openembedded-core.git/meta/recipes-core/dropbear, branch master-next

dropbear: drop support for DSA host keys in dropbear init script

2017-03-10T10:15:44+00:00

Bring the dropbear init script into sync with the systemd service
file (dropbearkey.service supports RSA host keys only) and with
recent versions of openssh which deprecate DSA host keys.

  https://www.gentoo.org/support/news-items/2015-08-13-openssh-weak-keys.html

Signed-off-by: Andre McCurdy 
Signed-off-by: Ross Burton

recipes: Make use of the new bb.utils.filter() function

2017-03-01T11:17:22+00:00

Signed-off-by: Peter Kjellerstedt 
Signed-off-by: Richard Purdie

dropbear: deterministic selection of system -vs- bundled libtom libs

2016-09-19T22:57:20+00:00

Dropbear will use system versions of libtommath and libtomcrypt if
available. To make builds deterministic, add a PACKAGECONFIG option
to choose system libs or force use of the bundled versions.

Note that currently there are no libtommath or libtomcrypt recipes
in oe-core, so default to using the bundled versions.

Signed-off-by: Andre McCurdy 
Signed-off-by: Richard Purdie

dropbear: fix -ltomcrypt -ltommath order when using system libtom libs

2016-09-19T22:57:20+00:00

To prevent build failures when using system libtom libraries and
linking with --as-needed, LIBTOM_LIBS should be in the order
-ltomcrypt -ltommath, not the other way around, ie libs should be
prepended to LIBTOM_LIBS as they are found, not appended.

Note that LIBTOM_LIBS is not used when linking with the bundled
libtom libs.

Signed-off-by: Andre McCurdy 
Signed-off-by: Richard Purdie

dropbear/init: Allow extra arguments for key generation

2016-08-17T09:31:01+00:00

This patch adds DROPBEAR_RSAKEY_ARGS and DROPBEAR_DSSKEY_ARGS optional
parameters to /etc/default/dropbear. The contents are simply passed to
the 'dropbearkey' program when generating a host key.

The default keysize for RSA is currently 2048 bits. It takes a CortexA9
running at 700MHz between 4 and 10 seconds to calculate a keypair. The
board boots Linux in about a second, but you have to wait for several
seconds because of the keypair generation. This patch allows one to put
the line DROPBEAR_RSAKEY_ARGS="-s 1024" into /etc/default/dropbear, and
have a host key generated in about 0.2 seconds on the same CPU. This is
particulary useful for read-only rootfs systems which generate a key on
each boot.

Signed-off-by: Mike Looijmans 
Signed-off-by: Ross Burton

dropbear: upgrade to 2016.74

2016-08-01T10:46:36+00:00

2016.73 -> 2016.74

Signed-off-by: Maxin B. John 
Signed-off-by: Ross Burton

meta: update patch metadata

2016-07-08T08:55:40+00:00

Enforce the correct tag names across all of oe-core for consistency.

Signed-off-by: Ross Burton

dropbear: Remove incorrect SFTPSERVER_PATH from CFLAGS

2016-05-30T08:30:31+00:00

Openssh now installs the sftp-server binary as /usr/libexec/sftp-server,
whereas the dropbear recipe assumes a different path.
Dropbear uses the correct path by default, so it's no longer necessary
to override SFTPSERVER_PATH via CFLAGS.

This fixes SFTP access to systems using dropbear as the SSH server.

Signed-off-by: Dominic Sacré 
Signed-off-by: Ross Burton

dropbear: Upgrade 2015.71 -> 2016.73

2016-05-25T06:49:54+00:00

Backport a patch to fix out-of-tree build.

Signed-off-by: Jussi Kukkonen 
Signed-off-by: Richard Purdie

dropbear.inc: drop legacy CFLAGS and LD tweaks

2015-12-12T23:31:42+00:00

The CFLAGS and LD tweaks in dropbear.inc date back to 2005/2006 and
whatever issue they worked around back then seems to have been fixed
in the latest versions of dropbear.

Signed-off-by: Andre McCurdy 
Signed-off-by: Ross Burton