Config to have "ssh too-old-host" error out (with chosen message, and sans actual connection attempt)?
Jochen Bern
Jochen.Bern at binect.de
Wed Jul 2 02:40:15 AEST 2025
On 01.07.25 17:56, MCMANUS, MICHAEL P wrote:
> As I understand it, Pageant only accepts PuTTY's native format
> for private keys. There is a method in PuTTYgen to import an
> OpenSSH private key and export it in PuTTY format. Just select
> "Import key" from the Conversions menu, then save the imported
> key as though you just generated it.
Or, in the case of a (Linux) CLI, "puttygen $SSH_PRIVKEY -o
$PPK_PRIVKEY"; I did that when I tried puTTY running against *Pageant*
for an agent, and yes, both converted RSA keys work there. But when
puTTY talks to my normal ssh-agent, the 8kb (OpenSSH format on disk) RSA
keypair works but the 4kb (PEM format) RSA keypair doesn't.
(FWIW, since alternatives like "use the admin *WebUI* instead" aren't
available for *all* affected target systems, my stop-gap measure was to
write a script to lauch a Pageant+puTTY stack detached from the
ssh-agent - *still* using the PPK-converted privkeys, of course.)
Kind regards,
--
Jochen Bern
Systemingenieur
Binect GmbH
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4336 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20250701/6cc9d8f7/attachment-0001.p7s>
More information about the openssh-unix-dev
mailing list