--- dropbear-0.42/options-orig.h 2004-06-15 22:08:27.000000000 -0700 +++ dropbear-0.42/options.h 2004-06-27 19:21:50.949969215 -0700 @@ -98,7 +98,7 @@ * generated otherwise. This isn't exactly optimal, although sha1 fingerprints * are not too hard to create from pubkeys if required. */ #define DROPBEAR_SHA1_HMAC -#define DROPBEAR_MD5_HMAC +//#define DROPBEAR_MD5_HMAC /* Hostkey/public key algorithms - at least one required, these are used * for hostkey as well as for verifying signatures with pubkey auth. @@ -116,7 +116,7 @@ /* Whether to do reverse DNS lookups. This is advisable, though will add * code size with gethostbyname() etc, so for very small environments where * you are statically linking, you might want to undefine this */ -#define DO_HOST_LOOKUP +//#define DO_HOST_LOOKUP /* Whether to print the message of the day (MOTD). This doesn't add much code * size */ @@ -139,7 +139,7 @@ * will prevent Dropbear from blocking on the device. This could * however significantly reduce the security of your ssh connections * if the PRNG state becomes simpler. */ -#define DROPBEAR_RANDOM_DEV "/dev/random" +#define DROPBEAR_RANDOM_DEV "/dev/urandom" /* prngd must be manually set up to produce output */ /*#define DROPBEAR_PRNGD_SOCKET "/var/run/dropbear-rng"*/ @@ -171,9 +171,9 @@ /* if you want to enable running an sftp server (such as the one included with * OpenSSH), set the path below. If the path isn't defined, sftp will not * be enabled */ -#ifndef SFTPSERVER_PATH -#define SFTPSERVER_PATH "/usr/libexec/sftp-server" -#endif +//#ifndef SFTPSERVER_PATH +//#define SFTPSERVER_PATH "/usr/libexec/sftp-server" +//#endif /* This is used by the scp binary when used as a client binary */ #define _PATH_SSH_PROGRAM "/usr/bin/ssh"