Summary: Please publicize the fact the ssh-dss keys don't
work any more
                 Project: Savannah Administration
            Submitted by: haible
            Submitted on: Sat 14 Sep 2019 06:08:02 PM CEST
                Category: None
                Priority: 5 - Normal
                Severity: 3 - Normal
                  Status: None
             Assigned to: None
        Originator Email: br...@clisp.org
        Operating System: GNU/Linux
             Open/Closed: Open
         Discussion Lock: Any



A couple of weeks ago my access to the web pages my savannah projects stopped
working: A simple 'cvs log index.html' was asking for the password of
hai...@cvs.savannah.gnu.org, instead of succeeding with the SSH key exchange.
Likewise, a fresh checkout of the web pages failed:

$ cvs -z3 -d:ext:hai...@cvs.savannah.gnu.org:/web/gnulib co gnulib
hai...@cvs.savannah.gnu.org's password: 

At the same time, access to the git source code of the same project continued
to work (ssh://hai...@git.sv.gnu.org/srv/git/gnulib).

I got the problem fixed by going to 'My Account Configuration > Authentication
Setup > SSH Public Keys' and adding a new public key, of type ed25519 or
ecdsa. Previously I had only one key, of type dss.

So, what changed is apparently that cvs.savannah.gnu.org started to ignore
keys of type dss, while git.savannah.gnu.org continues to accept them.

Probably I'm not the only one with this issue. Therefore it would be good if
you could post a news item to appropriate channels, telling people "Attention:
If you have a key of type dss registered in your savannah account, it will now
be ignored by cvs.savannah.gnu.org. Register a new key of type ed25519 or
ecdsa through Savannah's Account Configuration." This would have saved me 2
hours of searching.


Reply to this item at:


  Message sent via Savannah

Reply via email to