thr3ads.net - similar to: "[Bug 1806] SSH Client - Excessively Militant Identity File Permission Checking Potentially Increases Risk of Key Compromise"

Displaying 20 results from an estimated 30000 matches similar to: "[Bug 1806] SSH Client - Excessively Militant Identity File Permission Checking Potentially Increases Risk of Key Compromise"

[Bug 1806] New: SSH Client - Militant Identity File Permission Potentially Increases Security Risk

2010 Aug 13

[Bug 1806] New: SSH Client - Militant Identity File Permission Potentially Increases Security Risk

https://bugzilla.mindrot.org/show_bug.cgi?id=1806 Summary: SSH Client - Militant Identity File Permission Potentially Increases Security Risk Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: ssh

[Bug 1981] Trying to use ssh with a missing identity file gives no warnings

2013 Jan 17

[Bug 1981] Trying to use ssh with a missing identity file gives no warnings

https://bugzilla.mindrot.org/show_bug.cgi?id=1981 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2136| |ok+ Flags| | --- Comment #4 from Damien Miller <djm at mindrot.org>

[Bug 1592] Fingerprints for SSHD host key don't match (local ssh-keygen -l vs. ssh localhost)

2016 Dec 02

[Bug 1592] Fingerprints for SSHD host key don't match (local ssh-keygen -l vs. ssh localhost)

https://bugzilla.mindrot.org/show_bug.cgi?id=1592 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |djm at mindrot.org --- Comment #1 from Damien Miller <djm at mindrot.org> --- Can you reproduce this with a

[Bug 1592] Fingerprints for SSHD host key don't match (local ssh-keygen -l vs. ssh localhost)

2017 Jun 26

[Bug 1592] Fingerprints for SSHD host key don't match (local ssh-keygen -l vs. ssh localhost)

PubkeyAuthentication broken because ssh cannot ready it's identity keys

2002 May 11

PubkeyAuthentication broken because ssh cannot ready it's identity keys

This is a copy of the bug report I sent debian. Package: ssh Version: 1:3.0.2p1-9 Severity: important I want to be able to login between two hosts without entering passwords. ssh-keygen -t dsa * Copy key to other machine cat id_dsa.pub >> .ssh/authorized_keys chmod 600 .ssh/authorized_keys Trouble is that the originating host appears unable to parse its own keys. This is the

AW: AW: OpenSSH public key authentication does not work from Windows client if private key was added to SSH agent

2019 Jun 24

AW: AW: OpenSSH public key authentication does not work from Windows client if private key was added to SSH agent

Hi, I pasted two server connection logs at https://pastebin.com/vJb5tnTL. First a successful one and second an unsuccessful one. Patrick -----Urspr?ngliche Nachricht----- Von: Damien Miller <djm at mindrot.org> Gesendet: Samstag, 22. Juni 2019 10:43 An: Steinforth, Patrick <Steinforth at osnabrueck.de> Cc: openssh-unix-dev at mindrot.org Betreff: Re: AW: OpenSSH public key

AW: OpenSSH public key authentication does not work from Windows client if private key was added to SSH agent

2019 Jun 21

AW: OpenSSH public key authentication does not work from Windows client if private key was added to SSH agent

Hey Damien, thank you for your reply. I posted the debug information at https://pastebin.com/40esNPED and replaced some sensitive information before (usernames, servernames, domainnames, IP addresses). In addition I commented some lines with a message like "### <my message> ###". Patrick -----Urspr?ngliche Nachricht----- Von: Damien Miller <djm at mindrot.org> Gesendet:

OpenSSH 7.6p1 ssh-agent exiting if passed an invalid key blob

2017 Nov 15

OpenSSH 7.6p1 ssh-agent exiting if passed an invalid key blob

On Nov 14, 2017, at 4:11 PM, Damien Miller <djm at mindrot.org> wrote: > On Mon, 13 Nov 2017, Ron Frederick wrote: >> I noticed a problem recently when running some test code against >> the OpenSSH 7.6p1 ssh-agent. These tests ran fine against OpenSSH >> 7.5p1 and earlier, but with OpenSSH 7.6p1, they were suddenly causing >> ssh-agent to exit. > > Sorry,

ssh-agent check for new fresh certificate (and key)? worthwhile doing?

2017 Feb 02

ssh-agent check for new fresh certificate (and key)? worthwhile doing?

Damien Miller wrote: > On Thu, 2 Feb 2017, Adam Eijdenberg wrote: > >> On Thu, Feb 2, 2017 at 10:42 AM Damien Miller <djm at mindrot.org> wrote: >>> On Thu, 2 Feb 2017, Adam Eijdenberg wrote: >>>> I guess a case could be made for ssh-add to always set a timeout when >>>> adding a certificate with an expiry time, but I think for now I'm

Problem in RSA Key authentication

2008 Jun 09

Problem in RSA Key authentication

Hello Damien, I am using OpenSSH-5.0 on my ARM board. I want to perform RSA authentication, but server is not accepting the key generated by the client. I have copied the authorized_keys in the "$HOME/.ssh/" folder and provided permission (755) to that folder. Please help me how to solve this problem. Following is the log from the client OpenSSH_4.3p2, OpenSSL 0.9.8b 04 May 2006

How to use ssh -i with a key from ssh-agent rather than from a file?

2020 Sep 30

How to use ssh -i with a key from ssh-agent rather than from a file?

On Wed, Sep 30, 2020 at 03:35:43PM +1000, Damien Miller <djm at mindrot.org> wrote: > On Wed, 30 Sep 2020, raf wrote: > > > Hi, > > > > I have a VM with a git repository whose origin is on > > github. I have several keys known to github, so I needed > > to set git's core.sshcommand config parameter in the > > repository to something like this:

ssh-agent check for new fresh certificate (and key)? worthwhile doing?

2017 Feb 02

ssh-agent check for new fresh certificate (and key)? worthwhile doing?

On Thu, Feb 2, 2017 at 10:42 AM Damien Miller <djm at mindrot.org> wrote: > On Thu, 2 Feb 2017, Adam Eijdenberg wrote: > > I guess a case could be made for ssh-add to always set a timeout when > > adding a certificate with an expiry time, but I think for now I'm > > happy enough to do that on our end. > > That sounds like a fine idea. Damien, to clarify did

[Bug 1967] Potential memory leak in ssh [detected by melton]

2013 Jul 25