GL-B1300 incompatible with Ubuntu due no SHA256 Support

a1ecbr0wn · 2020-06-08T10:24:24.406Z

I have the latest version of Ubuntu 20.04 and I am not able to connect via SSH to my GL-B1300’s anymore because the firmware only supports SHA1 as the hash for the DH key exchange which has been deprecated in the latest operating systems as it is considered to be insecure. I dug a little into this and found that dropbear buidls from 2016 supported SHA256 but my routers with the latest firmware all seem to be stuck on dropbear 2015.67-1, i.e. a 5 year old version. Is there a way to remove SHA1 and use SHA256 as I would like my router to have the most up to date security?

Are there any plans afoot to upgrade the firmware such that I can ssh to my router again? I assume if Ubuntu have done this, other versions of Linux and Windows cannot be far behind.

alzhao · 2020-06-08T10:40:43.028Z

Thanks for reporting this. Will check if we can update dropbear.

hogan · 2020-06-09T07:03:20.274Z

@a1ecbr0wn hi, we are currently updating the dropbear version. You can uninstall the old version and update the latest version dropbear v2017.75 through the webpage.