Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #211459

Re: id_dsa - not in PubkeyAcceptedKeyTypes

From Stephan Seitz <stse+debian@fsing.rootsland.net>
Newsgroups linux.debian.user
Subject Re: id_dsa - not in PubkeyAcceptedKeyTypes
Date 2019-07-17 13:10 +0200
Message-ID <ykPYR-4xE-7@gated-at.bofh.it> (permalink)
References <ykPcu-41q-7@gated-at.bofh.it>
Organization Minas Tirith, Gondor

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Mi, Jul 17, 2019 at 12:14:36 +0200, Pierre Frenkiel wrote:
> have When trying a passwordless connection via ssh, I have now the 
> message:
>    id_dsa - not in PubkeyAcceptedKeyTypes
>although it is actually in /etc/ssh/sshd_config

According to the buster manpage of sshd_config:

PubkeyAcceptedKeyTypes
       Specifies the key types that will be accepted for public key 
       authentication as a list of comma-separated patterns. Alternately 
       if the specified value begins with a ‘+’ character, then the 
       specified key types will be appended to the default set instead of 
       replacing them. If the specified value begins with a ‘-’ 
       character, then the specified key types (including wildcards) will 
       be removed from the default set instead of re‐
       placing them. The default for this option is:

	  ecdsa-sha2-nistp256-cert-v01@openssh.com,
	  ecdsa-sha2-nistp384-cert-v01@openssh.com,
	  ecdsa-sha2-nistp521-cert-v01@openssh.com,
	  ssh-ed25519-cert-v01@openssh.com,
	  rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,
	  ssh-rsa-cert-v01@openssh.com,
	  ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,
	  ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa

       The list of available key types may also be obtained using "ssh -Q key".


So there is nothing for dsa, only ecdsa.

The default list in stretch is shorter but doesn’t have a dsa type 
either.

Shade and sweet water!

	Stephan

-- 
| Public Keys: http://fsing.rootsland.net/~stse/keys.html |

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

id_dsa - not in PubkeyAcceptedKeyTypes Pierre Frenkiel <pierre.frenkiel@gmail.com> - 2019-07-17 12:20 +0200
  Re: id_dsa - not in PubkeyAcceptedKeyTypes <tomas@tuxteam.de> - 2019-07-17 12:30 +0200
    Re: id_dsa - not in PubkeyAcceptedKeyTypes Pierre Frenkiel <pierre.frenkiel@gmail.com> - 2019-07-17 12:50 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes <tomas@tuxteam.de> - 2019-07-17 13:10 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes Michael Kesper <mkesper@schokokeks.org> - 2019-07-17 13:10 +0200
  Re: id_dsa - not in PubkeyAcceptedKeyTypes Brad Rogers <brad@fineby.me.uk> - 2019-07-17 12:30 +0200
  Re: id_dsa - not in PubkeyAcceptedKeyTypes Stephan Seitz <stse+debian@fsing.rootsland.net> - 2019-07-17 13:10 +0200
    Re: id_dsa - not in PubkeyAcceptedKeyTypes <tomas@tuxteam.de> - 2019-07-17 13:20 +0200
    Re: id_dsa - not in PubkeyAcceptedKeyTypes Pierre Frenkiel <pierre.frenkiel@gmail.com> - 2019-07-17 13:20 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes Stephan Seitz <stse+debian@fsing.rootsland.net> - 2019-07-17 13:30 +0200
        Re: id_dsa - not in PubkeyAcceptedKeyTypes Pierre Frenkiel <pierre.frenkiel@gmail.com> - 2019-07-17 14:30 +0200
          Re: id_dsa - not in PubkeyAcceptedKeyTypes Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-17 15:00 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes Brad Rogers <brad@fineby.me.uk> - 2019-07-17 13:30 +0200
      Re: id_dsa - not in PubkeyAcceptedKeyTypes Michael Kesper <mkesper@schokokeks.org> - 2019-07-17 14:30 +0200

csiph-web