Dropbear 2024.84, ib lub SSH server thiab client me me uas siv rau ntawm cov embedded systems xws li wireless routers thiab hauv OpenWrt-zoo li distributions, tam sim no muaj. Dropbear muaj qhov siv tsawg lub cim xeeb, muaj peev xwm lov tes taw cov haujlwm tsis tsim nyog thaum lub sijhawm tsim, thiab muaj peev xwm tsim ob qho tib si client thiab server hauv ib qho executable, zoo ib yam li busybox. Thaum txuas nrog uClibc, Dropbear executable tsuas yog 110 KB loj xwb. Dropbear txhawb nqa X11 forwarding, sib xws nrog OpenSSH key file (~/.ssh/authorized_keys), thiab tuaj yeem tsim ntau qhov kev sib txuas nrog kev xa mus los ntawm tus tswv tsev passthrough. Lub hauv paus ntawm qhov project yog sau hauv C thiab faib raws li daim ntawv tso cai zoo li MIT.
Hauv qhov kev tso tawm tshiab:
- Txhim kho OpenSSH kev sib raug zoo rau cov lus txib ssh thiab ssh-keygen.
- Thaum nkag mus rau hauv, tus neeg siv tam sim no yuav tsum muaj tus chij "x" hauv daim teb hash password hauv /etc/passwd, piv txwv li, "user1:x:1003:1003::/home/user1:/bin/sh." Cov neeg siv uas tsis muaj tus chij no yuav tsis tuaj yeem nkag mus rau hauv.
- Ntxiv BatchMode thiab StrictHostKeyChecking kev xaiv rau dbclient, muaj txiaj ntsig zoo rau SSH tunnels: ssh -o BatchMode = yog -o StrictHostKeyChecking = yog
- Ntxiv lub peev xwm los xa cov UNIX sockets los ntawm lub qhov av uas tsim los ntawm kev siv Dropbear SSH.
- Hloov chaw ntawm qhov hais kom ua dropbearkey, tam sim no nws muaj peev xwm hu ua "dropbear ssh-keygen", piv txwv li tam sim no nws tuaj yeem siv ua lub npe cuav rau ssh-keygen.
- Thaum tsim ib tus yuam sij, qhov chaw cia ntawm tus yuam sij pej xeem (id_ed25519.pub) sib cais tau lees paub.
- dbclient tam sim no txhawb nqa cov ntaub ntawv ~/.ssh/dropbear_config, uas muaj ntau txoj kev xaiv los ntawm ssh_config: Host, HostName, Port, User, thiab IdentityFile. Qhov kev ua haujlwm no tam sim no raug kaw los ntawm lub neej ntawd thaum lub sijhawm sau ua ke.
- Ntxiv kev txhawb nqa rau Strict KEX.
- Kho ntau yam "Y2038 teeb meem" (Y2038).
Tau qhov twg los: opennet.ru
