openwrt/package/network/services/dropbear/files/dropbear.failsafe

#!/bin/sh

failsafe_dropbear () {
	dropbearkey -t rsa -s 1024 -f /tmp/dropbear_rsa_failsafe_host_key
	dropbearkey -t ed25519 -f /tmp/dropbear_ed25519_failsafe_host_key
	dropbear -r /tmp/dropbear_rsa_failsafe_host_key -r /tmp/dropbear_ed25519_failsafe_host_key <> /dev/null 2>&1
}

boot_hook_add failsafe failsafe_dropbear
dropbear: move failsafe code out of base-files The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software. Failsafe code of dropbear should be in the dropbear package not the base-files package. Signed-off-by: Kyle Copperfield <kmcopper@danwin1210.me> 2019-11-19 18:50:00 +00:00			`#!/bin/sh`

			`failsafe_dropbear () {`
dropbear: add ed25519 for failsafe key At least Fedora and RHEL 9 set RSAMinSize=2048, so when trying to use failsafe, we get 'Bad server host key: Invalid key length' To workaround the issue, we can use: ssh -o RSAMinSize=1024 ... Generating 2048 bits RSA is extremely slow, so add ed25519. We keep RSA 1024 to be as compatible as possible. Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com> 2023-07-10 05:56:05 +00:00			`dropbearkey -t rsa -s 1024 -f /tmp/dropbear_rsa_failsafe_host_key`
			`dropbearkey -t ed25519 -f /tmp/dropbear_ed25519_failsafe_host_key`
			`dropbear -r /tmp/dropbear_rsa_failsafe_host_key -r /tmp/dropbear_ed25519_failsafe_host_key <> /dev/null 2>&1`
dropbear: move failsafe code out of base-files The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software. Failsafe code of dropbear should be in the dropbear package not the base-files package. Signed-off-by: Kyle Copperfield <kmcopper@danwin1210.me> 2019-11-19 18:50:00 +00:00			`}`

			`boot_hook_add failsafe failsafe_dropbear`