Package: dput-ng Version: 1.28 Severity: normal -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Dear maintainer, I recently switched from dput to dput-ng (due to needing the `dcut dm` command). - - dput-ng complained about the scp method being deprecated, which was selected due to dput's old config being present; - - I apt-purged dput; - - since then, dput-ng fails to upload, presumably due to using Paramiko instead of OpenSSH. Opening a bug because this is likely not intended behaviour. > $ dput /opt/deb/buildarea/pam-u2f_1.0.7-1+deb10u1_source.changes > Uploading pam-u2f using sftp to ssh-upload (host: ssh.upload.debian.org; > directory: /srv/upload.debian.org/UploadQueue/) > running allowed-distribution: check whether a local profile permits uploads > to the target distribution > running protected-distribution: warn before uploading to distributions where > a special policy applies > running checksum: verify checksums before uploading > running suite-mismatch: check the target distribution for common errors > running gpg: check GnuPG signatures before the upload > Logging into host ssh.upload.debian.org as nicoo > /usr/lib/python3/dist-packages/paramiko/ecdsakey.py:164: > CryptographyDeprecationWarning: Support for unsafe construction of public > numbers from encoded data will be removed in a future version. Please use > EllipticCurvePublicKey.from_encoded_point > self.ecdsa_curve.curve_class(), pointinfo > /usr/lib/python3/dist-packages/paramiko/kex_ecdh_nist.py:39: > CryptographyDeprecationWarning: encode_point has been deprecated on > EllipticCurvePublicNumbers and will be removed in a future version. Please > use EllipticCurvePublicKey.public_bytes to obtain both compressed and > uncompressed point encoding. > m.add_string(self.Q_C.public_numbers().encode_point()) > /usr/lib/python3/dist-packages/paramiko/kex_ecdh_nist.py:96: > CryptographyDeprecationWarning: Support for unsafe construction of public > numbers from encoded data will be removed in a future version. Please use > EllipticCurvePublicKey.from_encoded_point > self.curve, Q_S_bytes > /usr/lib/python3/dist-packages/paramiko/kex_ecdh_nist.py:111: > CryptographyDeprecationWarning: encode_point has been deprecated on > EllipticCurvePublicNumbers and will be removed in a future version. Please > use EllipticCurvePublicKey.public_bytes to obtain both compressed and > uncompressed point encoding. > hm.add_string(self.Q_C.public_numbers().encode_point()) > please login: To accept ssh-ed25519 hostkey > b'5c90717e5b00364ec2130d9d7a46e4f7' for ssh.upload.debian.org type "yes": > [yes, no]: yes > Exception: key cannot be used for signing > Traceback (most recent call last): > File "/usr/lib/python3/dist-packages/paramiko/transport.py", line 2036, in > run > handler(self.auth_handler, m) > File "/usr/lib/python3/dist-packages/paramiko/auth_handler.py", line 298, > in _parse_service_accept > sig = self.private_key.sign_ssh_data(blob) > File "/usr/lib/python3/dist-packages/paramiko/agent.py", line 418, in > sign_ssh_data > raise SSHException("key cannot be used for signing") > paramiko.ssh_exception.SSHException: key cannot be used for signing > > SFTP error uploading to ssh.upload.debian.org: SSHException('No existing > session') > > $ ssh -N ssh.upload.debian.org > Linux usper 4.9.0-9-amd64 #1 SMP Debian 4.9.168-1+deb9u5 (2019-08-11) x86_64 > > This device is for authorized users only. All traffic on this device > is monitored and will be used as evidence for prosecutions. By using > this machine you agree to abide by the Debian Machines Usage Policies > <URL:https://www.debian.org/devel/dmup>. > > %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% > > Francesco Usper (November 1st, 1561 - February 24th, 1641) > > Welcome to usper.debian.org, used for the following services: > ftp.upload.debian.org - FTP upload queue > ssh.upload.debian.org - SSH upload queue > > This virtual server runs on the cluster ganeti.csail.debian.org, which is > hosted at csail. > > %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Using a ~/.dput.cf snippet to revert to the SCP method (as opposed to SFTP) works. Best, nicoo - -- System Information: Debian Release: bullseye/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages dput-ng depends on: ii python3 3.7.3-1 ii python3-dput 1.28 dput-ng recommends no packages. Versions of packages dput-ng suggests: pn dput-ng-doc <none> pn python3-twitter <none> - -- no debconf information -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEU7EqA8ZVHYoLJhPE5vmO4pLV7MsFAl1hZu0RHG5pY29vQGRl Ymlhbi5vcmcACgkQ5vmO4pLV7MskMw//TotZynVLKYEOpTggpXDy8loAMv9n5zdS T5NUQG/PSaBxeiJDV8N+/Y/5WeIBVgqk+0P1iOl1upeBqZdwvcNV0PA9W8XmwMJ7 aFCuy4/QGcnBBoGhjCx/skuDkdZBv51NUUw/yA8q4BcmttwxhaMNpnIOYiFbY3hf Wwt/3xZVLBPYBU1VHJiIyl9TPoReSgrIIsTsSAG+L7xvxGonkd5+HVBJXPlX1Rtx eyj7ScR1+etP7OLhavwsg94RC6zLLibY7JNFkV+LJzZjR1187mIs3XqWCk4ffKes pVNGYIuF8GzEI9D2qGyMIQLTIQmbBG8ZchAdzR/EHBHNL/48U4Ted3vnB8kJhPTJ pA5g8cGeZENIWhyk+xPSZ2CKfddCU2L6UCWpnFPHWIGnBmwcpt9bxDQxszo7lo9U C8Sw/ZGVqASYC8wJcIeipB76EULpqfUBbSUrcu7Lt4s05WvG1IGzMvOtusPMhNmt nsb+0rC8+TXGAm2O/dVEpOPIZiz0LIuZXd3NKZOv/9TFEgLcus1Z1gyRZlEyQCGQ 8R1HQHIKlrZwQmelbqG4eythRaUZVhJC/vPj7Eq/urfZLF1jblf4UNi2SFjGLQSa xLGHSV3jJvkiPqFQYAdo+d9vc7vfRgRpoYxoLXeeTj9PJ3Gat7sS3KcZL6+faUQ3 pzGyB+RWBFo= =H8b1 -----END PGP SIGNATURE-----