<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Thank you CamVan, I've applied the patch now.<div class=""><br class=""></div><div class="">Cheers,</div><div class="">Matt<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Wed 21/2/2018, at 5:54 am, Camvan T Nguyen <<a href="mailto:ctnguyen@us.ibm.com" class="">ctnguyen@us.ibm.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><p class=""><font size="2" class="">In our environment, we generate an RSA host key in /var/lib/dropbear and start the dropbear service with the following command:</font><br class=""><br class=""><font size="2" class="">/usr/sbin/dropbear -i -r /var/lib/dropbear/dropbear_rsa_host_key -B</font><br class=""><br class=""><font size="2" class="">We are getting the following Warning messages:</font><br class=""><br class=""><font size="2" class="">Feb 20 06:08:50 witherspoon dropbear[1406]: Failed loading /etc/dropbear/dropbear_rsa_host_key</font><br class=""><font size="2" class="">Feb 20 06:08:50 witherspoon dropbear[1406]: Failed loading /etc/dropbear/dropbear_dss_host_key</font><br class=""><font size="2" class="">Feb 20 06:08:50 witherspoon dropbear[1406]: Failed loading /etc/dropbear/dropbear_ecdsa_host_key</font><br class=""><br class=""><font size="2" class="">This is because in our environment, we don't generate the 3 types of host keys in /etc/dropbear. Dropbear will first load the host key specified by the -r option and then will also try to load all 3 types of host keys from the default path /etc/dropbear. We propose the following patch be made to dropbear svr-runopts.c such that dropbear will only load the host keys from the default /etc/dropbear path if a key is not specified by the -r option.</font><br class=""><br class=""><br class=""><font size="2" class="">From b2048847702e00df8d404896323857f89cda215e Mon Sep 17 00:00:00 2001</font><br class=""><font size="2" class="">From: CamVan Nguyen <<a href="mailto:ctnguyen@us.ibm.com" class="">ctnguyen@us.ibm.com</a>></font><br class=""><font size="2" class="">Date: Tue, 20 Feb 2018 15:34:00 -0600</font><br class=""><font size="2" class="">Subject: [PATCH 1/1] Only load dropbear default host keys if a key is not</font><br class=""><font size="2" class=""> specified</font><br class=""><br class=""><font size="2" class="">---</font><br class=""><font size="2" class=""> svr-runopts.c | 9 ++++++---</font><br class=""><font size="2" class=""> 1 file changed, 6 insertions(+), 3 deletions(-)</font><br class=""><br class=""><font size="2" class="">diff --git a/svr-runopts.c b/svr-runopts.c</font><br class=""><font size="2" class="">index 3d97023..38a1b75 100644</font><br class=""><font size="2" class="">--- a/svr-runopts.c</font><br class=""><font size="2" class="">+++ b/svr-runopts.c</font><br class=""><font size="2" class="">@@ -510,17 +510,20 @@ void load_all_hostkeys() {</font><br class=""><font size="2" class=""> m_free(hostkey_file);</font><br class=""><font size="2" class=""> }</font><br class=""><br class=""><font size="2" class="">+ /* Only load default host keys if a host key is not specified by the user */</font><br class=""><font size="2" class="">+ if (0 == svr_opts.num_hostkey_files) {</font><br class=""><font size="2" class=""> #if DROPBEAR_RSA</font><br class=""><font size="2" class="">- loadhostkey(RSA_PRIV_FILENAME, 0);</font><br class=""><font size="2" class="">+ loadhostkey(RSA_PRIV_FILENAME, 0);</font><br class=""><font size="2" class=""> #endif</font><br class=""><br class=""><font size="2" class=""> #if DROPBEAR_DSS</font><br class=""><font size="2" class="">- loadhostkey(DSS_PRIV_FILENAME, 0);</font><br class=""><font size="2" class="">+ loadhostkey(DSS_PRIV_FILENAME, 0);</font><br class=""><font size="2" class=""> #endif</font><br class=""><br class=""><font size="2" class=""> #if DROPBEAR_ECDSA</font><br class=""><font size="2" class="">- loadhostkey(ECDSA_PRIV_FILENAME, 0);</font><br class=""><font size="2" class="">+ loadhostkey(ECDSA_PRIV_FILENAME, 0);</font><br class=""><font size="2" class=""> #endif</font><br class=""><font size="2" class="">+ }</font><br class=""><br class=""><font size="2" class=""> #if DROPBEAR_DELAY_HOSTKEY</font><br class=""><font size="2" class=""> if (svr_opts.delay_hostkey) {</font><br class=""><font size="2" class="">--</font><br class=""><font size="2" class="">1.8.2.2</font><br class=""><br class=""><br class=""><font size="2" class="">Thanks, </font><br class=""><font size="2" class="">CamVan Nguyen<br class="">POWER Firmware Tools Development & Support, STG<br class="">512-286-7756 T/L: 363-7756</font><br class="">
</p></div>
</div></blockquote></div><br class=""></div></body></html>