Launchpad has imported 19 comments from the remote bug at
https://bugs.kde.org/show_bug.cgi?id=270322.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2011-04-07T14:49:23+00:00 Massimiliano Torromeo wrote:

Version:           4.6 (using KDE 4.6.2) 
OS:                Linux

With openssh version 5.8, ssh keys of type ECDSA have been implemented.
When I first connect to an SSH server with ECDSA public keys, this key is added 
to known_hosts, and consequently it must be verified in all subsequent 
connections.

KDE's KIO_SFTP fails to verify such keys, while the ssh command line
program works perfectly.

The workaround is to add a different ssh host key to the known_hosts file. This 
could be achieved by making the first connection to the SSH server specifying a 
different host key algorithm:
$> ssh -o HostKeyAlgorithms=ssh-rsa root@host

After doing this, everything works as expected.

Reproducible: Always

Steps to Reproduce:
1. Connect for the first time to a SSH server with openssh version >= 5.8.
2. Copy a file with the sftp kio slave:
  $> kioclient copy sftp://HOST:test.txt .

Actual Results:  
Host key fails verification

Expected Results:  
The file should be copied from the remote server

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/0

------------------------------------------------------------------------
On 2011-04-08T11:10:52+00:00 3-asn wrote:

Thanks for taking the time reporting a bug.

As kio_sftp is using libssh and this is not supported by libssh please
report the bug upstream at http://red.libssh.org/

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/1

------------------------------------------------------------------------
On 2011-05-26T15:05:45+00:00 3-asn wrote:

*** Bug 274170 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/2

------------------------------------------------------------------------
On 2011-05-27T04:00:34+00:00 cleary wrote:

Hi - apologies for creating the duplicate, but there is an issue with your 
bugtracker search. 
The keywords I searched on were in a variety of combinations:
known_hosts
ecdsa
kio
sftp

All these words are contained in this report, but the search did not
return this one.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/3

------------------------------------------------------------------------
On 2011-06-13T21:38:42+00:00 3-asn wrote:

ECDH support has been added to libssh. This will be available with
libssh 0.6.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/4

------------------------------------------------------------------------
On 2012-05-25T17:10:25+00:00 Kairo-kairo wrote:

The problem is just that libssh 0.6 hasn't shipped yet, and given that
the project hasn't been shipping anything for some time but ECDSA host
keys growing more and more, this situation is quite unsatisfactory. :(

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/5

------------------------------------------------------------------------
On 2012-05-28T17:30:11+00:00 3-asn wrote:

I'm just a human and my spare time is limited so I don't have the time
to work on libssh right now.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/6

------------------------------------------------------------------------
On 2012-06-07T02:31:11+00:00 NecLimDul wrote:

@Andreas sorry to hear that. Balancing life and free software is a
difficult task, as a fellow open source developer I can definitely
sympathize.

>From a pragmatic point of view, should we consider re-opening the KDE
issue if upstream isn't able to make a release? Maybe there is some stop
gap we could provide that could help users understand why they can't
connect and how to fix it? Also, I almost don't want to say it but is
there other maybe another library KDE should consider using?

It'd be nice to getting it moving toward a solution or at least provide
some insight into it what's going would go a long way I think. Thanks!

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/7

------------------------------------------------------------------------
On 2012-07-31T03:27:43+00:00 Daniel Nicoletti wrote:

Just a tip for users (like me) that went into this problem:
ssh-keygen -F hostname.which.fails
will give you
# Host hostname.which.fails found: line 10 type ECDSA
Open you known hosts file delete line 10, now first connect
from dolphin.
SFTP is way better than fish (which can't copy large files here)
I just hope Andreas find time to do a bug fix release soon :D
Best

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/8

------------------------------------------------------------------------
On 2012-09-25T21:44:55+00:00 Adam Porter wrote:

Thank you for that, Daniel.

Should this bug really be resolved as upstream?  KDE could work around
this bug in the meantime, and I wonder if it indeed should.

At the very least, the error message needs to be rewritten so that it is
actually accurate and useful.  The workaround could be referenced in
some way.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/9

------------------------------------------------------------------------
On 2012-10-12T09:25:15+00:00 Arne K. Haaje wrote:

Confirming the bug still exisit in KDE 4.9.2 with Kubuntu 12.04.

This is another workaround that saves you from removing the dsa key;

ssh-keyscan -t rsa host.that.fails >> .ssh/known_hosts

Conneting with SFTP KIO-slave works immediately after that

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/10

------------------------------------------------------------------------
On 2012-10-12T10:22:59+00:00 3-asn wrote:

I'm working to get a new release out.

https://test.libssh.org/index.php?project=libssh

We're getting closer ...

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/11

------------------------------------------------------------------------
On 2012-11-19T09:38:19+00:00 3-asn wrote:

*** Bug 310281 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/12

------------------------------------------------------------------------
On 2013-01-12T21:09:04+00:00 Alex Fiestas wrote:

Hey Andreas, is there any commit distributions can backport to get this
fixed?

Thanks.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/13

------------------------------------------------------------------------
On 2013-02-09T13:33:18+00:00 Reuben Peterkin wrote:

*** This bug has been confirmed by popular vote. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/14

------------------------------------------------------------------------
On 2013-02-13T15:15:21+00:00 3-asn wrote:

I'm sorry you can't simply backport patches. The PKI has been completely
rewritten to support ECDSA. We currently working on timeout fixes and
some changes in the server part of libssh and hope to get libssh 0.6 out
of the door pretty soon.

The only thing distributions could do is to package the current libssh
master tree. It should be pretty stable, we've written a lot of unit
tests for the stuff.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/15

------------------------------------------------------------------------
On 2013-03-09T15:16:49+00:00 Misbakh-Soloviev Vadim A wrote:

Hi, Andreas!
I've just found this bug, while googling for that problem. As you said, I've 
installed current libssh's master tree snapshot and get following error in 
dolphin:
«
Error. Out of memory.
Could not set a timeout.
»

While I've >8G free memory (16G total), so this OOM error is definitely
strange.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/16

------------------------------------------------------------------------
On 2013-03-14T06:46:29+00:00 3-asn wrote:

Vadim. Please open a new bug report and attach a log file of kio_sftp.

See
http://techbase.kde.org/Development/Tutorials/Debugging/Debugging_IOSlaves/Debugging_kio_sftp

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/17

------------------------------------------------------------------------
On 2013-05-06T08:16:43+00:00 3-asn wrote:

*** Bug 319117 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1176970/comments/18


** Changed in: libssh
       Status: Unknown => Won't Fix

** Changed in: libssh
   Importance: Unknown => Medium

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1176970

Title:
  libssh needs to be updated in order for kio-sftp to support ECDSA

To manage notifications about this bug go to:
https://bugs.launchpad.net/libssh/+bug/1176970/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to