the use of dropbear_rsa_host_key

Rob Landley rob at landley.net
Wed Sep 14 05:22:09 AWST 2016


On 09/12/2016 04:08 AM, Lee Rock wrote:
> Hi, guys:
> 	Dropbear doesn't even launch when /etc/dropbear/dropbear_rsa_host_key missing. 
> I use passwd as login method and there is no need to use rsa|dss keys. Why dropbear still need these keys?

The host key identifies the server. The login key identifies the user.
You need both to do ssh. (The point of the host key is to prevent man in
the middle attacks.)

Rob


More information about the Dropbear mailing list