Re: dropbear-bin ssh key conversion on Buster
On 3/31/2020 10:12 PM, André Rodier wrote:
> Hello,
>
> I have a Debian Buster installed, with a dropbear SSH server.
>
> The dropbear-bin package, comes with a tool to convert keys fron
> OpenSSH. This tool worked on Stretch, but is now broken on Buster.
>
> I tried the Bullseye version, and it is broken too.
>
> For instance, the following command:
>
>> dropbearconvert openssh dropbear \
>> /etc/ssh/ssh_host_ecdsa_key \
>> /etc/dropbear-initramfs/dropbear_ecdsa_host_key
>
> Produce this error:
>
>> Error: Unrecognised key type
>> Error reading key from '/etc/ssh/ssh_host_ecdsa_key'
>
> - Key conversion was working on Stretch.
> - I tried RSA keys, and it fails too.
>
> I found some information here:
> https://bbs.archlinux.org/viewtopic.php?id=250512
>
> But the process still fails.
>
> - Does someone has the same issue?
> - I am using this to unlock a LUKS encrypted drive over SSH.
>
Try converting your key to the old openssh format:
ssh-keygen -p -m pem -f <key-to-convert>
then retry dropbearconvert
--
John Doe
Reply to: