Просмотры
Материал из PocketZ_wiki
 | |
| Разработчик | DejaVu software |
| ОС | Windows Mobile 2003 Windows Mobile 5 Windows Mobile 6 |
| Текущая версия | 2.10 |
| Лицензия | Shareware |
| Сайт | [1] |
 Обсуждение на форуме. | |
Содержание |
Описание
Программа является Telnet/SSH-клиентом, поддерживает SSH1, SSH2, Telnet, Serial. PockeTTY, пригодится администраторам и тем, кому нужно следить за удаленными системами.
PockeTTY™ turns your Windows CE device into a portable terminal emulator. Use it to remotely administer your home Linux machine, check your e-mail at work, or test hardware through a direct connection. PockeTTY offers four kinds of connections:
- SSH - Log into a remote machine through a secure connection without worrying about someone grabbing your password. Or keep your password really safe by authenticating with a certificate instead. Provides SSH1 and SSH2 support (with basic SCP for file transfers), a variety of encryption methods and MAC's, and the ability to forward ports.
- SSL - Connect directly to an SSL-encrypted service, or proxy it through PockeTTY to an application which is not SSL-aware. Great for checking the status of SSL-based web servers, using SSL-encrypted Telnet services, or continuing to use a legacy application that doesn't understand what SSL is.
- Telnet - Easily connect to most any remote host in a flash! This unencrypted connection method is not recommended for login sessions, but for checking on your webserver it may be just what you need. If you need secure Telnet you can easily tunnel through SSL (we love security!).
- Serial - Connect directly to your IR port, configure your network gear, anything that can be reached through a serial line. A real treat for you hardcore geeky types!
FAQ
Соединение
Q:Когда я пытаюсь подклюичтся через SSH (1 or 2), я получаю сообщение "corrupted CRC bytes from server" или "Received corrupted MAC." ====
A:Если сервер к которому Вы хотите подключится работает под OpenSSH версии 3.1p1 или 3.4p1, то вы наверняка столкнулись с известным багом OpenSSH. Это не проблема самой PockeTTY. Свяжитесь с ситемным администратором. Если сервер всёже OpenSSH 3.1p1, используйте SSH2/Blowfish. Если OpenSSH 3.4p1, то вы можете использовать SSH1/3DES или любой вариант SSH2.
Q:Когда я пытаюсь подсоединиться к моему свитчу Cisco через SSH1, он моментально отключается, не запрашивая мой пароль.
A:Международные версии Cisco IOS поддерживают только DES шифрование; только "домашние" версии IOS поддерживают 3DES. Так как PockeTTY сейчас не поддерживает (небезопасное) DES шифрование, он может подключатся только к "домашним" версиям IOS. Также, обратите внимание на то, что Cisco IOS до версии 12.1(3)T содержит серьёзные ошибки, которые могут помешать соединению.
Q:Соединение по SSH2 проходит очень медленно. С этим можно что-то поделать?
A:Методы аутентефикации SSH2's требуют вычислений с очень большими числами. Это очень безопасно, но также медленно. Наладонники имеют более медленные процессоры, чем настольные PC, и не имеют сопроцессоров, и имеют меньшее количество регистров. Все эти факторы отрицательно сказываются на скорости.
That said, there are some things you can do. You can set the "security slider" to the "Faster connection" position, as described in section 3.3.8 of the manual. You can also choose to use RSA host keys rather than DSS (section 3.3.7), and/or a fast cipher such as Blowfish (section 3.3.1). Note that each of these will slightly decrease the security of your connection, so you'll need to find where you're comfortable within the speed vs. security tradeoff.
Q:I can't get PockeTTY to connect using a certificate. The certificate works fine with other SSH2 clients.
A:As described in section 3.3.6 of the manual, PockeTTY can only accept a private DSS certificate that is in PEM format. Your certificate may not be readable for some reason or is not in PEM format. A sample encrypted certificate in the proper format appears below.
-----BEGIN DSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,E12DEB2D03663CF5 kAI+PggBL/qcKaV9CpPOf22xWaze1BGimfcHxyUa2SGYEA/qL3gVgjNXo8MKMEiC r4gVDoxIhrqRQc6tO/VHxNuQyo32lwccV/RUyxffsMV9hk13VP0schiDiIurGz5u vUEWQntGiy+uan8ESX1+KECK9u8g/sfGUhJY7XIQ54TvwRBDCDmSr8LIt6RDTxZC sIBwPMPhGv+MeVFjJU1KP2ah9BVpp18w5C4m7EMXYGZYS6LoEdVeZ8JU4TTf1LFu r0uxXtMzi9MqEq1XbhkNHtg+TpvxpEYmFseQWrBQERG6odg9MMTCyCXSpjrDLMd7 4xkQKcZYvCDmsQivnZrREPUV0RRHNe793XtZjEk34CoNstTgeDjLXlOjjwWzdfuo Mj9t9yC0vUpkLchnSChPtqcbPCmMAfvIEGsGST4zOAw8apc/t27UzgL1cxMAWTSQ mYxI5OqUs0HYl5bIY3+sb7LYE/640n+JxEQf86JsC1+kIgsPKwG+CmGVFccdDG7/ NuVQok1jRhAzW+xr5tOBc67jk3yCGowxrqAB/NEA93VTajn2DGVKLGONY9W0UpFi 0cPGM4B4tmVA3NOHVqdUeA== -----END DSA PRIVATE KEY-----
PockeTTY also accepts unencrypted certificates, which look like this:
-----BEGIN DSA PRIVATE KEY----- MIIBuwIBAAKBgQDCq9Y3N2yyyC3aGUQ3v8iKGj8TcVKKueGJy2cYpFm2pdCp8Lo/ 2loEMrPEcA8SkOl0FOicNYbzEKZf0h+KQzIp1v2MQWqmOCLzjudESbYv7lT9p0aH 8gUGCPaCI5woGE8GJ7HmovWdeR3UEkX1t7cQpVxXy2vQqXHWyUV8+R5IrQIVAImJ KU/lm0By9jPPMHpd6IZN4VUZAoGAX9pZw2ykuDMqf+9GTGmiN7IS7/CqKgipt9Ch FAjUHpq0rvVI7d6gMQBfiw5akX73+NrGUpTGy2/1jz71kEmB0A09XVuREqPAqxBr HaoXBGCR7Rzf4BJJwzAay2GKNf67ia56WSgR1UnZmznHeFSKlGhDN/MFosDovtH4 hUiS4toCgYEAiJUR9XhRv9OxFk4yN3erDTWXI4XOmipVMKrrzVgDdC7Lo7gCW8zv dS6ak7GvBCDBeLsadtjeviGnTz4gbWJJXjNIngh2OtYlskQS5g+cArDEyRSiqs/h zLT1uuCzvt6W0LNPOBbS9fkKFLGybKkCjzPHITAzRv+n63Qo4H7sI/kCFDD8/MeA lW7ybFslMx1zzxr9mKm2 -----END DSA PRIVATE KEY-----If you have OpenSSH installed on your server, the command ssh-keygen -t dsa will generate a key in this format.
