Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenSSH 7.7 gives warning #55

Closed
ffes opened this issue Apr 16, 2018 · 4 comments
Closed

OpenSSH 7.7 gives warning #55

ffes opened this issue Apr 16, 2018 · 4 comments

Comments

@ffes
Copy link

ffes commented Apr 16, 2018

Recently OpenSSH on Cygwin was upgraded to 7.7 and now ssh-pageant gives this warning when any ssh process is invoked.

warning: agent returned different signature type ssh-rsa (expected rsa-sha2-512)

This warning was added in OpenSSH 7.7:

https://www.openssh.com/txt/release-7.7

  • ssh(1): Warn when the agent returns a ssh-rsa (SHA1) signature when
    a rsa-sha2-256/512 signature was requested. This condition is possible
    when an old or non-OpenSSH agent is in use. bz#279

Some examples:

$ git pull
warning: agent returned different signature type ssh-rsa (expected rsa-sha2-512)
Already up to date.
$ ssh frank@host.example.com
warning: agent returned different signature type ssh-rsa (expected rsa-sha2-512)
Welcome to Ubuntu 16.04.4 LTS (GNU/Linux 4.4.0-116-generic x86_64)

When I close pageant and use the native openssh keys the warning is not shown.

@cuviper
Copy link
Owner

cuviper commented Apr 16, 2018

Thanks for the bug report, but I think this will have to be reported to PuTTY/Pageant itself. ssh-pageant only acts as a middle-man between the UNIX socket and Windows messages, but doesn't interpret or examine the actual agent packets at all.

@cuviper
Copy link
Owner

cuviper commented Apr 16, 2018

I can also reproduce this warning by connecting PuTTY to Fedora 28 (openssh-7.7p1-2.fc28.x86_64) with agent forwarding enabled, then ssh localhost within so that remote ssh talks to Pageant.

I'm closing this issue since ssh-pageant is not responsible for the content of the agent messages.

@cuviper cuviper closed this as completed Apr 16, 2018
@cuviper
Copy link
Owner

cuviper commented Apr 16, 2018

Also FWIW, the referenced openssh bug is still open, so their behavior may yet change. PuTTY/Pageant is also mentioned in the comments.

https://bugzilla.mindrot.org/show_bug.cgi?id=2799

@cuviper
Copy link
Owner

cuviper commented Apr 17, 2018

Even further, ssh-agent from openssh-clients-7.4p1-16.el7.x86_64 triggers the same warning when forwarded to that F28 machine and the key is used.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants