<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2619.0">
<TITLE>some problems reading rsa/dsa keys</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>Hi people,</FONT>
</P>
<P><FONT SIZE=2>Please excuse this rather long debug output...</FONT>
</P>
<P><FONT SIZE=2>$ uname -a</FONT>
<BR><FONT SIZE=2>SunOS echelon 5.6 Generic_105181-17 sun4u sparc SUNW,Ultra-Enterprise</FONT>
</P>
<P><FONT SIZE=2>$ /usr/local/openssh/bin/ssh -v x.x.x.x</FONT>
<BR><FONT SIZE=2>SSH Version OpenSSH_2.1.1, protocol versions 1.5/2.0.</FONT>
<BR><FONT SIZE=2>Compiled with SSL (0x0090581f).</FONT>
<BR><FONT SIZE=2>debug: Reading configuration data /usr/local/etc/ssh_config</FONT>
<BR><FONT SIZE=2>debug: Applying options for *</FONT>
<BR><FONT SIZE=2>debug: ssh_connect: getuid 1002 geteuid 0 anon 0</FONT>
<BR><FONT SIZE=2>debug: Connecting to x.x.x.x [x.x.x.x] port x.</FONT>
<BR><FONT SIZE=2>debug: Connection established.</FONT>
<BR><FONT SIZE=2>debug: Remote protocol version 2.0, remote software version 2.0.13 (non-commercial)</FONT>
<BR><FONT SIZE=2>datafellows: 2.0.13 (non-commercial)</FONT>
<BR><FONT SIZE=2>Enabling compatibility mode for protocol 2.0</FONT>
<BR><FONT SIZE=2>debug: Local version string SSH-2.0-OpenSSH_2.1.1</FONT>
<BR><FONT SIZE=2>debug: loaded 20 entropy commands from /usr/local/etc/ssh_prng_cmds</FONT>
<BR><FONT SIZE=2>debug: Seeding random number generator.</FONT>
<BR><FONT SIZE=2>debug: OpenSSL random status is now 0</FONT>
</P>
<P><FONT SIZE=2>debug: 3 bytes from system calls</FONT>
<BR><FONT SIZE=2>debug: Command 'arp -a -n' timed out</FONT>
<BR><FONT SIZE=2>debug: 31 bytes from programs</FONT>
<BR><FONT SIZE=2>debug: OpenSSL random status is now 1</FONT>
</P>
<P><FONT SIZE=2>debug: loading PRNG seed from file /export/home/joe/.ssh/prng_seed</FONT>
<BR><FONT SIZE=2>debug: send KEXINIT</FONT>
<BR><FONT SIZE=2>debug: done</FONT>
<BR><FONT SIZE=2>debug: wait KEXINIT</FONT>
<BR><FONT SIZE=2>debug: got kexinit: diffie-hellman-group1-sha1</FONT>
<BR><FONT SIZE=2>debug: got kexinit: ssh-dss</FONT>
<BR><FONT SIZE=2>debug: got kexinit: blowfish-cbc</FONT>
<BR><FONT SIZE=2>debug: got kexinit: blowfish-cbc</FONT>
<BR><FONT SIZE=2>debug: got kexinit: hmac-md5,md5-8,none</FONT>
<BR><FONT SIZE=2>debug: got kexinit: hmac-md5,md5-8,none</FONT>
<BR><FONT SIZE=2>debug: got kexinit: none,zlib</FONT>
<BR><FONT SIZE=2>debug: got kexinit: none,zlib</FONT>
<BR><FONT SIZE=2>debug: got kexinit: </FONT>
<BR><FONT SIZE=2>debug: got kexinit: </FONT>
<BR><FONT SIZE=2>debug: first kex follow: 0 </FONT>
<BR><FONT SIZE=2>debug: reserved: 0 </FONT>
<BR><FONT SIZE=2>debug: done</FONT>
<BR><FONT SIZE=2>debug: kex: server->client blowfish-cbc hmac-md5 none</FONT>
<BR><FONT SIZE=2>debug: kex: client->server blowfish-cbc hmac-md5 none</FONT>
<BR><FONT SIZE=2>debug: Sending SSH2_MSG_KEXDH_INIT.</FONT>
<BR><FONT SIZE=2>debug: bits set: 492/1024</FONT>
<BR><FONT SIZE=2>debug: Wait SSH2_MSG_KEXDH_REPLY.</FONT>
<BR><FONT SIZE=2>debug: Got SSH2_MSG_KEXDH_REPLY.</FONT>
<BR><FONT SIZE=2>debug: keytype ssh-dss</FONT>
<BR><FONT SIZE=2>debug: keytype ssh-dss</FONT>
<BR><FONT SIZE=2>debug: Host 'x.x.x.x' is known and matches the DSA host key.</FONT>
<BR><FONT SIZE=2>debug: bits set: 536/1024</FONT>
<BR><FONT SIZE=2>debug: len 40 datafellows 15</FONT>
