsd_getpass.c11-Jul-20143.3 KiB

NOTICE11-Jul-20143.5 KiB

options.h11-Jul-201413.7 KiB

packet.c11-Jul-201416.6 KiB

packet.h11-Jul-20141.5 KiB

process-packet.c11-Jul-20144 KiB

progressmeter.c11-Jul-20147.2 KiB

progressmeter.h11-Jul-20141.4 KiB

queue.c11-Jul-20142.2 KiB

queue.h11-Jul-20141.5 KiB

random.c11-Jul-20146.4 KiB

random.h11-Jul-20141.4 KiB

README11-Jul-20143 KiB

rsa.c11-Jul-201410.7 KiB

rsa.h11-Jul-20141.9 KiB

runopts.h11-Jul-20142.8 KiB

scp.c11-Jul-201428.2 KiB

scpmisc.c11-Jul-20145.6 KiB

scpmisc.h11-Jul-20142 KiB

service.h11-Jul-20141.4 KiB

session.h11-Jul-20147.8 KiB

signkey.c11-Jul-201412.1 KiB

signkey.h11-Jul-20142.3 KiB

SMALL11-Jul-20142 KiB

ssh.h11-Jul-20144.3 KiB

sshpty.c11-Jul-201410.4 KiB

sshpty.h11-Jul-20141,006

svr-agentfwd.c11-Jul-20146.5 KiB

svr-algo.c11-Jul-20143.1 KiB

svr-auth.c11-Jul-201410.7 KiB

svr-authpam.c11-Jul-20147.8 KiB

svr-authpasswd.c11-Jul-20143.2 KiB

svr-authpubkey.c11-Jul-20149.8 KiB

svr-chansession.c11-Jul-201426.6 KiB

svr-kex.c11-Jul-20143.3 KiB

svr-main.c11-Jul-201410.3 KiB

svr-runopts.c11-Jul-20148.6 KiB

svr-service.c11-Jul-20142.5 KiB

svr-session.c11-Jul-20145.6 KiB

svr-tcpfwd.c11-Jul-20147 KiB

svr-x11fwd.c11-Jul-20146.1 KiB

tcp-accept.c11-Jul-20144.2 KiB

tcpfwd.h11-Jul-20142.1 KiB

termcodes.c11-Jul-20144 KiB

termcodes.h11-Jul-20141.5 KiB

TODO11-Jul-2014623

x11fwd.h11-Jul-20141.5 KiB

README

1This is Dropbear, a smallish SSH 2 server and client.
2
3INSTALL has compilation instructions.
4
5MULTI has instructions on making a multi-purpose binary (ie a single binary
6which performs multiple tasks, to save disk space)
7
8SMALL has some tips on creating small binaries.
9
10See TODO for a few of the things I know need looking at, and please contact
11me if you have any questions/bugs found/features/ideas/comments etc :)
12
13Matt Johnston
14matt@ucc.asn.au
15
16
17In the absence of detailed documentation, some notes follow:
18============================================================================
19
20Server public key auth:
21
22You can use ~/.ssh/authorized_keys in the same way as with OpenSSH, just put
23the key entries in that file. They should be of the form:
24
25ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwVa6M6cGVmUcLl2cFzkxEoJd06Ub4bVDsYrWvXhvUV+ZAM9uGuewZBDoAqNKJxoIn0Hyd0Nk/yU99UVv6NWV/5YSHtnf35LKds56j7cuzoQpFIdjNwdxAN0PCET/MG8qyskG/2IE2DPNIaJ3Wy+Ws4IZEgdJgPlTYUBWWtCWOGc= someone@hostname
26
27You must make sure that ~/.ssh, and the key file, are only writable by the
28user. Beware of editors that split the key into multiple lines.
29
30NOTE: Dropbear ignores authorized_keys options such as those described in the
31OpenSSH sshd manpage, and will not allow a login for these keys. 
32
33============================================================================
34
35Client public key auth:
36
37Dropbear can do public key auth as a client, but you will have to convert
38OpenSSH style keys to Dropbear format, or use dropbearkey to create them.
39
40If you have an OpenSSH-style private key ~/.ssh/id_rsa, you need to do:
41
42dropbearconvert openssh dropbear ~/.ssh/id_rsa  ~/.ssh/id_rsa.db
43dbclient -i ~/.ssh/id_rsa.db <hostname>
44
45Currently encrypted keys aren't supported, neither is agent forwarding. At some
46stage both hopefully will be.
47
48============================================================================
49
50If you want to get the public-key portion of a Dropbear private key, look at
51dropbearkey's '-y' option.
52
53============================================================================
54
55To run the server, you need to generate server keys, this is one-off:
56./dropbearkey -t rsa -f dropbear_rsa_host_key
57./dropbearkey -t dss -f dropbear_dss_host_key
58
59or alternatively convert OpenSSH keys to Dropbear:
60./dropbearconvert openssh dropbear /etc/ssh/ssh_host_dsa_key dropbear_dss_host_key
61
62============================================================================
63
64If the server is run as non-root, you most likely won't be able to allocate a
65pty, and you cannot login as any user other than that running the daemon
66(obviously). Shadow passwords will also be unusable as non-root.
67
68============================================================================
69
70The Dropbear distribution includes a standalone version of OpenSSH's scp
71program. You can compile it with "make scp", you may want to change the path
72of the ssh binary, specified by _PATH_SSH_PROGRAM in options.h . By default
73the progress meter isn't compiled in to save space, you can enable it by 
74adding 'SCPPROGRESS=1' to the make commandline.
75