Frank Mohr
2005-Jul-13 17:37 UTC
ssh-keygen problem with openssh-4* and openssl-0.9.7g on AIX
hi i got a strange error for openssh-4.0p1 and openssh-4.1p1 (didn't try other versions) with openssl-0.9.7g on AIX 5.1 openssl-0.9.7g and openssh build without errors, "make test" for openssl returns no errors, "make test" for openssh stops at the first connection test "make test" for openssh with openssl-0.9.6m returns no errors (i don't get errors for openssh with openssl-0.9.7g on Linux) i found the following problem: ssh-keygen creates a corrupt public key for rsa1 ("keygen -t rsa1" and "keygen -yf testkey") the public key starts with a sequence of 0 and has only a few digits at the end keygen -l returns key lengths between 80 and 128 for diffent keygen runs the corrupt key isn't accepted in authorized_keys (while the correct pub key from another system is) rsa and dsa have no problems frank ___________________________________________________________ Gesendet von Yahoo! Mail - Jetzt mit 1GB Speicher kostenlos - Hier anmelden: http://mail.yahoo.de
Andy Polyakov
2005-Jul-13 19:09 UTC
ssh-keygen problem with openssh-4* and openssl-0.9.7g on AIX
> i got a strange error for openssh-4.0p1 and openssh-4.1p1 > (didn't try other versions) with openssl-0.9.7g on AIX 5.1 > > openssl-0.9.7g and openssh build without errors, > "make test" for openssl returns no errors, > "make test" for openssh stops at the first connection test > > "make test" for openssh with openssl-0.9.6m returns no errors > (i don't get errors for openssh with openssl-0.9.7g on Linux) > > i found the following problem: > > ssh-keygen creates a corrupt public key for rsa1 > ("keygen -t rsa1" and "keygen -yf testkey") > the public key starts with a sequence of 0 and > has only a few digits at the end > keygen -l returns key lengths between 80 and 128 > for diffent keygen runs > the corrupt key isn't accepted in authorized_keys > (while the correct pub key from another system is)This is caused by a bug in PPC assembler code, which was fixed recently (see http://cvs.openssl.org/chngview?cn=14200). A.