Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 

dropbear R.I.P !

In sk97638 Check Point Processes and Daemons under 1800 / 1600 / 1500 / 1400 / 1200R / 1100 / 900 / 700 / 600 appliances we find a list of the 4 GAiA  Embedded daemons, and the last is

dropbear

Description LightWeight SSH server.
  • This process does not exist starting from the R80.20.60 and R81.10 versions.
  • This process does not exist on 900, 700, and 600 models.
Notes "cpwd_admin list" command shows the process as "dropbear".
To Stop none
To Start none

 

I can find it on my 1550 as well as on my 730 - but according to the SK, only 1500 / 1600 / 1800 with firmware lower R80.20.60 have it ? I have given feedback, but can anyone see dropbear on other models and what about R81.10.00 ?

CCSE CCTE CCSM SMB Specialist
0 Kudos
4 Replies
Amir_Ayalon
Employee
Employee

We replaced dropbear(SSH server) with openssh (same as in MT).

effective in R80.20.60 and R81.10.00

 

0 Kudos

This is mentioned in neither Release Notes nor CLI guides, no sshd based commands are listed, but still dropbear, see:

Example 1 - Standard output

[Expert@HostName]# cpwd_admin list
APP        PID    STAT  #START  START_TIME
RNGD       3076   E     1       [16:03:47] 14/9/2021   N
/pfrm2.0/bin/jitterentropy_rngd -v
DROPBEAR   11318  E     1       [16:03:51] 16/9/2021   N    dropbear -F -j
-k -p 22 -r /pfrm2.0/etc/dropbear_rsa_host_key -b /opt/fw1/conf/sshd_
banner.txt

Quantum Spark 1500, 1600 and 1800 Appliance Series R81.10.00 CLI Reference Guide | 1448

CCSE CCTE CCSM SMB Specialist
0 Kudos
Amir_Ayalon
Employee
Employee

thanks

I'll check

0 Kudos
PhoneBoy
Admin
Admin

And you replaced the ssh client too 😉

[Expert@One550]# ssh -V
OpenSSH_8.5p1, OpenSSL 1.1.1n 15 Mar 2022
[Expert@One550]#

0 Kudos