Updated script for fast SSH connections

[Funkanzan]

This procedure currently supports clients on Mac OS/X and Linux on x86 processors

Please note: we've heard there are issues with OS/X El Capitan (newest Mac OS).

You can use this script to make direct SSH connections from a command line terminal on your Mac OS/X or Linux x86 computer to an SSH host (ex. Raspberry Pi). This eliminates the need to manually login at www.weaved.com to generate a hostname and port to use with your ssh client. No more copy/paste and copy/paste!

This is an update to the script described here. It is offered primarily to show the use of API calls and the client mode of the daemon. The latest update to the script no longer saves credentials as clear text. The security key is stored as an "Auth Hash".

If you prefer not to cache this, just change the following line:

From:

SAVE_AUTH=1

To:

SAVE_AUTH=0

Then you will need to enter your Weaved username and password each time you run the script.

Changes:
1) Caches your auth hash instead of username and password
2) Caches the port assignment for each device -as a result, multiple simultaneous connections are possible without overlapping ports
3) Caches the Device List for your account
4) Uses the device name instead of UID
5) Allows display of your device list including current status for each connection

Initially, the script may take longer to connect to your device as it is logging into Weaved's servers to get the device list. When you connect to a new device, you may get warnings from the SSH client. Follow the instructions shown in the warning message to run ssh-keygen for each new connection to add it to the known_hosts file. Run the script again and you will be able to log in to your SSH server. Subsequent logins will go faster.

Download the Weaved daemon
Get weavedConnectd.macosx for Mac OS/X (Intel) here:
https://github.com/weaved/misc_bins_and_scripts/raw/master/connectd/weavedConnectd.macosx

Get weavedConnectd.linux for x86 Linux (tested with Ubuntu 14.04) here:
https://github.com/weaved/misc_bins_and_scripts/raw/master/connectd/weavedConnectd.linux

Copy this file from the download location to /usr/bin and name it weavedConnectd, e.g.

sudo cp weavedConnectd.macosx /usr/bin/weavedConnectd

Make it executable:

sudo chmod +x /usr/bin/weavedConnectd

If sudo asks for your password, give it your Mac or Linux account login password, not your Weaved password.

Download launcher scripts
Now go to this folder at Github:

https://github.com/weaved/misc_bins_and_scripts/tree/master/ssh_client

and download the lib.sh and sshw.sh scripts to your computer.

Make them executable using:

chmod +x lib.sh sshw.sh

=====================================================================
Example: Start a direct ssh connection from a client (Linux x86 or Mac OS/X)

You'll need:

• Your Weaved account username and password.
• The Weaved Device Name
• Your ssh login name and password

./sshw.sh [SSH_NAME]@[DEVICENAME]

e.g.

./sshw.sh pi@Raspberry-Pi-ssh

Debugging your connection

Verbose output (which can be useful for debugging any issues you may encounter) can be enabled by adding 1 or two "-v" right after the script name on the command line:

./sshw.sh -v pi@Raspberry-Pi-ssh

or

./sshw.sh -v -v pi@Raspberry-Pi-ssh

(better for debugging login issues).

Manual Pages
Get a full description of command line options and how the script works:

./sshw.sh -m | less

Known Issues

1) Some combinations of client and server router equipment may prevent a direct connection using this approach. Proxy-type connections (through the web portal) should work.

[Funkanzan]

[smog1]

HI,
Is there any way to use ssh keys ?
Thanks

[Funkanzan]

Sure, just requires a modification to the script. Anyone want to give it a try?

[smog1]

Hi
If I use ssh-add to add my private key before using the script it's good.
Thanks

[spatiald]

Right up front I want to say thank you for a great product and concept.

For Weaved devs and security-minded folks...I would highly recommend changing line 48 to enable encrypted communications to the Weaved server over the wire. The default is http which passes your username/password in plain text over the internet. Not good.

@WeavedDevs Why this insecure method? Additionally, you previously mentioned that you recognized the insecurity of storing the username/password locally in plain text; has there been any progress on that front?

