Your message dated Thu, 20 Feb 2020 13:19:25 +0000
with message-id <[email protected]>
and subject line Bug#932373: fixed in proftpd-dfsg 1.3.6c-1
has caused the Debian Bug report #932373,
regarding mod_sftp handling of OpenSSH-specific keys leads to confusing behavior
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
932373: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932373
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: proftpd-basic
Version: 1.3.6-4
I think there is something wrong with the sftp module in buster
because proftpd cant read ssh Host keys
i also tried to recreate the keys with dpkg-reconfigure openssh-server
or manually by ssh-keygen -t rsa -b 4096 -f /etc/ssh/ssh_host_rsa_key
and i tried to create keys on a Debian 9 machine and copied them on the
Debian 10 machine.
so i think it isn't the key its the module.
How to reproduce
Install Debian 10 minimal
apt install proftpd-basic
create minimal sftp config
echo '<VirtualHost 192.168.1.15>
DefaultRoot ~
RequireValidShell off
SFTPEngine on
Port 2222
SFTPLog /var/log/proftpd/sftp.log
SFTPHostKey /etc/ssh/ssh_host_rsa_key
SFTPAuthMethods publickey keyboard-interactive
#SFTPAuthorizedUserKeys file:/etc/proftpd/authorized_keys/%u
# Enable compression
SFTPCompression delayed
</VirtualHost>' > /etc/proftpd/conf.d/sftp.conf
Restart Service
systemctl restart proftpd
get broken service
root@proftpd-test:/etc/proftpd/conf.d# systemctl status proftpd
● proftpd.service - LSB: Starts ProFTPD daemon
Loaded: loaded (/etc/init.d/proftpd; generated)
Active: active (exited) since Thu 2019-07-18 15:29:38 CEST; 42min ago
Docs: man:systemd-sysv-generator(8)
Process: 817 ExecStart=/etc/init.d/proftpd start (code=exited,
status=0/SUCCESS)
Jul 18 15:29:38 proftpd-test systemd[1]: Starting LSB: Starts ProFTPD
daemon...
Jul 18 15:29:38 proftpd-test proftpd[817]: Starting ftp server:
proftpd2019-07-18 15:29:38,355 proftpd-test proftpd[825]: processing
configuration directory '/etc/proftpd/conf.d/'
Jul 18 15:29:38 proftpd-test proftpd[817]: Wrong passphrase for this
key. Please try again.
Jul 18 15:29:38 proftpd-test proftpd[817]: Wrong passphrase for this
key. Please try again.
Jul 18 15:29:38 proftpd-test proftpd[817]: Wrong passphrase for this
key. Please try again.
Jul 18 15:29:38 proftpd-test proftpd[817]: 2019-07-18 15:29:38,362
proftpd-test proftpd[825] proftpd-test.mm-com.de: mod_sftp/1.0.0: error
reading passphrase for SFTPHostKey '/etc/ssh/ssh_host_rsa_key':
(unknown)
Jul 18 15:29:38 proftpd-test proftpd[817]: 2019-07-18 15:29:38,362
proftpd-test proftpd[825] proftpd-test.mm-com.de: mod_sftp/1.0.0: unable
to use key in SFTPHostKey '/etc/ssh/ssh_host_rsa_key', exiting
Jul 18 15:29:38 proftpd-test proftpd[817]: .
Jul 18 15:29:38 proftpd-test systemd[1]: Started LSB: Starts ProFTPD
daemon.
--
Mit freundlichen Grüßen / best regards
Markus Raps
--- End Message ---
--- Begin Message ---
Source: proftpd-dfsg
Source-Version: 1.3.6c-1
Done: Hilmar Preusse <[email protected]>
We believe that the bug you reported is fixed in the latest version of
proftpd-dfsg, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hilmar Preusse <[email protected]> (supplier of updated proftpd-dfsg package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 20 Feb 2020 13:52:22 +0100
Source: proftpd-dfsg
Architecture: source
Version: 1.3.6c-1
Distribution: unstable
Urgency: medium
Maintainer: ProFTPD Maintainance Team
<[email protected]>
Changed-By: Hilmar Preusse <[email protected]>
Closes: 932373
Changes:
proftpd-dfsg (1.3.6c-1) unstable; urgency=medium
.
* New upstream version.
Contains support for OpenSSH-specific private key format
(Closes: #932373).
* A few patches are obsolete (included upstream):
- quotatab_modules (was not installed anyway)
- upstream_pull_859_861_CVE-2019-19270_CVE-2019-19269
- upstream_4385
* Patches refreshed.
Checksums-Sha1:
a61bff605796d8de2c2f29f633e400aa083a7872 2977 proftpd-dfsg_1.3.6c-1.dsc
41fe97b6ce5720d4fc35ba40acb9fcaddf701b67 20077094
proftpd-dfsg_1.3.6c.orig.tar.gz
3a484a92f0577dabb01ed0aa53a89e92d222052c 81304
proftpd-dfsg_1.3.6c-1.debian.tar.xz
2694db295fd3e4cfe49bf7fee363b5219c6c08ce 12873
proftpd-dfsg_1.3.6c-1_i386.buildinfo
Checksums-Sha256:
6d47fb8536fe656a6902008a857f93b2b0e115d8896fa12e53562bff1cc6545b 2977
proftpd-dfsg_1.3.6c-1.dsc
bc32adb16149dcf8153730db0f19139d7a21542d00baf413f85a72958dd382f2 20077094
proftpd-dfsg_1.3.6c.orig.tar.gz
c3421f61a42f980861e61b3ba54c3c8b48ff77f739fff07109c05a8ee717af5c 81304
proftpd-dfsg_1.3.6c-1.debian.tar.xz
631cdecaec562ad20d4f0efcc08df232c850b6e65b623f70e3d61fa5cac379e6 12873
proftpd-dfsg_1.3.6c-1_i386.buildinfo
Files:
fa1cb295e9a91d469572fb1e6470f868 2977 net optional proftpd-dfsg_1.3.6c-1.dsc
0c7bb94592e40dd3a6164c8783112176 20077094 net optional
proftpd-dfsg_1.3.6c.orig.tar.gz
68fca19bbc33fdb90808a8bf0ea2d8bf 81304 net optional
proftpd-dfsg_1.3.6c-1.debian.tar.xz
c152974feea1456fad42bb1cea5a2be6 12873 net optional
proftpd-dfsg_1.3.6c-1_i386.buildinfo
-----BEGIN PGP SIGNATURE-----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=cgTy
-----END PGP SIGNATURE-----
--- End Message ---
