Giter Site home page Giter Site logo

Comments (3)

Mascherus avatar Mascherus commented on June 29, 2024

Fixed.
This problem only appears on Debian12 with libssh2-1 1.10.0-3
If you install the libssh package from Ubuntu (libssh2-1 1.11.0-2), everything works fine

from oxidized.

eoli3n avatar eoli3n commented on June 29, 2024

This is not a fix, but a workaround, I face that same issue with debian12 - libssh2-1 1.10.0-3 and gitlab.

from oxidized.

rkerr avatar rkerr commented on June 29, 2024

I had a similar issue - there's quite a few variables here - gitlab can use OpenSSH or it's own built in ssh server depending on what you have configured, and there are lots of different key types you can use to authenticate for ssh.

What I found in my case was if oxidized is using an RSA key it was attempting to use the older ssh-rsa method (ie RSA with SHA1) but the gitlab end wouldn't accept that and only supports rsa-sha2-256 or rsa-sha2-512. OpenSSH deprecated ssh-rsa in version 8.8 so this should really be dependant on the OpenSSH version not the version of gitlab, but maybe you're running gitlab in a container and the gitlab update updated OpenSSH in the container? or maybe you're using gitlabs own ssh server (not the default).

I didn't dig too much further into what changed to break this. For me there was another easy work around - switching to an ED25519 key which is more secure than RSA anyway and doesn't have this issue.

Also see libssh2/libssh2#536 confirming libssh2 didn't add support for SHA2 with RSA until 1.11.0

from oxidized.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.