Menu

#207 lamdaemon SSH key

v6.8
closed
nobody
None
2
2019-08-25
2019-08-17
Chuck Lane
No

Just upgraded to 6.8 on Fedora 29, and decided to start trying to use lamdaemon.
Generating a public/private SSH key pair especially for the lamdaemon; it works for
plain old ssh connections, but fails the lamdaemon ssh test.

Turns out, after investigation, that
1) it has to be an RSA key pair (not DSA, ECDSA, etc)
2) using ssh-keygen on Fedora 29 has an 'updated' key delimiter that the code that LAM uses doesn't like:
old style (RHEL, etc, works with LAM):
-----BEGIN RSA PRIVATE KEY-----

 new style (Fedora 29, ssh-keygen fropenssh-7.9p1-6.fc29)
 -----BEGIN OPENSSH PRIVATE KEY-----

I suspect this is a 'library' issue, where the crypto library is looking for the 'RSA' string, and rejecting everything else (like 'EC' and 'OPENSSH').

Discussion

  • Roland Gruber

    Roland Gruber - 2019-08-19

    We use phpseclib (http://phpseclib.sourceforge.net/) for the SSH connection. Seems that it only supports RSA keys. We will update the documentation.

     
  • Roland Gruber

    Roland Gruber - 2019-08-25
    • status: open --> closed
     
  • Roland Gruber

    Roland Gruber - 2019-08-25

    Updated docs