Config to have "ssh too-old-host" error out (with chosen message, and sans actual connection attempt)?

Jochen Bern Jochen.Bern at binect.de
Wed Jul 2 02:40:15 AEST 2025


On 01.07.25 17:56, MCMANUS, MICHAEL P wrote:
> As I understand it, Pageant only accepts PuTTY's native format
> for private keys. There is a method in PuTTYgen to import an
> OpenSSH private key and export it in PuTTY format. Just select
> "Import key" from the Conversions menu, then save the imported
> key as though you just generated it.

Or, in the case of a (Linux) CLI, "puttygen $SSH_PRIVKEY -o 
$PPK_PRIVKEY"; I did that when I tried puTTY running against *Pageant* 
for an agent, and yes, both converted RSA keys work there. But when 
puTTY talks to my normal ssh-agent, the 8kb (OpenSSH format on disk) RSA 
keypair works but the 4kb (PEM format) RSA keypair doesn't.

(FWIW, since alternatives like "use the admin *WebUI* instead" aren't 
available for *all* affected target systems, my stop-gap measure was to 
write a script to lauch a Pageant+puTTY stack detached from the 
ssh-agent - *still* using the PPK-converted privkeys, of course.)

Kind regards,
-- 
Jochen Bern
Systemingenieur

Binect GmbH
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4336 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20250701/6cc9d8f7/attachment-0001.p7s>


More information about the openssh-unix-dev mailing list