Your message dated Sat, 27 Mar 2021 14:48:34 +0000
with message-id <[email protected]>
and subject line Bug#668271: fixed in libssh2 1.9.0-3
has caused the Debian Bug report #668271,
regarding libssh2-1: The libssh2 has several limitations when configured
--with-libgcrypt. Please do not use libgcrypt.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
668271: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668271
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libssh2-1
Version: 1.4.0-1
Severity: normal
This case reported already in one of tools whis uses libssh2:
https://support.zabbix.com/browse/ZBX-4850
Here is almost the same description:
Debain'n package is using Libgcrypt:
http://packages.debian.org/squeeze/libssh2-1
Why it happened?
Here: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=409362
And as result Debian's package is using Libgcrypt :(
In the same time openssh-client is using only OpenSSL:
http://packages.debian.org/squeeze/openssh-client
so, the problen is not visible when try an private key *with* passphrase from
console (by openssh-client).
Quoting Simon:
"The Libgcrypt backend in libssh2 contains a hand written
slimmed down ASN.1 parser to read out the RSA key, but it does not
support any of the PKCS* encrypted forms of RSA keys. The OpenSSL
backend in libssh2 uses OpenSSL to read the keys, so it supports
whatever private key formats that OpenSSL supports."
and
"Are you using libgcrypt or OpenSSL as the backend? The libgcrypt
backend can only read unencrypted private keys."
Sources:
http://www.mail-archive.com/[email protected]/msg02226.html
http://www.mail-archive.com/[email protected]/msg02057.html
>From a #libssh2 on a Freenode I learned that Simon is the author of the
>libgcrypt backend for libssh
The library libssh2 for several other checked distros (centos, gentoo) and
freebsd is using default OpenSSL
So, I'd suggest to discard changes performed in the
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=409362
Thanks!
-- System Information:
Debian Release: 6.0.4
APT prefers stable
APT policy: (990, 'stable'), (500, 'stable-updates')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages libssh2-1 depends on:
ii libc6 2.11.3-2 Embedded GNU C Library: Shared lib
ii libgcrypt11 1.4.5-2 LGPL Crypto library - runtime libr
ii multiarch-support 2.13-27 Transitional package to ensure mul
ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime
libssh2-1 recommends no packages.
libssh2-1 suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: libssh2
Source-Version: 1.9.0-3
Done: Nicolas Mora <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libssh2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Nicolas Mora <[email protected]> (supplier of updated libssh2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 27 Mar 2021 08:21:05 -0400
Source: libssh2
Architecture: source
Version: 1.9.0-3
Distribution: unstable
Urgency: medium
Maintainer: Nicolas Mora <[email protected]>
Changed-By: Nicolas Mora <[email protected]>
Closes: 668271
Changes:
libssh2 (1.9.0-3) unstable; urgency=medium
.
* d/rules: Build with openssl instead of libgcrypt (Closes: #668271)
* d/tests: Build with openssl instead of libgcrypt
Checksums-Sha1:
5060822282e1fafeb0b5d745248cd052f8ab2c82 1997 libssh2_1.9.0-3.dsc
d84d187e68b6c68b8e9075066d281496546d4cbf 9172 libssh2_1.9.0-3.debian.tar.xz
389b45acf7ef7165953544bacf942d964cb09e42 6468 libssh2_1.9.0-3_amd64.buildinfo
Checksums-Sha256:
9fbc773db566abd162f6b7688fe20f43b2599c53c6284ba3f1b2f0f687da9b64 1997
libssh2_1.9.0-3.dsc
bf2b1c757d6be0297952f78f2a071e72b7bcd0f814820b54128554a4dab56433 9172
libssh2_1.9.0-3.debian.tar.xz
dc6f14a79f1caaf89c9d2d768e765966f502e4538a88c42ebb0df8238cd8d143 6468
libssh2_1.9.0-3_amd64.buildinfo
Files:
e863fa0378653e3ceb6c14d9c9fcd521 1997 libs optional libssh2_1.9.0-3.dsc
3b3bbcc454b3d0c9d8f2aabae070d6ab 9172 libs optional
libssh2_1.9.0-3.debian.tar.xz
6fb726f5f377bba85ab997dd6fcd07e8 6468 libs optional
libssh2_1.9.0-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=4Xkq
-----END PGP SIGNATURE-----
--- End Message ---
