summaryrefslogtreecommitdiff
path: root/meta/recipes-core/dropbear
AgeCommit message (Collapse)AuthorFiles
2016-09-19dropbear: deterministic selection of system -vs- bundled libtom libsAndre McCurdy1
Dropbear will use system versions of libtommath and libtomcrypt if available. To make builds deterministic, add a PACKAGECONFIG option to choose system libs or force use of the bundled versions. Note that currently there are no libtommath or libtomcrypt recipes in oe-core, so default to using the bundled versions. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-09-19dropbear: fix -ltomcrypt -ltommath order when using system libtom libsAndre McCurdy2
To prevent build failures when using system libtom libraries and linking with --as-needed, LIBTOM_LIBS should be in the order -ltomcrypt -ltommath, not the other way around, ie libs should be prepended to LIBTOM_LIBS as they are found, not appended. Note that LIBTOM_LIBS is not used when linking with the bundled libtom libs. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-08-17dropbear/init: Allow extra arguments for key generationMike Looijmans1
This patch adds DROPBEAR_RSAKEY_ARGS and DROPBEAR_DSSKEY_ARGS optional parameters to /etc/default/dropbear. The contents are simply passed to the 'dropbearkey' program when generating a host key. The default keysize for RSA is currently 2048 bits. It takes a CortexA9 running at 700MHz between 4 and 10 seconds to calculate a keypair. The board boots Linux in about a second, but you have to wait for several seconds because of the keypair generation. This patch allows one to put the line DROPBEAR_RSAKEY_ARGS="-s 1024" into /etc/default/dropbear, and have a host key generated in about 0.2 seconds on the same CPU. This is particulary useful for read-only rootfs systems which generate a key on each boot. Signed-off-by: Mike Looijmans <mike.looijmans@topic.nl> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-08-01dropbear: upgrade to 2016.74Maxin B. John2
2016.73 -> 2016.74 Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-07-08meta: update patch metadataRoss Burton1
Enforce the correct tag names across all of oe-core for consistency. Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-05-30dropbear: Remove incorrect SFTPSERVER_PATH from CFLAGSDominic Sacré1
Openssh now installs the sftp-server binary as /usr/libexec/sftp-server, whereas the dropbear recipe assumes a different path. Dropbear uses the correct path by default, so it's no longer necessary to override SFTPSERVER_PATH via CFLAGS. This fixes SFTP access to systems using dropbear as the SSH server. Signed-off-by: Dominic Sacré <dominic.sacre@gmx.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-05-25dropbear: Upgrade 2015.71 -> 2016.73Jussi Kukkonen3
Backport a patch to fix out-of-tree build. Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-12dropbear.inc: drop legacy CFLAGS and LD tweaksAndre McCurdy1
The CFLAGS and LD tweaks in dropbear.inc date back to 2005/2006 and whatever issue they worked around back then seems to have been fixed in the latest versions of dropbear. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2015-12-12dropbear: update 2015.70 -> 2015.71Andre McCurdy2
2015.71 - 3 December 2015 - Fix "bad buf_incrpos" when data is transferred, broke in 2015.69 - Fix crash on exit when -p address:port is used, broke in 2015.68 - Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from Konstantin Tokarev - Fix bad configure script test which didn't work with dash shell, patch from Juergen Daubert, broke in 2015.70 - Fix server race condition that could cause sessions to hang on exit, https://github.com/robotframework/SSHLibrary/issues/128 Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2015-12-12dropbear: Upgrade 2015.68 -> 2015.70Jussi Kukkonen3
Tweak a pam patch to make it apply on current source. Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2015-10-01dropbear: fix key generation when systemd is in use and rootfs is readonlyAlexander Kanavin2
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-31dropbear: update to 2015.68Alexander Kanavin3
LICENSE checksum has changed because the copyright year was changed from 2014 to 2015 in it: https://github.com/mkj/dropbear/commit/19e1afbd1ca6d306166ce74bcd6c6889f8d196f3 Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-11dropbear: 2014.66 -> 2015.67Robert Yang2
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2015-01-07dropbear: upgrade to 2014.66Paul Eggleton4
* Upgrade to upstream 2014.66; incorporates several minor bugfix releases. * LIC_FILES_CHKSUM changed because the copyright year changed; there was no change to the license text itself. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2014-09-16dropbear: add pam modules dependenciesWenzong Fan1
