FS#72350 - kdeconnect: OpenSSH 8.8p1 compatibility
Attached to Project:
Arch Linux
Opened by Zhong Lufan (hill) - Tuesday, 05 October 2021, 14:26 GMT
Last edited by Antonio Rojas (arojas) - Tuesday, 05 October 2021, 22:32 GMT
Opened by Zhong Lufan (hill) - Tuesday, 05 October 2021, 14:26 GMT
Last edited by Antonio Rojas (arojas) - Tuesday, 05 October 2021, 22:32 GMT
|
Details
The latest OpenSSH 8.8p1 causes kdeconnect's remote file
browsing to not work, which is supposed to be caused by
8.8p1 disabling the ssh-rsa host key exchange algorithm by
default.
I noticed that there is currently a patch for openssh 8.2 that addresses a similar issue, so perhaps we can update this patch to make it compatible with openssh 8.8. |
This task depends upon
Closed by Antonio Rojas (arojas)
Tuesday, 05 October 2021, 22:32 GMT
Reason for closing: Fixed
Additional comments about closing: kdeconnect 21.08.1-2
Tuesday, 05 October 2021, 22:32 GMT
Reason for closing: Fixed
Additional comments about closing: kdeconnect 21.08.1-2
If that does not work please try changing the patch to add ssha-rsa to PubkeyAcceptedAlgorithms.
> sshfs kdeconnect@192.168.1.31:/ /run/user/1000/******** -p 1745 -s -f -F /dev/null -o IdentityFile=/home/antonio/.config/kdeconnect/privateKey.pem -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o HostKeyAlgorithms=+ssh-rsa -o PubkeyAcceptedAlgorithms=+ssh-rsa -o uid=1000 -o gid=1000 -o reconnect -o ServerAliveInterval=30 -o password_stdin
fuse: unknown option(s): `-o PubkeyAcceptedAlgorithms=+ssh-rsa'
However, the existing is_ssh_opt function of sshfs is flawed and does not recognize PubkeyAcceptedKeyTypes as ssh parameters, so this parameter cannot be used.
Upstream sshfs issue: https://github.com/libfuse/sshfs/issues/237
[1]: https://github.com/libfuse/sshfs/blob/master/sshfs.c#L389
ssh_config:
```
Host *
HostkeyAlgorithms +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa
```
[1] https://github.com/libfuse/sshfs/blob/master/sshfs.c#L435
EDIT: loqs beat me by a second
We may temporarily patch sshfs and kde connect as a solution.