Bug 1270 - Public key (DSA) authentication works on 3.8p1 but not on 4.5p1
Summary: Public key (DSA) authentication works on 3.8p1 but not on 4.5p1
Status: CLOSED WORKSFORME
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: ssh (show other bugs)
Version: 4.5p1
Hardware: HPPA HP-UX
: P2 normal
Assignee: Assigned to nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-12-23 01:08 AEDT by Fredrik Soderblom
Modified: 2008-04-04 09:57 AEDT (History)
1 user (show)

See Also:


Attachments
typescript log showing the problem (12.08 KB, text/plain)
2006-12-23 01:09 AEDT, Fredrik Soderblom
no flags Details
$HOME/.ssh/config (181 bytes, text/plain)
2006-12-23 01:14 AEDT, Fredrik Soderblom
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Fredrik Soderblom 2006-12-23 01:08:19 AEDT
After installing OpenSSH 4.5p1 we discovered that public key authentication
seems to be broken on OpenSSH 4.5p1 on HP-UX 11.11

See attached typescript file, where 2 different binaries are used,
first is old 3.8p1 ssh client (which works) and second is new 4.5p1
ssh client (which isn't working) but trying to login from the same
host (hostA) to the same remote host (hostB)

For both versions you can see the "SSH2_MSG_SERVICE_ACCEPT received"
debug message from ssh_userauth2(), but only the 3.8p1 version
will show the debug message "debug2("key: %s (%p)", id->filename, 
id->key)" from pubkey_prepare().

I've tried this both with an identyFile directive (as shown in
example) as well as just having the id_dsa file being discovered
from $HOME/.ssh/id_dsa and there's no difference, it still only
works with the 3.8p1 client but not the 4.5p1 client.

I've tried it against both a 4.5p1 sshd server and a 3.8p1 server,
but same result, hence it looks like the problem seems to be in
the client itself (or possibly a side effect from a different
version of OpenSSL for the different versions)
Comment 1 Fredrik Soderblom 2006-12-23 01:09:49 AEDT
Created attachment 1221 [details]
typescript log showing the problem
Comment 2 Fredrik Soderblom 2006-12-23 01:14:16 AEDT
Created attachment 1222 [details]
$HOME/.ssh/config
Comment 3 Darren Tucker 2006-12-31 13:04:21 AEDT
Did you happen to configure OpenSSL with "hpux-parisc2-cc" when you built it?  If so then see the the URL below and try rebuilding OpenSSL with "hpux-parisc-cc" instead, then rebuilding OpenSSH.  I'm not sure that this is the cause but it's worth a try.

http://www.aet.tu-cottbus.de/rt2/Ticket/Display.html?id=1395
Comment 4 Darren Tucker 2007-12-31 23:25:49 AEDT
Without answers to the questions or test of the suggestions then unfortunately there's not much we can do to help you.  Please reopen this bug if you have any additional information.

BTW the OpenSSL request tracker has moved, the new URL is 
http://rt.openssl.org/index.html?q=1395 which has been marked as "Resolved" although I'm not sure which OpenSSL versions that applies to.
Comment 5 Damien Miller 2008-04-04 09:57:43 AEDT
Close resolved bugs after release.