mainSavannah Administration - Support: sr #110469, Issues with my git.sv.gnu.org...

 
 

sr #110469: Issues with my git.sv.gnu.org account

Submitter:  Paulo César Pereira de Andrade <pcpa>
Submitted:  Tue 30 Mar 2021 04:39:53 PM UTC
   
 
Category:  Source code repositories - developer access Priority:  5 - Normal
Severity:  3 - Normal Status:  Works For Me
Privacy:  Public Assigned to:  None
Operating System:  GNU/Linux Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 12 Apr 2021 12:44:57 PM UTC, comment #2: 

comentário #1:

> Any chance that your upgraded ssh doesn't accept your key? I think you could generate a new key, register it on Savannah, and try cloning with it.


Just figured the fix, from links below, by adding:

PubkeyAcceptedKeyTypes +ssh-rsa

Searching in Google for some keywords, first hit was https://confluence.atlassian.com/bitbucketserverkb/ssh-rsa-key-rejected-with-message-no-mutual-signature-algorithm-1026057701.html that points to announce of ssh-rsa being deprecated in a future release as seen in https://www.openssh.com/txt/release-8.2

Right now I am using openssh-8.4p1 and it is now required to regenerate keys or use the option.

Paulo César Pereira de Andrade <pcpa>
Mon 12 Apr 2021 12:14:13 PM UTC, comment #1: 

Any chance that your upgraded ssh doesn't accept your key? I think you could generate a new key, register it on Savannah, and try cloning with it.

Ineiev <ineiev>
Site Administrator
Tue 30 Mar 2021 04:39:53 PM UTC, original submission:  

  I did not push a commit for one year to GNU Lightning, but
I did not just silently give up on maintaining it. For the moment
I have been supporting either on mailing list or off list some
users that have it embedded on their software, and frequently
updating from latest git.
  When working on merging some patches from a contributor, I
noticed I could no longer git update or git checkout.

-email is unavailable- should be an alias to -email is unavailable-

"""
$ git clone pcpa@git.savannah.gnu.org:/srv/git/lightning.git
Cloning into 'lightning'...
The authenticity of host 'git.savannah.gnu.org (209.51.188.201)' can't
be established.
ECDSA key fingerprint is SHA256:qRLLJ4w/GAeiDyYnbx4yWJbZXwGiYYxgNty7lAfUyuM.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added 'git.savannah.gnu.org' (ECDSA) to the list
of known hosts.
Warning: the ECDSA host key for 'git.savannah.gnu.org' differs from
the key for the IP address '209.51.188.201'
Offending key for IP in /home/pcpa/.ssh/known_hosts:200
Are you sure you want to continue connecting (yes/no)? yes
pcpa@git.savannah.gnu.org's password: ^C

"""

  I do not need shell access, just ssh debug below:

"""
$ ssh -v -v -v -email is unavailable- id
OpenSSH_8.4p1, OpenSSL 1.1.1i FIPS  8 Dec 2020
debug1: Reading configuration data /home/pcpa/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug3: /etc/ssh/ssh_config line 55: Including file
/etc/ssh/ssh_config.d/50-redhat.conf depth 0
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug2: checking match for 'final all' host git.savannah.gnu.org
originally git.savannah.gnu.org
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 3: not matched 'final'
debug2: match not found
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 5: Including file
/etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config
debug3: gss kex names ok:
[gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-]
debug3: kex names ok:
[curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512]
debug1: configuration requests final Match pass
debug1: re-parsing configuration
debug1: Reading configuration data /home/pcpa/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug3: /etc/ssh/ssh_config line 55: Including file
/etc/ssh/ssh_config.d/50-redhat.conf depth 0
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug2: checking match for 'final all' host git.savannah.gnu.org
originally git.savannah.gnu.org
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 3: matched 'final'
debug2: match found
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 5: Including file
/etc/crypto-policies/back-ends/openssh.config depth 1
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config
debug3: gss kex names ok:
[gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-]
debug3: kex names ok:
[curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512]
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' ->
'/home/pcpa/.ssh/known_hosts'
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' ->
'/home/pcpa/.ssh/known_hosts2'
debug2: resolving "git.savannah.gnu.org" port 22
debug2: ssh_connect_direct
debug1: Connecting to git.savannah.gnu.org [209.51.188.201] port 22.
debug1: Connection established.
debug1: identity file /home/pcpa/.ssh/id_rsa type 0
debug1: identity file /home/pcpa/.ssh/id_rsa-cert type -1
debug1: identity file /home/pcpa/.ssh/id_dsa type -1
debug1: identity file /home/pcpa/.ssh/id_dsa-cert type -1
debug1: identity file /home/pcpa/.ssh/id_ecdsa type -1
debug1: identity file /home/pcpa/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/pcpa/.ssh/id_ecdsa_sk type -1
debug1: identity file /home/pcpa/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /home/pcpa/.ssh/id_ed25519 type -1
debug1: identity file /home/pcpa/.ssh/id_ed25519-cert type -1
debug1: identity file /home/pcpa/.ssh/id_ed25519_sk type -1
debug1: identity file /home/pcpa/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /home/pcpa/.ssh/id_xmss type -1
debug1: identity file /home/pcpa/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.4
debug1: Remote protocol version 2.0, remote software version
OpenSSH_6.6.1p1 Trisquel_GNU/linux_7.0-1
debug1: match: OpenSSH_6.6.1p1 Trisquel_GNU/linux_7.0-1 pat
OpenSSH_6.6.1* compat 0x04000002
debug2: fd 4 setting O_NONBLOCK
debug1: Authenticating to git.savannah.gnu.org:22 as 'pcpa'
debug3: hostkeys_foreach: reading file "/home/pcpa/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file
/home/pcpa/.ssh/known_hosts:211
debug3: load_hostkeys: loaded 1 keys from git.savannah.gnu.org
debug3: order_hostkeyalgs: have matching best-preference key type
ecdsa-sha2-nistp256-cert-v01@openssh.com, using HostkeyAlgorithms
verbatim
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms:
curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,ext-info-c
debug2: host key algorithms:
ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos:
aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr
debug2: ciphers stoc:
aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr
debug2: MACs ctos:
hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512
debug2: MACs stoc:
hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512
debug2: compression ctos: none,zlib@openssh.com,zlib
debug2: compression stoc: none,zlib@openssh.com,zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms:
curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: host key algorithms: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519
debug2: ciphers ctos:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: ciphers stoc:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: MACs ctos:
hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: MACs stoc:
hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: compression ctos: -email is unavailable-
debug2: compression stoc: -email is unavailable-
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug1: kex: algorithm: -email is unavailable-
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: -email is unavailable- MAC:
<implicit> compression: none
debug1: kex: client->server cipher: -email is unavailable- MAC:
<implicit> compression: none
debug1: kex: -email is unavailable- need=32 dh_need=32
debug1: kex: -email is unavailable- need=32 dh_need=32
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: Server host key: ecdsa-sha2-nistp256
SHA256:qRLLJ4w/GAeiDyYnbx4yWJbZXwGiYYxgNty7lAfUyuM
debug3: hostkeys_foreach: reading file "/home/pcpa/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file
/home/pcpa/.ssh/known_hosts:211
debug3: load_hostkeys: loaded 1 keys from git.savannah.gnu.org
debug3: hostkeys_foreach: reading file "/home/pcpa/.ssh/known_hosts"
debug3: record_hostkey: found key type RSA in file
/home/pcpa/.ssh/known_hosts:200
debug3: load_hostkeys: loaded 1 keys from 209.51.188.201
debug1: Host 'git.savannah.gnu.org' is known and matches the ECDSA host key.
debug1: Found key in /home/pcpa/.ssh/known_hosts:211
Warning: the ECDSA host key for 'git.savannah.gnu.org' differs from
the key for the IP address '209.51.188.201'
Offending key for IP in /home/pcpa/.ssh/known_hosts:200
Matching host key in /home/pcpa/.ssh/known_hosts:211
Are you sure you want to continue connecting (yes/no)? yes
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey out after 4294967296 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: set_newkeys: mode 0
debug1: rekey in after 4294967296 blocks
debug1: Will attempt key: /home/pcpa/.ssh/id_rsa RSA
SHA256:e73Y+4UGdRxQMvlLreoVDB0nxwqucTgAImQzbODWkb8 agent
debug1: Will attempt key: /home/pcpa/.ssh/id_dsa
debug1: Will attempt key: /home/pcpa/.ssh/id_ecdsa
debug1: Will attempt key: /home/pcpa/.ssh/id_ecdsa_sk
debug1: Will attempt key: /home/pcpa/.ssh/id_ed25519
debug1: Will attempt key: /home/pcpa/.ssh/id_ed25519_sk
debug1: Will attempt key: /home/pcpa/.ssh/id_xmss
debug2: pubkey_prepare: done
debug3: send packet: type 5
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /home/pcpa/.ssh/id_rsa RSA
SHA256:e73Y+4UGdRxQMvlLreoVDB0nxwqucTgAImQzbODWkb8 agent
debug1: send_pubkey_test: no mutual signature algorithm
debug1: Trying private key: /home/pcpa/.ssh/id_dsa
debug3: no such identity: /home/pcpa/.ssh/id_dsa: No such file or directory
debug1: Trying private key: /home/pcpa/.ssh/id_ecdsa
debug3: no such identity: /home/pcpa/.ssh/id_ecdsa: No such file or directory
debug1: Trying private key: /home/pcpa/.ssh/id_ecdsa_sk
debug3: no such identity: /home/pcpa/.ssh/id_ecdsa_sk: No such file or directory
debug1: Trying private key: /home/pcpa/.ssh/id_ed25519
debug3: no such identity: /home/pcpa/.ssh/id_ed25519: No such file or directory
debug1: Trying private key: /home/pcpa/.ssh/id_ed25519_sk
debug3: no such identity: /home/pcpa/.ssh/id_ed25519_sk: No such file
or directory
debug1: Trying private key: /home/pcpa/.ssh/id_xmss
debug3: no such identity: /home/pcpa/.ssh/id_xmss: No such file or directory
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
pcpa@git.savannah.gnu.org's password:

"""


Paulo César Pereira de Andrade <pcpa>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by ineiev (Posted a comment)
  • -email is unavailable- added by pcpa (Submitted the item)
  • -email is unavailable- added by pcpa
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2021-04-12 ineiev StatusNone Works For Me
        Open/ClosedOpen Closed
    2021-03-30 pcpa Carbon-Copy- Added -email is unavailable-

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code