Your message dated Thu, 07 Apr 2022 21:22:44 +0000
with message-id <[email protected]>
and subject line Bug#1009155: fixed in ruby-net-ssh
1:6.3.0~beta1+git20220405.dd7f11a-1
has caused the Debian Bug report #1009155,
regarding ruby-net-ssh: Fails to connect to OpenSSH 8.8 and later
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1009155: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1009155
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ruby-net-ssh
Version: 1:6.1.0-2
Severity: normal
Hi,
net-ssh fails to connect to OpenSSH 8.8 and later. This means that we
cannot connect to Debian 'testing' machines.
The problem is twofold:
1/
ssh-rsa was removed as a host key algorithm, so net-ssh fails to
negotiate such an algorithm with the following error message:
/usr/share/rubygems-integration/all/gems/net-ssh-6.1.0/lib/net/ssh/transport/algorithms.rb:407:in
`negotiate': could not settle on host_key algorithm (Net::SSH::Exception)
Server host_key preferences: rsa-sha2-512,rsa-sha2-256
Client host_key preferences:
[email protected],ssh-ed25519,[email protected],[email protected],[email protected],ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,[email protected],[email protected],ssh-rsa
This was tracked upstream in https://github.com/net-ssh/net-ssh/issues/712, and
fixed in 6.2.0~beta1.
I just updated the package in unstable to 6.3.0~beta1, so this part is
fixed.
2/
ssh-rsa was also removed as a public key auth algorithm.
when connecting, this results in this error server-side (in auth.log):
userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
This can be worked around server-side by adding
PubkeyAcceptedKeyTypes=+ssh-rsa
in sshd_config
This is tracked upstream as https://github.com/net-ssh/net-ssh/issues/836
fixed by this MR: https://github.com/net-ssh/net-ssh/pull/838
I looked into backporting this to the Debian package, but this is
painful because there has been a coding style change in the meantime...
Lucas
--- End Message ---
--- Begin Message ---
Source: ruby-net-ssh
Source-Version: 1:6.3.0~beta1+git20220405.dd7f11a-1
Done: Lucas Nussbaum <[email protected]>
We believe that the bug you reported is fixed in the latest version of
ruby-net-ssh, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Lucas Nussbaum <[email protected]> (supplier of updated ruby-net-ssh package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 07 Apr 2022 22:50:46 +0200
Source: ruby-net-ssh
Architecture: source
Version: 1:6.3.0~beta1+git20220405.dd7f11a-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Ruby Team
<[email protected]>
Changed-By: Lucas Nussbaum <[email protected]>
Closes: 1009155
Changes:
ruby-net-ssh (1:6.3.0~beta1+git20220405.dd7f11a-1) unstable; urgency=medium
.
* New upstream version 6.3.0~beta1+git20220405.dd7f11a.
+ This version fixes https://github.com/net-ssh/net-ssh/issues/836, that
broke public key authentication against OpenSSH 8.8 servers.
Closes: #1009155
* Refresh patches.
Checksums-Sha1:
f378abf65b0f08e6911d00cc79013078ae19d9b1 2381
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a-1.dsc
0db013c7a04c20e3e70f3b708757c00ee11e72b1 224658
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a.orig.tar.gz
0ec0fe9accfafa4bf6bbee1c3706a1409dbd0bcf 5952
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a-1.debian.tar.xz
9c99ef16c3692e0cf0ab688c15979998052886fd 9465
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a-1_amd64.buildinfo
Checksums-Sha256:
b9021c709925a5e75c8ba8817c9c2aef82b2448ff4f1f0cc5634ea0103532d2a 2381
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a-1.dsc
37a14f7fa24f70f0ea611b1e871e435258971fc017f7057ecb462892b1ed8ddf 224658
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a.orig.tar.gz
b6ca2c629df646bceb91cfe571ca5903203f0077b24fbfcd791c3369edfabec7 5952
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a-1.debian.tar.xz
9548aa38ca804970ae8c2342c3a0edd3bf97f38a36c7b726a814f27f249309e3 9465
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a-1_amd64.buildinfo
Files:
659a232520257514a33189f6e783b32e 2381 ruby optional
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a-1.dsc
8bbd8c1e661499974e32a6e3888d71a9 224658 ruby optional
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a.orig.tar.gz
31e4f422a2447edf7185f8f6ff8cf5a7 5952 ruby optional
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a-1.debian.tar.xz
8bd70b0d61d944db01e29e68caad26b0 9465 ruby optional
ruby-net-ssh_6.3.0~beta1+git20220405.dd7f11a-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Q+N4
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-ruby-extras-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-ruby-extras-maintainers
