|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [SLE] Re: [PLUG] ssh rsa authentication troubles
|
On Mon, Jan 22, 2001 at 09:18:14PM -0500, MaD dUCK wrote:
> SSH protocol 2 does not support RSA anymore, it's now using DSA.
> however, OpenSSH 2.x.x can speak SSH1.x with clients that are SSH1.x,
> and then it uses RSA. but whenever i was speaking to clients that are
> capable of SSH2, OpenSSH would use SSH2 and therefore not know
> anything about RSA keys.
Um... then how am I using a very RSA, old key with OpenSSH 2.2.0 to
connect to various OpenSSH servers?
Observe:
ambriel:~% strings .ssh/identity
SSH PRIVATE KEY FILE FORMAT 1.1
[etc]
ambriel:~% ssh -V
SSH Version OpenSSH_2.2.0 NetBSD_Secure_Shell-20001003, protocol
versions 1.5/2.0.
Compiled with OpenSSL (0x0090581f).
ambriel:~% ssh uriel
Last login: Mon Jan 22 20:00:43 2001 from uriel.eclipsed.
uriel:~% ssh -V
SSH Version OpenSSH_2.1.1, protocol versions 1.5/2.0.
Compiled with SSL (0x0090581f).
Connection to uriel.eclipsed.net closed.
ambriel:~% ssh allspice
Last login: Mon Jan 22 14:18:12 2001 from cinnamon.cs.swar
allspice:~% ssh -V
SSH Version 1.2.26 [sparc-sun-solaris2.6], protocol version 1.5.
Standard version. Does not use RSAREF.
I believe you're having the problem, but I'm telling you I am *not*
also having it.
Is it possible your problem is actually with RSAREF-generated keys?
OpenSSH cannot use that, but it can (and does, to the best of my
knowledge) use RSA.
> now i have DSA keys for my hosts and once i updated OpenSSH to 2.3.0,
> ssh-agent and ssh-add work as expected with RSA and DSA keys, although
> a bit awkward.
I'd guess so.
> does anyone know how to add both, RSA and DSA identities with only one
> password query, considering that the passphrases for both keys are
> identical?
Nope, but I don't have to.
~ g r @ eclipsed.net
______________________________________________________________________
Philadelphia Linux Users Group - http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion - http://lists.phillylinux.org/mail/listinfo/plug
|
|