If pam distro feature enabled, dropbear will need below pam rpms to work: * libpam-runtime * pam-plugin-deny * pam-plugin-permit * pam-plugin-unix Just add the runtime dependencies explicitly. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2014-05-15dropbear: add missing patch headerPaul Eggleton1
* Add a brief subject mentioning what the patch is for * Add Upstream-Status Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2014-05-08dropbear: avoid pipe with sedMatthieu Crapet1
Replace: cat <file> | sed -e xxx By: sed -e xxx <file> + fix indentation Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2014-04-25Globally replace 'base_contains' calls with 'bb.utils.contains'Otavio Salvador1
The base_contains is kept as a compatibility method and we ought to not use it in OE-Core so we can remove it from base metadata in future. Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-02-28dropbear: upgrade to 2014.63Paul Eggleton4
Drop 0002-static_build_fix.patch since an equivalent fix has been merged upstream. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-01-28dropbear: add systemd unit filesChen Qi4
This patch mainly comes from meta-systemd with a few modifications. The purpose is to get rid of the LSB init scripts in systemd images. [YOCTO #4420] Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2014-01-14dropbear: Refresh pam patch so it applies against recent versionRichard Purdie1
Patch application failed on the autobuilder for pam, this refresh of the patch should resolve the build failure. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-01-14dropbear: upgrade to 2013.62Paul Eggleton10
LIC_FILES_CHKSUM has changed with the introduction of a BSD-3-Clause algorithm (curve25519-donna); this has prompted a re-evaluation of the LICENSE value which should now reflect the licenses declared in the upstream documentation. Thanks to Beth Flanagan for helping with this. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-12-05classes/recipes: More optimal DISTRO_FEATURES referencesRichard Purdie1
Using the contains function results in more optimal sstate checksums resulting in better cache reuse as we as more consistent code. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-12-03dropbear: set SUMMARY instead of DESCRIPTIONPaul Eggleton1
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-10-26dropbear: update to 2013.60 versionMaxin B. John10
update to latest version 2013.60 Update 0006-dropbear-configuration-file.patch for 2013.60 Signed-off-by: Maxin B. John <maxin.john@enea.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-09-26dropbear: pass SFTPSERVER_PATH explicitlyRoy Li1
The default value of SFTPSERVER_PATH is "/usr/libexec/sftp-server" defined in dropbear-2013.58/option.h, but after commit 406bd38b423[bitbake.conf: change libexecdir to ${libdir}/${BPN}], sftp-server is provided by openssh package, and is installed into ${libdir}/openssh, so we pass it explicitly. Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-05-24dropbear: a fix for hang in dropbearkey, built for x32Nitin A Kamble2
This commit fixes runtime hang of 'dropbearkey' utility, built for a x32 target abi system. The hang was observed while generating ssh keys, with this command: dropbearkey -t dss -f private The issue is fixed by changing the code, where 'long' in x86_64 mode is assumed as 64bit quantity. With the x32 abi, the processor is in x86_64 mode, but the 'long' is a 32bit quantity. Hence the fix uses 'long long' instead of 'long' to define/access 64bit data variables. Fixes bug: [YOCTO #4496] Signed-off-by: Nitin A Kamble <nitin.a.kamble@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-04-29dropbear: update to 2013.58Eric Bénard11
- patches updated - nopw-option.patch dropped as the option is integrated since 2013.56 - compile tested for ARMv5 target Signed-off-by: Eric Bénard <eric@eukrea.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-03-09dropbear: update patch upstream statusPaul Eggleton1
Blank password option patch has now been accepted upstream. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-02-15dropbear: use pidfile for daemon start/stop/restartRoman I Khimov1
Old init script killed all dropbear processes when doing stop/restart including open SSH sessions which is very annoying. Signed-off-by: Roman I Khimov <khimov@altell.ru> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-02-04dropbear: fix RPROVIDESMartin Jansa1
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-01-20dropbear: Deal with truncated host keys by removing themHolger Hans Peter Freyther2
Dropbear does not start when the host key is empty and it is possible that a device is switched off before the host key is generated. This is possible because the dropbearkey code doesn't create a temporary file first. Detect truncated keys and then remove them which will lead to the re-generation. This way the dropbear process will always start. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-01-18dropbear: allow configuring blank password option at runtimePaul Eggleton3
