Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

8.4 README example error #100

Closed
baentsch opened this issue May 25, 2021 · 4 comments
Closed

8.4 README example error #100

baentsch opened this issue May 25, 2021 · 4 comments
Assignees

Comments

@baentsch
Copy link
Member

Continuing a discussion from #91 regarding ssh and sshd command line examples:

I'm not sure off the top of my head what's going on here, but it seems like there's a good lead sign_and_send_pubkey to follow up.

@xvzcf : I traced this down to a routine peeking into the sshbuf:

sshbuf_peek_string_direct(const struct sshbuf *buf, const u_char **valp,
and that routine just delivers "ssh-" instead of "ssh-dilithium3" as it would be expected. This is on the client side; the server seems to have worked OK:

debug1: /home/mib/ssh_server/authorized_keys:1: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
Accepted key DILITHIUM3 SHA256:jyUbmvamkb/R663PLoR+bZbv4gK/LsG0M/VYk/tA8jE found at /home/mib/ssh_server/authorized_keys:1

So, Question: Do you recall feeding this buffer correctly with the algorithm name? Where would this be? Possibly at the server? Please let me know if you do not have time for this issue; I'll then keep digging on my own. Simply disabling this bad string check for algorithm name has everything working OK, so it should be a minor issue...

@xvzcf
Copy link

xvzcf commented May 25, 2021

I think I have an idea, let me investigate.

@dstebila dstebila added this to the OpenSSH v8 release milestone Jun 1, 2021
@dstebila
Copy link
Member

dstebila commented Jun 3, 2021

@xvzcf This is the only thing we're waiting on for making OpenSSH v8 the default. Will you be able to take a look in the next few days?

Updated to add: Actually, should say that @baentsch thought this was the only thing we're waiting on for making OpenSSH v8 the default, do you agree @xvzcf?

@xvzcf
Copy link

xvzcf commented Jun 6, 2021

Looks like I introduced the bug through these lines. I've fixed it, will upload a PR tomorrow or the day after updating the test suite to test the README commands as well.

@baentsch
Copy link
Member Author

baentsch commented Jun 9, 2021

Closed by #103

@baentsch baentsch closed this as completed Jun 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants