ECDSA key breaks a knife operability

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Critical Critical
  • Resolution: Duplicate
  • Affects Version/s: 0.10.8
  • Fix Version/s: None
  • Component/s: Knife
  • Labels:
  • Environment:

    Ubuntu 11.10 (oneiric)
    OpenSSH_5.8p1 Debian-7ubuntu1, OpenSSL 1.0.0e 6 Sep 2011
    net-ssh (2.3.0)

Description

% ssh-add -l                      
2048 4e:ef:33:b3:87:4a:a5:67:da:55:9c:2d:90:99:cc:91 /home/snp/.ssh/id_rsa (RSA)
256 04:f8:a7:57:34:5d:8e:a7:2c:c3:87:bd:6a:fe:60:ce /home/snp/.ssh/id_ecdsa (ECDSA)
% knife bootstrap myhost.tld
Bootstrapping Chef on myhost.tld
ERROR: NotImplementedError: unsupported key type `ecdsa-sha2-nistp256'

Removing key (ssh-add -d /home/snp/.ssh/id_ecdsa) helps, but it just a workaround. I belive that unsupported key should be skipped instead of raising an exception.

Issue Links

relates to

Improvement - An improvement or enhancement to an existing feature or task. CHEF-3156 Net::SSH dependency prevents using HMAC SHA2 family

  • Unknown - Issue untriaged, priority unassigned or questioned
  • Fix Committed - The fix has been committed to the repository

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Bryan McLellan [Opscode] added a comment -

This is a net-ssh bug: http://net-ssh.lighthouseapp.com/projects/36253/tickets/39-ecdsa-support

It looks like vagrant just wrapped it into a nice error message: https://github.com/mitchellh/vagrant/issues/805

Maybe we could rescue this and continue? Serge, can you run this with '-V -V' passed to knife?