Q:I'm trying to connect using SSH2 and I keep getting "Password (incorrect) for username on host hostname:", even though I know I've entered my password correctly.
A:The server you're trying to connect to has SSH's password authentication turned off to use some other type of password system, like S/KEY. For OpenSSH, in the /etc/ssh/sshd_config file on the server the PasswordAuthentication option is set to 'no'. This must be set to 'yes' for PockeTTY to connect. A future version of PockeTTY will provide support for other authentication methods such as S/KEY. For servers other than OpenSSH, consult server's the documentation for information on how to re-enable password authentication.
Q:I want to set up a remote port forward (host -> PockeTTY), but in section 3.2.3 of the manual it only describes local port forwards (PockeTTY -> host). How can I set up a remote port forward?
A:The current version of PockeTTY only supports local port forwards. There is no support for remote port forwards.
Q:When I try to connect I see "Unknown error 10065".
A:This error indicates that your device does not currently have a network connection. Some applications such as Pocket IE will attempt establish a network connection if one does not already exist. If you have a pre-WM2003 device PockeTTY assumes that you already have a connection. You need to establish a network connection before using PockeTTY, either using Pocket IE or through some other means. If your device runs WM2003 or later and you're getting this message, let us know.
Display Issues
Q:Why doesn't the terminal session take up the entire screen? There's lots of space below/around it.
A:The default for terminal dimensions is set to 24 rows by 80 columns. Some devices, particularly VGA devices, are capable of displaying a much larger terminal. Here's how to start using all of the available screen (or as much as you want to):
- Disconnect any sessions you have open.
- Change the default number of rows and columns under Edit > Global Preferences. Now the next time you configure a new session, the rows and columns in the Terminal settings will default to this value. Note that this will NOT change your saved sessions, since each one saves its own settings for number of rows and columns.
- If you have any saved sessions you have to change these too. To do this, choose a saved session under Session > Connect and tap the Edit button then the Terminal button. Change the rows and columns, tap OK and Connect, and once connected choose File > Save Session. Saving these altered settings with the same name as the original will overwrite it. Now the next time you choose this saved session it will use the new settings. Do this for all of your saved sessions.
Q:Why isn't there support for higher resolution displays, like VGA?
A:If you're expecting PockeTTY to put your device into VGA mode, it won't. You can use a third-party application such as SE_VGA to do so. NOTE: If you're going to use this or any similar application, please heed any warnings about backing up your device first.
Once your device is in VGA mode PockeTTY will work just fine. If you increase the number of rows and columns, PockeTTY will increase the size of its window and will use the entire screen, even on a VGA screen. Also if you increase the font size PockeTTY's window size will increase.
Q:Why don't you provide a landscape mode?
A:The latest Windows Mobile OS has native support for landscape mode, and PockeTTY works fine in landscape. For older OS versions there are external tools that can switch the display to landscape. We feel that these solutions are sufficient and therefore have decided not to build a landscape mode into PockeTTY itself.
Hardware Questions
While hardware issues aren't really what we deal with, we've had some questions so often that we decided to put them on the FAQ.
Q:I'd like to use PockeTTY to connect to a hub/router/whatever through a serial connection, but I don't have the connector. What can I do?
A:Socket Communications makes a CompactFlash card that provides an RS-232 connector, if you have a device with a CF slot. Since most modern devices don't, your only other option would be a Bluetooth serial adapter. We've used the Cordless Serial Adapter from Socket Communications on our devices with some success, but unfortunately, Bluetooth is quite persnickety and there's no way to tell whether or not this is going to work for you.
Q:I wish my hardware keyboard had a Ctrl/Esc/whatever key. Can PockeTTY remap the keys for me?
A:Section 4.2.5.1 of the manual describes Soft Control Key handling, which may solve your problem. We didn't put full keyboard remapping functionality into PockeTTY because there's already a great product out there that does this. Have a look at AE Keyboard Mapper. Tell 'em we sent you.