Re: dropbear and new host keys?

2019-12-19 Thread Joakim Tjernlund
On Mon, 2019-12-16 at 22:16 +0800, Matt Johnston wrote: > > > On Fri 13/12/2019, at 2:14 am, Joakim Tjernlund > > wrote: > > > > On Thu, 2019-12-12 at 18:34 +0100, Hans Harder wrote: > > > > The bigger issue here is why not reread keys at every new session? > > > > That seems to like the

Re: dropbear and new host keys?

2019-12-16 Thread Matt Johnston
> On Fri 13/12/2019, at 2:14 am, Joakim Tjernlund > wrote: > > On Thu, 2019-12-12 at 18:34 +0100, Hans Harder wrote: >> >>> The bigger issue here is why not reread keys at every new session? That >>> seems to like the right thing to do in any case? >> >> Performance... I don't _think_

Re: dropbear and new host keys?

2019-12-12 Thread Joakim Tjernlund
On Thu, 2019-12-12 at 18:34 +0100, Hans Harder wrote: > > > The bigger issue here is why not reread keys at every new session? That > > seems to like the right thing to do in any case? > > Performance... My text above was badly worded, should be: reread if keyfiles has changed. > Why

Re: dropbear and new host keys?

2019-12-12 Thread Hans Harder
> The bigger issue here is why not reread keys at every new session? That seems to like the right thing to do in any case? Performance... Why should you do that. You should not change your host keys everytime, because the connecting client will have a conflict and get a warning about a possible

Re: dropbear and new host keys?

2019-12-12 Thread Joakim Tjernlund
On Thu, 2019-12-12 at 13:31 +, Geoff Winkless wrote: > > On Wed, 11 Dec 2019 at 17:00, Joakim Tjernlund > wrote: > > In out case we cannot just restart dropbear and rebooting just for new keys > > is not an option either. > > Could dropbear gain automatic reread of keys ? > > You know if

Re: dropbear and new host keys?

2019-12-12 Thread Geoff Winkless
On Wed, 11 Dec 2019 at 17:00, Joakim Tjernlund wrote: > In out case we cannot just restart dropbear and rebooting just for new keys > is not an option either. > Could dropbear gain automatic reread of keys ? You know if you kill the parent process the child processes keep running? So you can

Re: dropbear and new host keys?

2019-12-12 Thread walter harms
Am 12.12.2019 13:01, schrieb Joakim Tjernlund: > On Wed, 2019-12-11 at 18:00 +0100, Joakim Tjernlund wrote: >> On Wed, 2019-12-11 at 23:53 +0800, Matt Johnston wrote: >>> Hi Joakim, >>> >>> The server needs to be stopped and restarted. If this is for new keys at >>> first-boot you could look at

Re: dropbear and new host keys?

2019-12-12 Thread Joakim Tjernlund
On Wed, 2019-12-11 at 18:00 +0100, Joakim Tjernlund wrote: > On Wed, 2019-12-11 at 23:53 +0800, Matt Johnston wrote: > > Hi Joakim, > > > > The server needs to be stopped and restarted. If this is for new keys at > > first-boot you could look at the -R option. > > It's not first boot :( > This

Re: dropbear and new host keys?

2019-12-11 Thread Joakim Tjernlund
On Wed, 2019-12-11 at 23:53 +0800, Matt Johnston wrote: > > Hi Joakim, > > The server needs to be stopped and restarted. If this is for new keys at > first-boot you could look at the -R option. It's not first boot :( This is when a user wants to replace the current keys for some reason. Ideally

Re: dropbear and new host keys?

2019-12-11 Thread Matt Johnston
Hi Joakim, The server needs to be stopped and restarted. If this is for new keys at first-boot you could look at the -R option. Cheers, Matt On Wed, Dec 11, 2019 at 03:38:36PM +, Joakim Tjernlund wrote: > Is there a way to tell a running dropbear server to reread host keys if the > keys

dropbear and new host keys?

2019-12-11 Thread Joakim Tjernlund
Is there a way to tell a running dropbear server to reread host keys if the keys has changed? Jocke