[Bug 2901] ssh-keygen generates an invalid key sometimes

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Wed Aug 29 18:05:13 AEST 2018


https://bugzilla.mindrot.org/show_bug.cgi?id=2901

--- Comment #3 from Alexander Sergeyev <sergeev917 at gmail.com> ---
(In reply to Thomas Deutschmann from comment #2)
> Like said in the Gentoo bug I cannot confirm this. I see this
> problem on boxes which have never seen openssl-1.0.2p.

In order to ease reproduction I've prepared docker-based scripts that
compile openssl and openssh from sources on alpine:
https://github.com/sergeev917/openssh-openssl-bug-repro. Even without
using docker it's a better and more complete guide to reproduce the
issue.

The reproducer demonstrates three points: (1) a key loading failure on
openssh + openssl-1.0.2p (2) that the failed key could be load
successfully with openssh + openssl-1.0.2o (3) that `ssh-keygen -p`
might generate bogus "invalid format" messages.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list