<BR><FONT SIZE=2>debug: dsa_verify: signature correct</FONT>
<BR><FONT SIZE=2>debug: Wait SSH2_MSG_NEWKEYS.</FONT>
<BR><FONT SIZE=2>debug: GOT SSH2_MSG_NEWKEYS.</FONT>
<BR><FONT SIZE=2>debug: send SSH2_MSG_NEWKEYS.</FONT>
<BR><FONT SIZE=2>debug: done: send SSH2_MSG_NEWKEYS.</FONT>
<BR><FONT SIZE=2>debug: done: KEX2.</FONT>
<BR><FONT SIZE=2>debug: send SSH2_MSG_SERVICE_REQUEST</FONT>
<BR><FONT SIZE=2>debug: buggy server: service_accept w/o service</FONT>
<BR><FONT SIZE=2>debug: got SSH2_MSG_SERVICE_ACCEPT</FONT>
<BR><FONT SIZE=2>debug: authentications that can continue: publickey</FONT>
<BR><FONT SIZE=2>debug: key does not exist: /export/home/joe/.ssh/id_dsa</FONT>
<BR><FONT SIZE=2>Permission denied (publickey).</FONT>
<BR><FONT SIZE=2>debug: Calling cleanup 0x4e754(0x0)</FONT>
<BR><FONT SIZE=2>debug: writing PRNG seed to file /export/home/joe/.ssh/prng_seed</FONT>
<BR><FONT SIZE=2>debug: Calling cleanup 0x49204(0x0)</FONT>
</P>
<P><FONT SIZE=2>$ cat /usr/local/etc/ssh_config</FONT>
<BR><FONT SIZE=2># This is ssh client systemwide configuration file. This file provides </FONT>
<BR><FONT SIZE=2># defaults for users, and the values can be changed in per-user configuration</FONT>
<BR><FONT SIZE=2># files or on the command line.</FONT>
</P>
<P><FONT SIZE=2># Configuration data is parsed as follows:</FONT>
<BR><FONT SIZE=2># 1. command line options</FONT>
<BR><FONT SIZE=2># 2. user-specific file</FONT>
<BR><FONT SIZE=2># 3. system-wide file</FONT>
<BR><FONT SIZE=2># Any configuration value is only changed the first time it is set.</FONT>
<BR><FONT SIZE=2># Thus, host-specific definitions should be at the beginning of the</FONT>
<BR><FONT SIZE=2># configuration file, and defaults at the end.</FONT>
</P>
<P><FONT SIZE=2># Site-wide defaults for various options</FONT>
</P>
<P><FONT SIZE=2># Host *</FONT>
<BR><FONT SIZE=2># ForwardAgent yes</FONT>
<BR><FONT SIZE=2># ForwardX11 yes</FONT>
<BR><FONT SIZE=2># RhostsAuthentication yes</FONT>
<BR><FONT SIZE=2># RhostsRSAAuthentication yes</FONT>
<BR><FONT SIZE=2># RSAAuthentication yes</FONT>
<BR><FONT SIZE=2># PasswordAuthentication yes</FONT>
<BR><FONT SIZE=2># FallBackToRsh yes</FONT>
<BR><FONT SIZE=2># UseRsh no</FONT>
<BR><FONT SIZE=2># BatchMode no</FONT>
<BR><FONT SIZE=2># CheckHostIP yes</FONT>
<BR><FONT SIZE=2># StrictHostKeyChecking no</FONT>
<BR><FONT SIZE=2># IdentityFile ~/.ssh/identity</FONT>
<BR><FONT SIZE=2># Port 22</FONT>
<BR><FONT SIZE=2># Protocol 2,1</FONT>
<BR><FONT SIZE=2># Cipher 3des</FONT>
<BR><FONT SIZE=2># EscapeChar ~</FONT>
</P>
<P><FONT SIZE=2># Be paranoid by default</FONT>
<BR><FONT SIZE=2>Host *</FONT>
<BR><FONT SIZE=2> ForwardAgent no</FONT>
<BR><FONT SIZE=2> ForwardX11 yes</FONT>
<BR> <FONT SIZE=2> RSAAuthentication yes </FONT>
<BR><FONT SIZE=2> FallBackToRsh no</FONT>
<BR><FONT SIZE=2> IdentityFile ~/.ssh2/identification</FONT>
<BR><FONT SIZE=2> Port x</FONT>
<BR><FONT SIZE=2> Protocol 2</FONT>
</P>
<P><FONT SIZE=2>$ cat .ssh/identification</FONT>
<BR><FONT SIZE=2>IdKey joe_dsa_1024</FONT>
</P>
<BR>
<P><FONT SIZE=2>So, why doesn't the damn thing read the correct key? The key was generated by ssh-2.0.13, it's a generic 1024bits DSA.</FONT>
</P>
<P><FONT SIZE=2>Thanks,</FONT>
<BR><FONT SIZE=2>Emmanuel</FONT>
</P>
</BODY>
</HTML>