Package: dput-ng
Version: 1.28
Severity: normal
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Dear maintainer,
I recently switched from dput to dput-ng (due to needing the `dcut dm` command).
- - dput-ng complained about the scp method being deprecated, which was
selected due to dput's old config being present;
- - I apt-purged dput;
- - since then, dput-ng fails to upload,
presumably due to using Paramiko instead of OpenSSH.
Opening a bug because this is likely not intended behaviour.
> $ dput /opt/deb/buildarea/pam-u2f_1.0.7-1+deb10u1_source.changes
> Uploading pam-u2f using sftp to ssh-upload (host: ssh.upload.debian.org;
> directory: /srv/upload.debian.org/UploadQueue/)
> running allowed-distribution: check whether a local profile permits uploads
> to the target distribution
> running protected-distribution: warn before uploading to distributions where
> a special policy applies
> running checksum: verify checksums before uploading
> running suite-mismatch: check the target distribution for common errors
> running gpg: check GnuPG signatures before the upload
> Logging into host ssh.upload.debian.org as nicoo
> /usr/lib/python3/dist-packages/paramiko/ecdsakey.py:164:
> CryptographyDeprecationWarning: Support for unsafe construction of public
> numbers from encoded data will be removed in a future version. Please use
> EllipticCurvePublicKey.from_encoded_point
> self.ecdsa_curve.curve_class(), pointinfo
> /usr/lib/python3/dist-packages/paramiko/kex_ecdh_nist.py:39:
> CryptographyDeprecationWarning: encode_point has been deprecated on
> EllipticCurvePublicNumbers and will be removed in a future version. Please
> use EllipticCurvePublicKey.public_bytes to obtain both compressed and
> uncompressed point encoding.
> m.add_string(self.Q_C.public_numbers().encode_point())
> /usr/lib/python3/dist-packages/paramiko/kex_ecdh_nist.py:96:
> CryptographyDeprecationWarning: Support for unsafe construction of public
> numbers from encoded data will be removed in a future version. Please use
> EllipticCurvePublicKey.from_encoded_point
> self.curve, Q_S_bytes
> /usr/lib/python3/dist-packages/paramiko/kex_ecdh_nist.py:111:
> CryptographyDeprecationWarning: encode_point has been deprecated on
> EllipticCurvePublicNumbers and will be removed in a future version. Please
> use EllipticCurvePublicKey.public_bytes to obtain both compressed and
> uncompressed point encoding.
> hm.add_string(self.Q_C.public_numbers().encode_point())
> please login: To accept ssh-ed25519 hostkey
> b'5c90717e5b00364ec2130d9d7a46e4f7' for ssh.upload.debian.org type "yes":
> [yes, no]: yes
> Exception: key cannot be used for signing
> Traceback (most recent call last):
> File "/usr/lib/python3/dist-packages/paramiko/transport.py", line 2036, in
> run
> handler(self.auth_handler, m)
> File "/usr/lib/python3/dist-packages/paramiko/auth_handler.py", line 298,
> in _parse_service_accept
> sig = self.private_key.sign_ssh_data(blob)
> File "/usr/lib/python3/dist-packages/paramiko/agent.py", line 418, in
> sign_ssh_data
> raise SSHException("key cannot be used for signing")
> paramiko.ssh_exception.SSHException: key cannot be used for signing
>
> SFTP error uploading to ssh.upload.debian.org: SSHException('No existing
> session')
>
> $ ssh -N ssh.upload.debian.org
> Linux usper 4.9.0-9-amd64 #1 SMP Debian 4.9.168-1+deb9u5 (2019-08-11) x86_64
>
> This device is for authorized users only. All traffic on this device
> is monitored and will be used as evidence for prosecutions. By using
> this machine you agree to abide by the Debian Machines Usage Policies
> <URL:https://www.debian.org/devel/dmup>.
>
> %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
>
> Francesco Usper (November 1st, 1561 - February 24th, 1641)
>
> Welcome to usper.debian.org, used for the following services:
> ftp.upload.debian.org - FTP upload queue
> ssh.upload.debian.org - SSH upload queue
>
> This virtual server runs on the cluster ganeti.csail.debian.org, which is
> hosted at csail.
>
> %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Using a ~/.dput.cf snippet to revert to the SCP method (as opposed to SFTP)
works.
Best,
nicoo
- -- System Information:
Debian Release: bullseye/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set
to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages dput-ng depends on:
ii python3 3.7.3-1
ii python3-dput 1.28
dput-ng recommends no packages.
Versions of packages dput-ng suggests:
pn dput-ng-doc <none>
pn python3-twitter <none>
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
iQJFBAEBCgAvFiEEU7EqA8ZVHYoLJhPE5vmO4pLV7MsFAl1hZu0RHG5pY29vQGRl
Ymlhbi5vcmcACgkQ5vmO4pLV7MskMw//TotZynVLKYEOpTggpXDy8loAMv9n5zdS
T5NUQG/PSaBxeiJDV8N+/Y/5WeIBVgqk+0P1iOl1upeBqZdwvcNV0PA9W8XmwMJ7
aFCuy4/QGcnBBoGhjCx/skuDkdZBv51NUUw/yA8q4BcmttwxhaMNpnIOYiFbY3hf
Wwt/3xZVLBPYBU1VHJiIyl9TPoReSgrIIsTsSAG+L7xvxGonkd5+HVBJXPlX1Rtx
eyj7ScR1+etP7OLhavwsg94RC6zLLibY7JNFkV+LJzZjR1187mIs3XqWCk4ffKes
pVNGYIuF8GzEI9D2qGyMIQLTIQmbBG8ZchAdzR/EHBHNL/48U4Ted3vnB8kJhPTJ
pA5g8cGeZENIWhyk+xPSZ2CKfddCU2L6UCWpnFPHWIGnBmwcpt9bxDQxszo7lo9U
C8Sw/ZGVqASYC8wJcIeipB76EULpqfUBbSUrcu7Lt4s05WvG1IGzMvOtusPMhNmt
nsb+0rC8+TXGAm2O/dVEpOPIZiz0LIuZXd3NKZOv/9TFEgLcus1Z1gyRZlEyQCGQ
8R1HQHIKlrZwQmelbqG4eythRaUZVhJC/vPj7Eq/urfZLF1jblf4UNi2SFjGLQSa
xLGHSV3jJvkiPqFQYAdo+d9vc7vfRgRpoYxoLXeeTj9PJ3Gat7sS3KcZL6+faUQ3
pzGyB+RWBFo=
=H8b1
-----END PGP SIGNATURE-----
