Hi, > On 30. Apr 2025, at 19:54, Peter Pentchev <r...@ringlet.net> wrote: > > Is there a chance that there is some kind of mistake in your ~/.ssh/config > file > saying something like "IdentityFile /path/to/id_rsa.pub" so that OpenSSH > would think that id_rsa.pub is a private keyfile and not a public one?
Note that this is actually a valid configuration for cases where the private key is in an HSM or other security module. I guess OpenSSH just doesn’t know whether the file is a private or public key by the time it checks the permissions, so in this case also the public key needs to have limited permissions. -- Clemens Lang RHEL Crypto Team Red Hat -- _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue