Bug 22111 - ssh-keygen generates an erroneous public key with dsa
Summary: ssh-keygen generates an erroneous public key with dsa
Status: RESOLVED INVALID
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Mageia Bug Squad
QA Contact:
URL:
Whiteboard:
Keywords: NEEDINFO
Depends on:
Blocks:
 
Reported: 2017-12-02 10:45 CET by Georges Eckenschwiller
Modified: 2017-12-03 19:30 CET (History)
2 users (show)

See Also:
Source RPM: openssh
CVE:
Status comment:


Attachments

Description Georges Eckenschwiller 2017-12-02 10:45:34 CET
Description of problem:
ssh-keygen generates an erroneous public key with dsa

the key starts with ssh-dss instead of ssh-dsa
transferred to the server, this key is not recognized

How reproducible:
error always reproducible, on different computers with mga6

Version is 6.6p1
Comment 1 Marja Van Waes 2017-12-03 18:08:42 CET
(In reply to Georges Eckenschwiller from comment #0)
> Description of problem:
> ssh-keygen generates an erroneous public key with dsa
> 
> the key starts with ssh-dss instead of ssh-dsa
> transferred to the server, this key is not recognized
> 
> How reproducible:
> error always reproducible, on different computers with mga6
> 
> Version is 6.6p1

If you're using version 6.6p1, then you're either using Mageia 5 (not 6 like the "Version:" field in this report says), or stuck with a partially upgraded system.

In Mageia 6, we have openssh-7.5p1

Since OpenSSH 7.0, the the ssh-dss (DSA) public key algorithm has been disabled by default, because it's considered too weak. 
http://www.openssh.com/txt/release-7.0 

Most likely, the server you tried to upload your public DSA key to, no longer accepts such keys.

Please try again with an RSA key.

CC: (none) => guillomovitch, marja11
Keywords: (none) => NEEDINFO

Comment 2 Georges Eckenschwiller 2017-12-03 19:05:03 CET
A thousand excuses, it is mga5 who is in question. rsa works very well

does it make sense to update mga5?
Comment 3 Marja Van Waes 2017-12-03 19:30:10 CET
(In reply to Georges Eckenschwiller from comment #2)
> A thousand excuses, it is mga5 who is in question. rsa works very well

No problem :-)
 
> 
> does it make sense to update mga5?


Yes, it is time to upgrade, but you might want to wait for the mageia 6.1 isos that we'll hopefully have within a few weeks, because there were already so many updates since Mageia 6 was released.

Of course, upgrading with a Mga6 netinstall iso or in a VT with urpmi, after changing your Mageia 5 media to Mageia 6 media, is possible, too.

Resolution: (none) => INVALID
Status: NEW => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.