Package: lftp
Version: 4.8.4-2+b1
Severity: normal

Dear Maintainer,

In Debian Testing (Bullseye) lftp option "set sftp:auto-confirm yes" stopped
working. The problem is that ssh doesn't output the prompt "Are you sure you
want to continue connecting (yes/no)?" and so lftp can't answer it.

lftp :~> set sftp:auto-confirm yes
lftp :~> set log:enabled true
lftp :~> open sftp://example.com -u someuser,somepassword
lftp someu...@example.com:~> ls
---- Running connect program (ssh -a -x -s -l someuser example.com sftp)
---> sending a packet, length=5, type=1(INIT), id=0
The authenticity of host 'example.com (1.2.3.4)' can't be established.
<--- ECDSA key fingerprint is
SHA256:bugmuoMea8sptvHgg8uyo2dQN857geiLloXWRj3sC4g.
`ls' at 0 [Connecting...]

(hangs forever)

There is no problem on Debian Stable (Buster).

Workaround is to run "ssh -a -x -s -l someuser example.com sftp" (which shows
the prompt) and to accept the key manually.




-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing'), (300, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.7.0-1-amd64 (SMP w/24 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), 
LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lftp depends on:
ii  libc6                2.30-8
ii  libgcc-s1 [libgcc1]  10.1.0-4
ii  libgnutls30          3.6.14-2
ii  libidn2-0            2.3.0-1
ii  libreadline8         8.0-4
ii  libstdc++6           10.1.0-4
ii  libtinfo6            6.2-1
ii  netbase              6.1
ii  zlib1g               1:1.2.11.dfsg-2

Versions of packages lftp recommends:
ii  openssh-client [ssh-client]  1:8.3p1-1

lftp suggests no packages.

-- debconf-show failed

Reply via email to