Ssh >= 8.3 for FIDO resident key support

Software SW help
1

Hello,

I use my turris as an ssh gateway to login to my home network. I’d like to use my yubikey to secure authentication but it requires ssh >= 8.3. Any tricks how I could update the version ? It seems 8.4 is available on openwrt master but I have no idea if there is a way to replace my turris version with this one ?

EDIT: thanks for all your suggestions. I took a snapshot and installed the following package:
libcbor_0.8.0-1_arm_cortex-a9_vfpv3-d16.ipk
libevdev_1.12.0-1_arm_cortex-a9_vfpv3-d16.ipk
libfido2_1.6.0-1_arm_cortex-a9_vfpv3-d16.ipk
libudev-zero_1.0.0-1_arm_cortex-a9_vfpv3-d16.ipk
openssh-client-utils_8.4p1-4_arm_cortex-a9_vfpv3-d16.ipk
openssh-client_8.4p1-4_arm_cortex-a9_vfpv3-d16.ipk
openssh-keygen_8.4p1-4_arm_cortex-a9_vfpv3-d16.ipk
openssh-server_8.4p1-4_arm_cortex-a9_vfpv3-d16.ipk

Restarted sshd and it’s working. Tried rebooting to make sure everything is still ok and it is. Thanks!

1 Like
2

You could try downloading *.ipk from openwrt master archive and install it by hand. And pray that there are no dependency issues. Or switch to HBD branch of TurrisOS and it should be included there. Your choice.

3

You can compile yourself.

4

There is no need to compile it since its in openwrt master archive already compiled. But yeah you could always compile for yourself.

5

HBD does not represent OpenWrt master but (as of now) 21.02.1

6

I see 8.4 in HBD: Index of /hbd/omnia/packages/packages/
(OpenWrt version itself doesn’t seem that important for this thread.)

2 Likes