[
https://issues.apache.org/jira/browse/VCL-743?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Aaron Peeler updated VCL-743:
-----------------------------
Affects Version/s: (was: 2.3.1)
> run_ssh_command fails if SSH key permissions are incorrect
> ----------------------------------------------------------
>
> Key: VCL-743
> URL: https://issues.apache.org/jira/browse/VCL-743
> Project: VCL
> Issue Type: Bug
> Components: vcld (backend)
> Reporter: Andy Kurth
> Assignee: Andy Kurth
> Priority: Minor
> Fix For: 2.4
>
>
> run_ssh_command may fail to correctly parse output if the SSH command
> attempts to use an identity key with incorrect permissions. This occurs even
> though the command succeeded by using another key. If the permissions are
> incorrect on the private key, the following will be displayed:
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @ WARNING: UNPROTECTED PRIVATE KEY FILE! @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> Permissions 0644 for '/etc/vcl/bad.key' are too open.
> It is recommended that your private key files are NOT accessible by others.
> This private key will be ignored.
> bad permissions: ignore key: /etc/vcl/bad.key
> Xlib: connection to "localhost:11.0" refused by server
> Xlib: PuTTY X11 proxy: MIT-MAGIC-COOKIE-1 data did not match
> (ssh-askpass:9365): Gtk-WARNING **: cannot open display:
> <correct output starts here>
> The run_ssh_command subroutine in utils.pm needs to be extended to detect
> this and strip away the warning output.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
