Follow-up Comment #3, sr#110996 (group administration):

[comment #2 comment #2:]
> Are you running Arch or Parabola and if so have you recently updated
> to a newer version of ssh?  This is me guessing and gathering
> background information.
> 
> The problem is most likely that the ssh client on your system is
> rejecting the legacy 1024-bit rsa host key being presented by
> fencepost and not trying either of the other two presented newer host
> keys which are stronger.


I use Fedora Silverblue v39, but still may be the same problem

> In the meantime let's see if we can help.  As a temporary workaround I
> think this next will force your ssh client to acept the key but to
> upgrade to the strongest ED25519 key and store it into the known_hosts
> file.
> 
> Try this:
> 

>     ssh -o'UpdateHostKeys=yes' -o'HostkeyAlgorithms=+ssh-rsa'
-o'PubkeyAcceptedAlgorithms=+ssh-rsa' fencepost.gnu.org
>     ...
>     ED25519 key fingerprint is
SHA256:czIgr7VZvWzBireMUixS42C5dnq/H5DaRAbTD2Kgqpw.
>     ...


Really appreciate the assistance, but unfortunately that gives me the exact
same `Bad server host key: Invalid key length` with exit code 255.

> If that works, allows you to accept the new key, and log into
> fencepost, then on your client create an ed25519 key, and upgrade the
> public key in your fencepost ~/.ssh/authorized_keys file to the
> contents of the newly created id_ed25519.pub file on your client.
> This is described somewhat more here for Savannah.
> 
> https://savannah.nongnu.org/maintenance/SshAccess/
> 
> Then also log into your Savannah web UI and upgrade your access keys
> for use with Savannah systems as this would likely be a problem for
> any ssh access there too.
> 
> I appreciate hearing feedback about these instructions.  If they work.
> If they don't work.  If they were confusing.  If they were clear.  We
> want to be able to help people with the best information possible.

Instructions are clear and I do have an ed25519 and rsa key which have both
been uploaded to Savannah, but perhaps I have to reach out to the FSF admin
about that once I get this connection working.


    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/support/?110996>

_______________________________________________
Message sent via Savannah
https://savannah.nongnu.org/


Reply via email to