dropbear icon indicating copy to clipboard operation
dropbear copied to clipboard

add crypto configuration to specify crypto algorithm

Open hongjunxin opened this issue 5 years ago • 1 comments

xxx-cbc algorithm is unsafe, but it may be used in some old ssh implementation. So add crypto configuration to specify algorithm. Crypto configuration file is /etc/dropbear/crypto_config. If the file doesn't exist use default setting based on compilation switcher.

/etc/dropbear/crypto_config content is like: Ciphers aes128-ctr,aes192-ctr,aes256-ctr MACs hmac-sha1,hmac-ripemd160 ...

hongjunxin avatar Jan 17 '20 07:01 hongjunxin

I'm not sure a config file is really needed. dbclient has -m/-c and a a server config will apply to all old implementations so should just be compiled with allowed ciphers.

mkj avatar May 25 '20 12:05 mkj