RE: [yocto] Dropbear and deprecated ssh-rsa issue

[<mehmet.fide@gmail.com>]

Yes, I believe I can do that. But there are couple of options, I'm not sure which one to be followed:
1. Replace rsa key with ecdsa and continue with ecdsa support only. (this disables rsa mode)
2. Keep rsa mode on and also activate ecdsa key next to it therefore they can work side by side simultaneously
3. ??

Thanks.


-----Original Message-----
From: Alexander Kanavin <alex.kanavin@gmail.com> 
Sent: Thursday, June 13, 2024 3:28 PM
To: yocto@lists.yoctoproject.org; mehmet.fide@gmail.com
Subject: Re: [yocto] Dropbear and deprecated ssh-rsa issue

On Thu, 13 Jun 2024 at 13:20, Mehmet Fide via lists.yoctoproject.org <mehmet.fide=gmail.com@lists.yoctoproject.org> wrote:
> I was silently following the email list for a while.
>
> Today I have a question regarding dropbear and its default recipe provided in poky/meta/recipes-core/dropbear.
>
> It has been 4 years since ssh-rsa is deprecated by openssh followed by Linux distros and Visual Studio 2022 as of 17.10.
>
> As I checked today, the dropbear recipe with the master poky still uses ssh-rsa instead of ecdsa mode which is widely accepted today.
>
> Don't you think that it would be appropriate to change the recipe content to use ecdsa instead of ssh-rsa one?

Yes that would be much welcome. Can you work on that?

Alex