[Bug 270322] New: SFTP fails to verify host keys of type ECDSA

[Massimiliano Torromeo]

https://bugs.kde.org/show_bug.cgi?id=270322

           Summary: SFTP fails to verify host keys of type ECDSA
           Product: kde
           Version: 4.6
          Platform: Archlinux Packages
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
        AssignedTo: unassigned-bugs at kde.org
        ReportedBy: massimiliano.torromeo at gmail.com


Version:           4.6 (using KDE 4.6.2) 
OS:                Linux

With openssh version 5.8, ssh keys of type ECDSA have been implemented.
When I first connect to an SSH server with ECDSA public keys, this key is added
to known_hosts, and consequently it must be verified in all subsequent
connections.

KDE's KIO_SFTP fails to verify such keys, while the ssh command line program
works perfectly.

The workaround is to add a different ssh host key to the known_hosts file. This
could be achieved by making the first connection to the SSH server specifying a
different host key algorithm:
$> ssh -o HostKeyAlgorithms=ssh-rsa root at host

After doing this, everything works as expected.

Reproducible: Always

Steps to Reproduce:
1. Connect for the first time to a SSH server with openssh version >= 5.8.
2. Copy a file with the sftp kio slave:
  $> kioclient copy sftp://HOST:test.txt .

Actual Results:  
Host key fails verification

Expected Results:  
The file should be copied from the remote server

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.