Jan Mojžíš
Jan Mojžíš
> ### Proposed Features > * ability to specify a fallback user or force a specific user (-g and -G ?) > * ability to disable authentication for only the...
pull request is here: https://github.com/janmojzis/tinyssh/pull/62 User who needs unauthorized access must: - use tinysshnoneauthd instead of tinysshd (symlink trick) - run tinysshnoneauthd under unprivileged user - unprivileged user must have...
And #60 #62 merged. Can anyone independently confirm that it works as expected? eventually edit/add real-word examples to the man page https://github.com/janmojzis/tinyssh/blob/master/man/tinysshnoneauthd.8
I test it like this, and works: ~~~ git clone [email protected]:janmojzis/tinyssh.git cd tinyssh make useradd tinysshnoneauth mkdir -p /home/tinysshnoneauth/ tinysshd-makekey /home/tinysshnoneauth/sshkeydir chown -R tinysshnoneauth /home/tinysshnoneauth/sshkeydir envuidgid tinysshnoneauth tcpserver -UHRDl0 0...
Hello, 1. branch nooldcrypto https://github.com/janmojzis/tinyssh/tree/nooldcrypto ... and using -Os unstriped binary is 1.6x smaller (compiled on my laptop) 2. TweetNacl was used in early version of tinyssh and there is...
or branch noprecomputedtables https://github.com/janmojzis/tinyssh/tree/noprecomputedtables unstriped binary is ~1.67x smaller (compiled on my laptop) but with slowdown penalty, crypto_sign_ed25519_sign is ~1.55x slower
using both optimizations: removing aes/nistp256/hmacsha256 + no precomputed tables the binary can be smaller ~1.9x
https://github.com/janmojzis/tinyssh/tree/noprecomputedtables merged into main
branch nooldcrypto also merged into main
Hello, tinysshd-printkey prints the fingerprint. Example: ~~~ # tinysshd-makekey keydir # tinysshd-printkey keydir ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHfU40DKe3EgstiZfl+Tss8ijkh2rj/yxSTdZCE+/GXK ~~~