Hi Martin;

Am Dienstag, 3. Januar 2017, 11:23:33 schrieb Martin Hejl:
> Hi all,
> 
> there seems to be an issue with dropbear on Bering uClibc 6.0.1 - trying
> to connect to it with putty fails with the following error:
> 
> "Couldn't agree a key exchange algorithm"
> 
> It looks like the defines to enable Diffie Hellman key exchange
> (DROPBEAR_DH_GROUP1 and DROPBEAR_DH_GROUP14) are missing in options.h
> 
> The following patch fixes the issue for me
> 
> diff --git a/repo/dropbear/options.h b/repo/dropbear/options.h
> index 9e598ea..77e888a 100644
> --- a/repo/dropbear/options.h
> +++ b/repo/dropbear/options.h
> @@ -168,6 +168,11 @@ If you test it please contact the Dropbear author */
>    * ECDSA above */
>   #define DROPBEAR_ECDH
> 
> +/* Group14 (2048 bit) is recommended. Group1 is less secure (1024 bit)
> though
> +   is the only option for interoperability with some older SSH programs */
> +#define DROPBEAR_DH_GROUP1 1
> +#define DROPBEAR_DH_GROUP14 1
> +
>   /* Control the memory/performance/compression tradeoff for zlib.
>    * Set windowBits=8 for least memory usage, see your system's
>    * zlib.h for full details.

Thx; fixed in git.

kp
> 
> Martin
> 
> ----------------------------------------------------------------------------
> -- Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> _______________________________________________
> leaf-devel mailing list
> leaf-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-devel


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
leaf-devel mailing list
leaf-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to