Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#67290 - [openssh] backport fix for incorrect warning "openssh load pubkey: invalid format" in openssh 8.3p1

Attached to Project: Arch Linux
Opened by Zhao4 She4 (zhs) - Wednesday, 15 July 2020, 17:02 GMT
Last edited by Gaetan Bisson (vesath) - Wednesday, 15 July 2020, 21:34 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Gaetan Bisson (vesath)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

As covered here OpenSSH 8.3p1 issues an incorrect warning: https://bbs.archlinux.org/viewtopic.php?id=256210

It claims a public key file supplied to it is in "invalid format." However, it uses the key file just fine. The Arch forum post describes why and how. This has been fixed in a commit from Jun 19, 2020.

The addition of a simple patch (from "git diff 7fafaeb5da365f4a408fec355dac04a774f27193 c514f3c0522855b4d548286eaa113e209051a6d2") and a small change to the package's PKGBUILD fixes the issue, and avoids user confusion with an unhelpful message, until the commit makes its way into a future release of OpenSSH.

Additional info:
* 8.3p1
* https://github.com/openssh/openssh-portable/commit/c514f3c0522855b4d548286eaa113e209051a6d2?diff=unified

Steps to reproduce:

Use public key authentication with a private key file on the client side, while the public key file of the pair is absent from usual ssh(1) search paths. It will issue a warning but proceed to connect fine.
   fix-spurious-warning.patch (0.8 KiB)
This task depends upon

Closed by  Gaetan Bisson (vesath)
Wednesday, 15 July 2020, 21:34 GMT
Reason for closing:  Fixed
Additional comments about closing:  openssh-8.3p1-2 in [testing]
Comment by Zhao4 She4 (zhs) - Wednesday, 15 July 2020, 17:03 GMT
Here is the modified PKGBUILD.

One is for openssh from core and another for openssh-selinux from AUR.
   PKGBUILD (4.6 KiB)
   PKGBUILD (3.5 KiB)
Comment by Eli Schwartz (eschwartz) - Wednesday, 15 July 2020, 17:08 GMT
  • Field changed: Summary ([openssh] incorrect warning "openssh load pubkey: invalid format" in openssh 8.3p1 → [openssh] backport fix for incorrect warning "openssh load pubkey: invalid format" in openssh 8.3p1)
  • Field changed: Status (Unconfirmed → Assigned)
  • Task assigned to Gaetan Bisson (vesath)
Requests for backporting fixes aren't always accepted, but I agree this warning is frustratingly confusing and would personally like it to be backported. Let's see what the maintainer thinks. :)
Comment by Gaetan Bisson (vesath) - Wednesday, 15 July 2020, 21:34 GMT
Short and simple upstream patches that scratch an itch are always happily considered for inclusion. Please see if openssh-8.3p1-2 from [testing] fixes your issue and if not please ask to reopen this bug report. Cheers.

Loading...