Instead of using IMAGE_FEATURES to control something within a recipe, allow this to be set at runtime, avoiding the need to rebuild dropbear when we want to change this option. First half of the fix for [YOCTO #2578]. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2012-05-30dropbear: use new update-alternativesMark Hatle2
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
2012-05-25dropbear: fix include dependent PR generationSteffen Sledz2
Signed-off-by: Steffen Sledz <sledz@dresearch-fe.de>
2012-04-16dropbear: Allow tasks to be safely re-executedRichard Purdie1
Re-running the debug_patch task would cause the build to fail. This patch moves the extra patch handling directly into SRC_URI and removes the need for the separate task, allowing safe re-execution of each task. [YOCTO #2194] Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-03-21dropbear: upgrade to 2012.55Shane Wang3
Signed-off-by: Shane Wang <shane.wang@intel.com>
2012-01-03dropbear: fix CRYPTLIB patchSaul Wold2
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2011-12-08dropbear: Upgrade from 0.53.1 to 2011.54Mei Lei4
This new version added ALLOW_BLANK_PASSWORD option. So change the allow-nopw.patch content to enable this function. Signed-off-by: Mei Lei <lei.mei@intel.com>
2011-09-30dropbear: Upgrade from 0.52 to 0.53.1Mei Lei7
Signed-off-by: Mei Lei <lei.mei@intel.com>
2011-09-02dropbear: add missing filesKoen Kooi2
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-08-31dropbear: Change the path to find configuration file and add a configuration ↵Xiaofeng Yan1
file for dropbear dropbear will check "/etc/pam.d/sshd" which comes from package "openssh" \ When enabling pam supporting. But if we only install dropbear \ package without package "openssh", then "dropbear" will not \ find a configuration file. The changes are as follow for fixing this bug: - Change the path to find configuration file (/etc/pam.d/sshd --> /etc/pam.d/dropbear) - Add a configuration file "/etc/pam.d/dropbear" Signed-off-by: Xiaofeng Yan <xiaofeng.yan@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-07-27dropbear: Support pamXiaofeng Yan2
I make a patch and some changes in dropbear.inc for supporting pam. - Enable pam in configure - Modify file option.h to open pam supporting Signed-off-by: Xiaofeng Yan <xiaofeng.yan@windriver.com>
2011-07-27dropbear: don't override DISTRO_TYPE if it is already setKoen Kooi2
The long term solution is to remove the IMAGE_FEATURE check since images are not allowed to influence recipe compile options. Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
2011-07-07openssh/dropbear: No need for each to PROVIDE ssh/sshdRichard Purdie1
Nothing in the system actually uses the PROVIDES field for these recipes, its usually the runtime packages that are used. We can therefore remove the PROVIDES and hence quieten the associated warnings from bitbake. If these recipes do really need the PROVIDES, they would be better as virtuals and adding that to MULTI_PROVIDER_WHITELIST. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-06-23dropbear: Don't patch in configureMark Hatle2
We need to avoid applying a patch in configure, because a rebuild could trigger this, without triggering do_patch. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
2011-05-13update patch upstream statusQing He4
This patch includes the update of patch upstream status of the following recipes (50 in all): grub pciutils setserial dhcp iproute2 libnss-mdns nfs-utils openssl portmap busybox coreutils dbus dropbear ncurses readline sysfsutils sysvinit tinylogin udev update-rc.d util-linux elfutils file pkgconfig syslinux ubootchart yaffs2 findutils gamin hdparm libaio libzypp parted procps sat-solver screen sed sysklogd tcp-wrapper time zypper attr boost createrepo gnutls hal js libgcrypt libnl libusb-compat Signed-off-by: Qing He <qing.he@intel.com>
2011-05-04Remove distro-specific metadata for distros not in oe-corePaul Eggleton2
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2011-05-04logging: update existing oe* logging users to the bb* interfaceDarren Hart1
The new bash logging class provides bbnote, bbwarn, bbfatal, and bbdebug replacements (as well as bbplain and bberror) for the oe* equivalents. Use the new bb* API in preparation to delete the oe* logging API. This patch was automatically generated by a sed script. The result has been visually inspected and used to build core-image-sato for qemux86. Signed-off-by: Darren Hart <dvhart@linux.intel.com>
2011-03-01dropbear: add SRC_URI checksumsJoshua Lock1
Signed-off-by: Joshua Lock <josh@linux.intel.com>
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-26 16:57:24 +0000