[Bug 274170] New: sftp kio slave does not support new openssh known_hosts key format

Bernie bernard.gray at gmail.com
Thu May 26 07:34:03 BST 2011


https://bugs.kde.org/show_bug.cgi?id=274170

           Summary: sftp kio slave does not support new openssh
                    known_hosts key format
           Product: kde
           Version: 4.6
          Platform: Unlisted Binaries
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
        AssignedTo: unassigned-bugs at kde.org
        ReportedBy: bernard.gray at gmail.com


Version:           4.6 (using KDE 4.6.2) 
OS:                Linux

Symptom:
Attempting to connect to a host with sftp via a kio slave mechanism (eg
dolphin/konqueror) gives the following error:
"Connection to host The host key for this server was not found, but another
type of key exists. 
An attacker might change the default server key to confuse your client into
thinking the key does not exist.
Please contact your system administrator.
 is broken."

The source of the problem is a new key format being inserted into
~/.ssh/known_hosts by the openssh client, which sftp-kio doesn't recognise. 
If the host is first connected to via openssh-client, then the new format key
is written to known_hosts, and sftp-kio fails with the above error.
If the host is first connected to via sft-kio, then the old type of key is
written to known_hosts, and dolphin/konqueror successfully connects.

Extra system info:
KDE 4.6.2 by Debian KDE Maintainers, from their experimental-snapshots repo
Debian unstable (up-to-date)
2.6.39 kernel (aptosid)

Reproducible: Always

Steps to Reproduce:
* start with empty ~/.ssh/known_hosts
* connect to host via openssh-client, accept the new key
* connect to the host with sftp-kio slave eg in dolphin, go to
sftp://user@host:port



Actual Results:  
It fails to connect to the host with the error listed above

Expected Results:  
It should connect to the host and allow sftp connection/browsing

Some diagnostic discussion at:
http://forum.kde.org/viewtopic.php?f=18&t=93475

Further reading pointed to a key format change called ECDSA in openssh 5.7 - I
don't know if that is the correct title for this new format, but the timing
seems about right.
http://mac.softpedia.com/progChangelog/OpenSSH-Changelog-14691.html

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the Unassigned-bugs mailing list