Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 719698 - net-misc/openssh-8.1_p1-r3 & net-misc/openssh-8.2_p1-r6 : key authentication error with USE="hpn"
Summary: net-misc/openssh-8.1_p1-r3 & net-misc/openssh-8.2_p1-r6 : key authentication ...
Status: RESOLVED NEEDINFO
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-04-26 20:05 UTC by tereutes
Modified: 2023-05-12 04:08 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (file_719698.txt,7.69 KB, text/plain)
2020-04-26 20:05 UTC, tereutes
Details

Note You need to log in before you can comment on or make changes to this bug.
Description tereutes 2020-04-26 20:05:55 UTC
Created attachment 634748 [details]
emerge --info

Unable to login with public key authentification whith USE="hpn"
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-04-26 20:08:08 UTC
Can you give some ssh -vvvv logs?

bug 708224 may be relevant.
Comment 2 tereutes 2020-04-26 20:17:42 UTC
~$ ssh -v cafe.nainwak.org
OpenSSH_6.7p1 Debian-5+deb8u8, OpenSSL 1.0.1t  3 May 2016
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to cafe.nainwak.org [2a01:e0a:20a:f190::1] port 22.
debug1: connect to address 2a01:e0a:20a:f190::1 port 22: Connection timed out
debug1: Connecting to cafe.nainwak.org [82.64.86.65] port 22.
debug1: Connection established.
debug1: identity file /home/local/tereutes/.ssh/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /home/local/tereutes/.ssh/id_rsa-cert type -1
debug1: identity file /home/local/tereutes/.ssh/id_dsa type 2
debug1: key_load_public: No such file or directory
debug1: identity file /home/local/tereutes/.ssh/id_dsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/local/tereutes/.ssh/id_ecdsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/local/tereutes/.ssh/id_ecdsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/local/tereutes/.ssh/id_ed25519 type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/local/tereutes/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u8
debug1: Remote protocol version 2.0, remote software version OpenSSH_8.2p1-PKIXSSH-12.4.3-hpn14v20 PKIX[12.4.3]
debug1: match: OpenSSH_8.2p1-PKIXSSH-12.4.3-hpn14v20 PKIX[12.4.3] pat OpenSSH* compat 0x04000000
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr umac-64-etm@openssh.com none
debug1: kex: client->server aes128-ctr umac-64-etm@openssh.com none
debug1: sending SSH2_MSG_KEX_ECDH_INIT
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ECDSA 60:6c:01:81:8c:31:a1:4f:f7:db:96:f4:75:48:77:ff
debug1: Host 'cafe.nainwak.org' is known and matches the ECDSA host key.
debug1: Found key in /home/local/tereutes/.ssh/known_hosts:11
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /home/local/tereutes/.ssh/id_rsa
debug1: Authentications that can continue: publickey
debug1: Offering DSA public key: /home/local/tereutes/.ssh/id_dsa
debug1: Authentications that can continue: publickey
debug1: Trying private key: /home/local/tereutes/.ssh/id_ecdsa
debug1: Trying private key: /home/local/tereutes/.ssh/id_ed25519
debug1: No more authentication methods to try.
Permission denied (publickey).
Comment 3 tereutes 2020-04-26 20:21:30 UTC
I don't think sys-libs/glibc-2.31 is relevant, I got this bug since first opensssh-8.1 but didn't take the time too fill the bug
Comment 4 Patrick McLean gentoo-dev 2020-05-02 02:05:15 UTC
Can you provide verbose logs from the server side?

Running "sshd -d" should output verbose debug logs to the console (WARNING, you will have to stop the service to do this, and it it will terminate after a connection, so make sure to restart the sshd service before disconnecting).