Summary: Please publicize the fact the ssh-dss keys don't
work any more
Project: Savannah Administration
Submitted by: haible
Submitted on: Sat 14 Sep 2019 06:08:02 PM CEST
Priority: 5 - Normal
Severity: 3 - Normal
Assigned to: None
Originator Email: br...@clisp.org
Operating System: GNU/Linux
Discussion Lock: Any
A couple of weeks ago my access to the web pages my savannah projects stopped
working: A simple 'cvs log index.html' was asking for the password of
hai...@cvs.savannah.gnu.org, instead of succeeding with the SSH key exchange.
Likewise, a fresh checkout of the web pages failed:
$ cvs -z3 -d:ext:hai...@cvs.savannah.gnu.org:/web/gnulib co gnulib
At the same time, access to the git source code of the same project continued
to work (ssh://hai...@git.sv.gnu.org/srv/git/gnulib).
I got the problem fixed by going to 'My Account Configuration > Authentication
Setup > SSH Public Keys' and adding a new public key, of type ed25519 or
ecdsa. Previously I had only one key, of type dss.
So, what changed is apparently that cvs.savannah.gnu.org started to ignore
keys of type dss, while git.savannah.gnu.org continues to accept them.
Probably I'm not the only one with this issue. Therefore it would be good if
you could post a news item to appropriate channels, telling people "Attention:
If you have a key of type dss registered in your savannah account, it will now
be ignored by cvs.savannah.gnu.org. Register a new key of type ed25519 or
ecdsa through Savannah's Account Configuration." This would have saved me 2
hours of searching.
Reply to this item at:
Message sent via Savannah