linux/poky.git/meta/recipes-core/dropbear, branch pyro-17.0.1

dropbear: drop support for DSA host keys in dropbear init script

2017-03-10T14:50:10+00:00

Bring the dropbear init script into sync with the systemd service file (dropbearkey.service supports RSA host keys only) and with recent versions of openssh which deprecate DSA host keys. https://www.gentoo.org/support/news-items/2015-08-13-openssh-weak-keys.html (From OE-Core rev: 6bd7341a38a8bb5387ea81dbccfed327370569f3) Signed-off-by: Andre McCurdy Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

recipes: Make use of the new bb.utils.filter() function

2017-03-01T11:17:45+00:00

(From OE-Core rev: 0a1427bf9aeeda6bee2cc0af8da4ea5fd90aef6f) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

dropbear: deterministic selection of system -vs- bundled libtom libs

2016-09-20T14:11:08+00:00

Dropbear will use system versions of libtommath and libtomcrypt if available. To make builds deterministic, add a PACKAGECONFIG option to choose system libs or force use of the bundled versions. Note that currently there are no libtommath or libtomcrypt recipes in oe-core, so default to using the bundled versions. (From OE-Core rev: b7c2edd2d6ded287d8b34dd047ae84d3fd69d4c6) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

dropbear: fix -ltomcrypt -ltommath order when using system libtom libs

2016-09-20T14:11:08+00:00

To prevent build failures when using system libtom libraries and linking with --as-needed, LIBTOM_LIBS should be in the order -ltomcrypt -ltommath, not the other way around, ie libs should be prepended to LIBTOM_LIBS as they are found, not appended. Note that LIBTOM_LIBS is not used when linking with the bundled libtom libs. (From OE-Core rev: 62e96283fe77469e24e8df86c6c037c92009b00a) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

dropbear/init: Allow extra arguments for key generation

2016-08-17T09:35:39+00:00

This patch adds DROPBEAR_RSAKEY_ARGS and DROPBEAR_DSSKEY_ARGS optional parameters to /etc/default/dropbear. The contents are simply passed to the 'dropbearkey' program when generating a host key. The default keysize for RSA is currently 2048 bits. It takes a CortexA9 running at 700MHz between 4 and 10 seconds to calculate a keypair. The board boots Linux in about a second, but you have to wait for several seconds because of the keypair generation. This patch allows one to put the line DROPBEAR_RSAKEY_ARGS="-s 1024" into /etc/default/dropbear, and have a host key generated in about 0.2 seconds on the same CPU. This is particulary useful for read-only rootfs systems which generate a key on each boot. (From OE-Core rev: c0efbcb47ab37c2d9c298fcd40ecaadd3ca050a7) Signed-off-by: Mike Looijmans Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

dropbear: upgrade to 2016.74

2016-08-01T10:47:12+00:00

2016.73 -> 2016.74 (From OE-Core rev: 1513e77d3f7ea9910d6ac8aab7a2f38dd6c7cd24) Signed-off-by: Maxin B. John Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

meta: update patch metadata

2016-07-08T08:57:24+00:00

Enforce the correct tag names across all of oe-core for consistency. (From OE-Core rev: 606a43dc38a00cc243f933722db657aea4129f8e) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

dropbear: Remove incorrect SFTPSERVER_PATH from CFLAGS

2016-05-30T14:58:12+00:00

Openssh now installs the sftp-server binary as /usr/libexec/sftp-server, whereas the dropbear recipe assumes a different path. Dropbear uses the correct path by default, so it's no longer necessary to override SFTPSERVER_PATH via CFLAGS. This fixes SFTP access to systems using dropbear as the SSH server. (From OE-Core rev: df798bca330583103b2301678236cc841cc861dd) Signed-off-by: Dominic Sacré Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

dropbear: Upgrade 2015.71 -> 2016.73

2016-05-25T06:50:17+00:00

Backport a patch to fix out-of-tree build. (From OE-Core rev: b1613c946d1d6e5d7f5964e4d24f1d3146dfe39e) Signed-off-by: Jussi Kukkonen Signed-off-by: Richard Purdie

dropbear.inc: drop legacy CFLAGS and LD tweaks

2015-12-12T23:42:53+00:00

The CFLAGS and LD tweaks in dropbear.inc date back to 2005/2006 and whatever issue they worked around back then seems to have been fixed in the latest versions of dropbear. (From OE-Core rev: 4b17606fbca63a17cafbc285e3efe48c4c54a266) Signed-off-by: Andre McCurdy Signed-off-by: Ross Burton Signed-off-by: Richard Purdie