openssh bugs - Aug 2023 - [Bug 3601] New: Cannot change password if no password is given

https://bugzilla.mindrot.org/show_bug.cgi?id=3601

            Bug ID: 3601
           Summary: Cannot change password if no password is given
           Product: Portable OpenSSH
           Version: 8.1p1
          Hardware: 68k
                OS: Mac OS X
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh-keygen
          Assignee: unassigned-bugs at mindrot.org
          Reporter: ab18gu at gmail.com

If you create a key with ssh-keygen without a password and try to add a
password with `ssh-keygen -p`, the prompt will request old password and
if no password is given, the prompt will return incorrect password.
Obviously, if you input anything, the same prompt will be returned.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3601

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net

--- Comment #1 from Darren Tucker <dtucker at dtucker.net> ---
OpenSSH 8.1 was nearly four years ago.  Can you reproduce it with the
current version?  A quick test with the current version works as
expected.  If this isn't what you're referring to, can you add some
more specific reproduction steps?

$ ssh-keygen -f tmp -N ''
Generating public/private rsa key pair.
Your identification has been saved in tmp
Your public key has been saved in tmp.pub
The key fingerprint is: [...]

$ ssh-keygen -p -f tmp -N foo
[...]
Your identification has been saved with the new passphrase.

$ ssh-keygen -p -f tmp -P foo -N ''
[...]
Your identification has been saved with the new passphrase.

$ ssh-keygen -p -f tmp 
[...]
Enter new passphrase (empty for no passphrase): foo
Enter same passphrase again: foo
Your identification has been saved with the new passphrase.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.