Show
Bryan McLellan [Opscode] added a comment - This is a net-ssh bug: http://net-ssh.lighthouseapp.com/projects/36253/tickets/39-ecdsa-support It looks like vagrant just wrapped it into a nice error message: https://github.com/mitchellh/vagrant/issues/805 Maybe we could rescue this and continue? Serge, can you run this with '-V -V' passed to knife?
Hide
Permalink
Serge Pokhodyaev added a comment - 
% knife bootstrap myhost.tld -V -V
DEBUG: Using configuration from /home/snp/.chef/knife.rb
Bootstrapping Chef on myhost.tld
DEBUG: Looking for bootstrap template in /usr/lib/ruby/vendor_ruby/chef/knife/bootstrap
DEBUG: Found bootstrap template in /usr/lib/ruby/vendor_ruby/chef/knife/bootstrap
DEBUG: Adding myhost.tld
DEBUG: establishing connection to 10.XXX.XXX.XXX:22
DEBUG: connection established
INFO: negotiating protocol version
DEBUG: remote is `SSH-2.0-OpenSSH_5.5p1 Debian-6+squeeze1'
DEBUG: local is `SSH-2.0-Ruby/Net::SSH_2.2.1 x86_64-linux'
DEBUG: read 784 bytes
DEBUG: received packet nr 0 type 20 len 780
INFO: got KEXINIT from server
INFO: sending KEXINIT
DEBUG: queueing packet nr 0 type 20 len 556
DEBUG: sent 560 bytes
INFO: negotiating algorithms
DEBUG: negotiated:
* kex: diffie-hellman-group-exchange-sha1
* host_key: ssh-rsa
* encryption_server: aes128-cbc
* encryption_client: aes128-cbc
* hmac_client: hmac-sha1
* hmac_server: hmac-sha1
* compression_client: zlib@openssh.com
* compression_server: zlib@openssh.com
* language_client: 
* language_server: 
DEBUG: exchanging keys
DEBUG: queueing packet nr 1 type 34 len 20
DEBUG: sent 24 bytes
DEBUG: read 152 bytes
DEBUG: received packet nr 1 type 31 len 148
DEBUG: queueing packet nr 2 type 32 len 140
DEBUG: sent 144 bytes
DEBUG: read 720 bytes
DEBUG: received packet nr 2 type 33 len 700
DEBUG: queueing packet nr 3 type 21 len 20
DEBUG: sent 24 bytes
DEBUG: received packet nr 3 type 21 len 12
DEBUG: beginning authentication of `root'
DEBUG: queueing packet nr 4 type 5 len 28
DEBUG: sent 52 bytes
DEBUG: read 52 bytes
DEBUG: received packet nr 4 type 6 len 28
DEBUG: trying publickey
DEBUG: connecting to ssh-agent
DEBUG: sending agent request 1 len 44
DEBUG: received agent packet 2 len 5
DEBUG: sending agent request 11 len 0
DEBUG: received agent packet 12 len 428
/usr/lib/ruby/vendor_ruby/net/ssh/buffer.rb:259:in `read_keyblob': unsupported key type `ecdsa-sha2-nistp256' (NotImplementedError)
	from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:37:in `join'
	from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:37:in `sessions'
	from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:37:in `each'
	from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:37:in `sessions'
	from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:81:in `open_channel'
	from /usr/lib/ruby/vendor_ruby/chef/knife/ssh.rb:167:in `ssh_command'
	from /usr/lib/ruby/vendor_ruby/chef/knife/ssh.rb:358:in `run'
	from /usr/lib/ruby/vendor_ruby/chef/knife/bootstrap.rb:154:in `run'
	from /usr/lib/ruby/vendor_ruby/chef/knife.rb:391:in `run_with_pretty_exceptions'
	from /usr/lib/ruby/vendor_ruby/chef/knife.rb:166:in `run'
	from /usr/lib/ruby/vendor_ruby/chef/application/knife.rb:128:in `run'
	from /usr/bin/knife:24
Show
Serge Pokhodyaev added a comment - % knife bootstrap myhost.tld -V -V DEBUG: Using configuration from /home/snp/.chef/knife.rb Bootstrapping Chef on myhost.tld DEBUG: Looking for bootstrap template in /usr/lib/ruby/vendor_ruby/chef/knife/bootstrap DEBUG: Found bootstrap template in /usr/lib/ruby/vendor_ruby/chef/knife/bootstrap DEBUG: Adding myhost.tld DEBUG: establishing connection to 10.XXX.XXX.XXX:22 DEBUG: connection established INFO: negotiating protocol version DEBUG: remote is `SSH-2.0-OpenSSH_5.5p1 Debian-6+squeeze1' DEBUG: local is `SSH-2.0-Ruby/Net::SSH_2.2.1 x86_64-linux' DEBUG: read 784 bytes DEBUG: received packet nr 0 type 20 len 780 INFO: got KEXINIT from server INFO: sending KEXINIT DEBUG: queueing packet nr 0 type 20 len 556 DEBUG: sent 560 bytes INFO: negotiating algorithms DEBUG: negotiated: * kex: diffie-hellman-group-exchange-sha1 * host_key: ssh-rsa * encryption_server: aes128-cbc * encryption_client: aes128-cbc * hmac_client: hmac-sha1 * hmac_server: hmac-sha1 * compression_client: zlib@openssh.com * compression_server: zlib@openssh.com * language_client: * language_server: DEBUG: exchanging keys DEBUG: queueing packet nr 1 type 34 len 20 DEBUG: sent 24 bytes DEBUG: read 152 bytes DEBUG: received packet nr 1 type 31 len 148 DEBUG: queueing packet nr 2 type 32 len 140 DEBUG: sent 144 bytes DEBUG: read 720 bytes DEBUG: received packet nr 2 type 33 len 700 DEBUG: queueing packet nr 3 type 21 len 20 DEBUG: sent 24 bytes DEBUG: received packet nr 3 type 21 len 12 DEBUG: beginning authentication of `root' DEBUG: queueing packet nr 4 type 5 len 28 DEBUG: sent 52 bytes DEBUG: read 52 bytes DEBUG: received packet nr 4 type 6 len 28 DEBUG: trying publickey DEBUG: connecting to ssh-agent DEBUG: sending agent request 1 len 44 DEBUG: received agent packet 2 len 5 DEBUG: sending agent request 11 len 0 DEBUG: received agent packet 12 len 428 /usr/lib/ruby/vendor_ruby/net/ssh/buffer.rb:259:in `read_keyblob': unsupported key type `ecdsa-sha2-nistp256' (NotImplementedError) from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:37:in `join' from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:37:in `sessions' from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:37:in `each' from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:37:in `sessions' from /usr/lib/ruby/vendor_ruby/net/ssh/multi/session_actions.rb:81:in `open_channel' from /usr/lib/ruby/vendor_ruby/chef/knife/ssh.rb:167:in `ssh_command' from /usr/lib/ruby/vendor_ruby/chef/knife/ssh.rb:358:in `run' from /usr/lib/ruby/vendor_ruby/chef/knife/bootstrap.rb:154:in `run' from /usr/lib/ruby/vendor_ruby/chef/knife.rb:391:in `run_with_pretty_exceptions' from /usr/lib/ruby/vendor_ruby/chef/knife.rb:166:in `run' from /usr/lib/ruby/vendor_ruby/chef/application/knife.rb:128:in `run' from /usr/bin/knife:24
Hide
Permalink
Bryan McLellan [Opscode] added a comment -

net-ssh 2.5.0 should have ecdsa support: https://github.com/net-ssh/net-ssh/pull/37

Show
Bryan McLellan [Opscode] added a comment - net-ssh 2.5.0 should have ecdsa support: https://github.com/net-ssh/net-ssh/pull/37
Hide
Permalink
Serge Pokhodyaev added a comment -

net-ssh 2.5.2 works

Show
Serge Pokhodyaev added a comment - net-ssh 2.5.2 works
Hide
Permalink
Bryan McLellan [Opscode] added a comment -

Should be fixed by CHEF-3156

Show
Bryan McLellan [Opscode] added a comment - Should be fixed by CHEF-3156

People

  • Assignee:
    Unassigned
    Reporter:
    Serge Pokhodyaev
Vote (0)
Watch (1)

Dates

  • Created:
    Updated:
    Resolved: