openssh 8.8 not working anymore about ssh-key-authority HOT 11 OPEN

Sure :)
It will be great if SKA works with such a devices.

from ssh-key-authority.

Would it be possible to implement the new libssh2

from ssh-key-authority.

Would it be possible to implement it?

from ssh-key-authority.

Is there a PHP library for it?

from ssh-key-authority.

As far as i know the latest libssh2 can do this.

from ssh-key-authority.

I have the same issue when I try to sync keys with AlmaLinux 9.1

Nov 25 09:03:33 qwe sshd[21187]: debug1: do_cleanup [preauth]
Nov 25 09:03:33 qwe sshd[21187]: debug1: monitor_read_log: child log fd closed
Nov 25 09:03:33 qwe sshd[21189]: debug1: userauth-request for user root service ssh-connection method publickey [preauth]
Nov 25 09:03:33 qwe sshd[21189]: debug1: attempt 0 failures 0 [preauth]
Nov 25 09:03:33 qwe sshd[21187]: debug1: do_cleanup
Nov 25 09:03:33 qwe sshd[21187]: debug1: PAM: cleanup
Nov 25 09:03:33 qwe sshd[21187]: debug1: Killing privsep child 21188
Nov 25 09:03:33 qwe sshd[21189]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 25 09:03:33 qwe sshd[21189]: debug1: PAM: initializing for "root"
Nov 25 09:03:33 qwe sshd[21189]: debug1: PAM: setting PAM_RHOST to "10.10.10.10"
Nov 25 09:03:33 qwe sshd[21189]: debug1: PAM: setting PAM_TTY to "ssh"
Nov 25 09:03:33 qwe sshd[21189]: Received disconnect from 10.10.10.10 port 56792:11: PECL/ssh2 (http://pecl.php.net/packages/ssh2) [preauth]
Nov 25 09:03:33 qwe sshd[21189]: Disconnected from authenticating user root 10.10.10.10 port 56792 [preauth]

I tried with adding

PubkeyAcceptedKeyTypes=+ssh-rsa

but it fails again

When I try to execute on command line from SKA server:

ssh [email protected] -i /path/private/key/keys-sync

it connects successfully

Any ideas?

from ssh-key-authority.

To execute ssh is not the same because a php Library called libssh2 is used.
As far as i now libssh2 already could to this but it need to be implemented.

In the meantime you can activate ssh-rsa on the client side.

You have to set these two settings on the client side:

PubkeyAcceptedAlgorithms +ssh-rsa
HostkeyAlgorithms +ssh-rsa

from ssh-key-authority.

Hello.

I complied the last version of libssh2 and edited your code to work with devices which aren't ssh-rsa.
If you like to have the changes just inform me.

Thanks & Greets

from ssh-key-authority.

ED22519 is the way to go for the time being.

from ssh-key-authority.

libssh2

it works thank you

from ssh-key-authority.

Yes but to work with old devices too the code should be edited.
Sorry was really busy this week....

from ssh-key-authority.