openssh unix dev - Nov 2015 - Problem with gpg-agent and yubikey since openssh v6.8p1

Hi,

i'm unsure if the problem we encounter is a bug in openssh or in gnupg. 
But as everything was working with openssh 6.7p1 and earlier i guess 
that there where at least some changes in openssh that leads to the 
problem.

You can read the latest discussion about the problem here:

https://www.mail-archive.com/gnupg-users%40gnupg.org/msg29421.html
https://www.mail-archive.com/gnupg-users at gnupg.org/msg28416.html

I hope to get some help on this list as its an very annoying problem and 
using an old openssh version is just a bad workaround.

If you need any more information or help debugging i'm glad to help.

regards
the2nd

On Tue, 24 Nov 2015, the2nd at otpme.org wrote:
> Hi,
> 
> i'm unsure if the problem we encounter is a bug in openssh or in gnupg.
But as
> everything was working with openssh 6.7p1 and earlier i guess that there
where
> at least some changes in openssh that leads to the problem.
> 
> You can read the latest discussion about the problem here:
> 
> https://www.mail-archive.com/gnupg-users%40gnupg.org/msg29421.html
> https://www.mail-archive.com/gnupg-users at gnupg.org/msg28416.html
> 
> I hope to get some help on this list as its an very annoying problem and
using
> an old openssh version is just a bad workaround.
> 
> If you need any more information or help debugging i'm glad to help.
At the very least, we'd need the output of "ssh -vvv user at host"
for a
failing attempt.

-d

Hi Damien,

thanks for you answer.

Here is the output of ssh -vvv for both versions:

http://paste.ubuntu.com/13576087/
http://paste.ubuntu.com/13576243/

If you need any more info let me know.

Regards
the2nd


On 2015-11-29 12:14, Damien Miller wrote:
> On Tue, 24 Nov 2015, the2nd at otpme.org wrote:
> 
>> Hi,
>> 
>> i'm unsure if the problem we encounter is a bug in openssh or in 
>> gnupg. But as
>> everything was working with openssh 6.7p1 and earlier i guess that 
>> there where
>> at least some changes in openssh that leads to the problem.
>> 
>> You can read the latest discussion about the problem here:
>> 
>> https://www.mail-archive.com/gnupg-users%40gnupg.org/msg29421.html
>> https://www.mail-archive.com/gnupg-users at gnupg.org/msg28416.html
>> 
>> I hope to get some help on this list as its an very annoying problem 
>> and using
>> an old openssh version is just a bad workaround.
>> 
>> If you need any more information or help debugging i'm glad to
help.
> 
> At the very least, we'd need the output of "ssh -vvv user at
host" for a
> failing attempt.
> 
> -d