mirror of
https://git.freebsd.org/ports.git
synced 2025-06-15 01:30:33 -04:00
e5cbea9b60
dropbear no longer supports DSS keys, use ed25519 instead. rc file needs to be updated. currently starting dropbear fails with error: % service dropbear start ... Unknown key type 'dss' ... Submitted by: waitman@waitman.net PR: 250192 MFH: 2020Q4 (runtime fix)
63 lines
1.4 KiB
Bash
63 lines
1.4 KiB
Bash
#!/bin/sh
|
|
|
|
# PROVIDE: dropbear
|
|
# REQUIRE: LOGIN cleanvar
|
|
#
|
|
# Add the following lines to /etc/rc.conf.local or /etc/rc.conf
|
|
# to enable this service:
|
|
#
|
|
# dropbear_enable (bool): Set to NO by default.
|
|
# Set it to YES to enable dropbear.
|
|
#
|
|
|
|
. /etc/rc.subr
|
|
|
|
name="dropbear"
|
|
rcvar=dropbear_enable
|
|
command="%%PREFIX%%/sbin/${name}"
|
|
keygen_cmd="dropbear_keygen"
|
|
start_precmd="dropbear_precmd"
|
|
pidfile="/var/run/${name}.pid"
|
|
extra_commands="keygen"
|
|
|
|
etcdir="%%PREFIX%%/etc/${name}"
|
|
|
|
dropbear_keygen()
|
|
{
|
|
(
|
|
umask 022
|
|
|
|
if [ -f ${etcdir}/dropbear_rsa_host_key ]; then
|
|
echo "You already have an RSA host key" \
|
|
"in ${etcdir}/dropbear_rsa_host_key"
|
|
echo "Skipping protocol version 2 RSA Key Generation"
|
|
else
|
|
%%PREFIX%%/bin/dropbearkey -t rsa -f ${etcdir}/dropbear_rsa_host_key
|
|
fi
|
|
|
|
if [ -f ${etcdir}/dropbear_ed25519_host_key ]; then
|
|
echo "You already have an ed25519 host key" \
|
|
"in ${etcdir}/dropbear_ed25519_host_key"
|
|
echo "Skipping protocol version 2 ed25519 Key Generation"
|
|
else
|
|
%%PREFIX%%/bin/dropbearkey -t ed25519 -f ${etcdir}/dropbear_ed25519_host_key
|
|
fi
|
|
)
|
|
}
|
|
|
|
dropbear_precmd()
|
|
{
|
|
if [ ! -f ${etcdir}/dropbear_rsa_host_key -o \
|
|
! -f ${etcdir}/dropbear_ed25519_host_key ]; then
|
|
run_rc_command keygen
|
|
fi
|
|
}
|
|
|
|
load_rc_config $name
|
|
|
|
: ${dropbear_enable="NO"}
|
|
: ${dropbear_args:=""}
|
|
|
|
command_args="-P $pidfile $dropbear_args"
|
|
|
|
run_rc_command "$1"
|