https://bugzilla.mindrot.org/show_bug.cgi?id=3213

--- Comment #1 from Gordon Messmer <[email protected]> ---
For example, I have an rsa-sha2-256 private key.  If I connect to a
server running openssh 7.4, and PubkeyAcceptedKeyTypes=ssh-rsa, then
the key is correctly handled by the openssh 8.3 client.  However, if
PubkeyAcceptedKeyTypes=rsa-sha2-256, then the key cannot be used.  

The openssh 8.3 client accepts the same key and configuration when used
to connect to openssh >= 7.8 servers.


$ ssh-keygen -l -f ~/.ssh/id_rsa_2015-11-02
4096 SHA256:.... gordon (RSA)

$ ssh -oPubkeyAcceptedKeyTypes=ssh-rsa -i ~/.ssh/id_rsa_2015-11-02
openssh74
Enter passphrase for key '/home/gordon/.ssh/id_rsa_2015-11-02': 
gordon@openssh74:~$ logout
Connection to 192.168.122.11 closed.

$ ssh -oPubkeyAcceptedKeyTypes=rsa-sha2-256 -i ~/.ssh/id_rsa_2015-11-02
openssh74
gordon@openssh74's password: 
gordon@openssh74:~$ logout
Connection to 192.168.122.11 closed.

$ ssh -oPubkeyAcceptedKeyTypes=rsa-sha2-256 -i ~/.ssh/id_rsa_2015-11-02
openssh78
Enter passphrase for key '/home/gordon/.ssh/id_rsa_2015-11-02': 
gordon@openssh78$

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to