| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
General
| Excerpt | ||
|---|---|---|
| ||
Adds capability to OpenSync nodes to accept SSH connections and provide remote Shell access through pre-defined configuration and for a pre-defined duration of time. |
By default, access through Secure Shell (SSH) to an OpenSync node is not supported for security reasons. The “RevSSH” feature adds capability to OpenSync nodes to accept SSH connections and provide remote Shell access through pre-defined configuration and for a pre-defined duration of time.
...
SSH Server, Client and tools (key generation and copy tools etc.) packages (e.g. dropbear)Limitations
Limitations
Dropbear does not support remote TCP forward parameters addresses to be IPv6 addresses (specified in square brackets): So the following
ssh foo@$REVSSH_SERVER -R[::1]:30337:[::1]:40337 -p 2222does not work. Hence, the OpenSync dropbear backend implementation does not support TCP forward parameters with IPv6 addressesDropbear versions such as v2017.75 or v2019.78 support ssh-rsa signatures and not rsa-sha2-256. Support for these signature algorithms was added in Dropbear version 2020.79
...