Agent: reset supported_private_key_algorithms for every key#1995
Agent: reset supported_private_key_algorithms for every key#1995forrest79 wants to merge 1 commit intophpseclib:masterfrom forrest79:agent-reset-supported-private-key-algorithms
Conversation
|
Nice find! Altho what'd be better is if you did something like The reason this would be better than what you're currently doing is that I could make this change myself but I'll hold off for a few days in case you want to do it? Like if I do it your name won't be in the commit history. idk if that matters to you or not lol. That said, if you want to make the code change vs me, don't use tabs to indent. In your change the line you added is preceded by one tab and then eight spaces. The tab should be replaced by four spaces (bringing the total number of spaces to twelve). Thanks! |
|
Hi, thank you for a quick response:
I updated the patch according to your advice. I'm totally OK with not having my name in the commit history, so if this update is still not perfect, feel free to fix this on your own :-)
Sorry, I did a quick commit right in the GitHub web interface, now it's OK. |
|
Looks good! I'll try to merge this this evening. More specifically, I'll cherry pick this to the 1.0 branch and then merge into the 2.0 branch, the 3.0 branch and then the master branch. |
|
See 3b0fb1c Thanks! |
Hi, I think I found a bug in the agent login.
I have ssh-agent with 3 certificates loaded. I'm able to log in to my server with a classic ssh client but not with Agent from this library. I figured out that the problem is after the first key is not accepted (if it is not accepted), in the
supported_private_key_algorithmsproperty are ommitedrsa-sha2-256andrsa-sha2-512algorithms and onlyssh-rsais kept. Butssh-rsais disabled by default in mysshdand then the second and next keys are tried only withssh-rsawhich is declined bysshd.I think every key from the agent should start with all algorithms in the
supported_private_key_algorithmsproperty. I'm not an expert in this nor in this library - I prepare a simple fix that works for me. But I suppose that the correct solution will be different :-)