PubkeyAuthentication broken because ssh cannot ready it's identity keys

elf at buici.com elf at buici.com
Sat May 11 15:57:26 EST 2002


This is a copy of the bug report I sent debian.

Package: ssh
Version: 1:3.0.2p1-9
Severity: important

I want to be able to login between two hosts without entering
passwords.  

  ssh-keygen -t dsa
  * Copy key to other machine
  cat id_dsa.pub >> .ssh/authorized_keys
  chmod 600 .ssh/authorized_keys
  
Trouble is that the originating host appears unable to parse its own
keys.  This is the debug output from the machine that successfully
performs the password-free login:

debug1: read PEM private key done: type DSA
debug1: read PEM private key done: type RSA
debug1: identity file /home/elf/.ssh/identity type 0
debug1: identity file /home/elf/.ssh/id_rsa type -1
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug2: key_type_from_name: unknown key type '-----END'
debug1: identity file /home/elf/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.0.2p1 Debian 1:3.0.2p1-9

The other host reports differently:

debug1: read PEM private key done: type DSA
debug1: read PEM private key done: type RSA
debug1: identity file /home/elf/.ssh/identity type 0
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug2: key_type_from_name: unknown key type '-----END'
debug1: identity file /home/elf/.ssh/id_dsa type 2
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug2: key_type_from_name: unknown key type '-----END'
debug1: identity file /home/elf/.ssh/id_rsa type 1
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.0.2p1 Debian 1:3.0.2p1-9

Note that I'm using the id_dsa key for authentication.

Here is the dsa key and no, I'm not concerned about being
compromised. 


-----BEGIN DSA PRIVATE KEY-----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-----END DSA PRIVATE KEY-----



-- System Information
Debian Release: 3.0
Kernel Version: Linux cerise 2.4.18 #15 Fri May 10 00:26:54 PDT 2002 i686 unknown

Versions of the packages ssh depends on:
ii  debconf        1.0.32         Debian configuration management system
ii  libc6          2.2.5-6        GNU C Library: Shared libraries and Timezone
ii  libpam-modules 0.72-35        Pluggable Authentication Modules for PAM
ii  libpam0g       0.72-35        Pluggable Authentication Modules library
ii  libssl0.9.6    0.9.6c-2       SSL shared libraries
ii  libwrap0       7.6-9          Wietse Venema's TCP wrappers library
ii  zlib1g         1.1.4-1        compression library - runtime

--- Begin /etc/ssh/ssh_config (modified conffile)
Host *
  ForwardX11 yes 

--- End /etc/ssh/ssh_config

--- Begin /etc/ssh/moduli (modified conffile)
Config file not present or no permissions for access

--- End /etc/ssh/moduli

--- Begin /etc/init.d/ssh (modified conffile)
Config file not present or no permissions for access

--- End /etc/init.d/ssh





More information about the openssh-unix-dev mailing list