Original:

apiMethod="http://"

Recommend change to:

apiMethod="https://"

[Funkanzan]

Thanks for the message. I've changed the apiMethod to https at Github. Dealing with the username/password cache is in the backlog!

[spatiald]

@Funkanzan Thanks for the update; keep up the great work!

[CraigHolloway]

This is great

To make this work on El Capitan the following steps are required:

In El Capitan you can't modify anything in /System, /bin, /sbin, or /usr (except /usr/local); so instead use the directory /usr/local/ instead of just /usr/

sudo cp weavedConnectd.macosx /usr/local/bin/weavedConnectd
sudo chmod +x /usr/local/bin/weavedConnectd

in the file sshw.sh find and replace all occurrences of /usr/bin with /usr/local/bin

sed -i .bak 's#/usr/bin#/usr/local/bin#g' sshw.sh
rm sshw.sh.bak

follow all other steps.

Is is also possible to modify this tool easily to transfer files using sftp, simply do the following

create a new file for sftp

cp sshw.sh sftpw.sh

replace line 770 (and other occurrences) of sftp.sh: ssh "${user}127.0.0.1" -p$port with sftp -oPort=$port "${user}127.0.0.1"

sed -i .bak 's#ssh\"${user}127.0.0.1"-p$port#sftp-oPort=$port\"$Puser}127.0.0.1"#g' sftpw.sh
rm sftpw.sh.bak

this is not the most elegant way to do this as it doesn't change everything, but it does work.

If you have already set up the ssh service, then this will work automatically for free

[Funkanzan]

Hi Craig,

Thanks for the helpful input.

[mycal]

https://github.com/weaved/misc_bins_and_scripts/tree/master/ssh_client

has been updated to not to cache the password but a token. The token will be valid until you change the password on the account.

[FinHorsley]

I have successfully downloaded the weavedConnectd.macosx file, however when i come to run the sudo cp weavedConnectd.... command, I am getting an error that no such file or directory works.

Any one have any ideas?

[Funkanzan]

First, make sure it's executable, e.g.

sudo chmod +x weavedConnectd.macosx

Also, it should be in a folder that is in your path, or you'll need to refer to it explicitly, e.g.:

./weavedConnectd.macosx

[FinHorsley]

Using connection log : /Users/Fin 1/.weaved/log.10921.txt
weavedConnectd daemon not found In path
Error in starting weavedConnectd daemon or connecting to pissh (3)
Removing connection log.

HELP!

[Funkanzan]

I'll help you if you help me by telling me:
1) The OS of the system you are trying to run the script on
2) What you've done up to now in a little more detail

[FinHorsley]

I am running El Capitan:

1. Have followed the same script as above
2. I followed CraigHollowyays steps to change the location of /usr/bin to /usr/local/bin, although despite that, have followed all the same steps that are described in the instructions.

[Funkanzan]

Find this line in sshw.sh:

EXE=weavedConnectd

and modify it to say:

EXE=weavedConnectd.macosx

Save and try again. Better?

[FinHorsley]

Now, please enter your password:
grep: /Users/Fin: No such file or directory
grep: 1/.weaved/endpoints: No such file or directory
Connecting...
./sshw.sh: line 1403: $AUTH: ambiguous redirect
weavedConnectd daemon not found In path
Error in starting weavedConnectd daemon or connecting to pissh (3)
./sshw.sh: line 533: kill: (22488) - No such process

Tried what you said, although still receiving this error

[Funkanzan]

I'm assuming that:
1) weavedConnectd.macosx is in /usr/local/bin
2) The file has been made executable if needed by running

sudo chmod +x /usr/local/bin/weavedConnectd.macosx

3) You can run the command:

weavedConnectd.macosx -n

at the command line even if /usr/local/bin is not the current directory.

Please confirm.

[FinHorsley]

weavedConnectd.macosx -n

-bash: weavedConnectd.macosx: command not found

no I am getting this error when running the command