From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1PsbvF-0005rh-N0 for garchives@archives.gentoo.org; Thu, 24 Feb 2011 14:12:02 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 515871C071 for ; Thu, 24 Feb 2011 14:12:01 +0000 (UTC) Received: from mail-qw0-f53.google.com (mail-qw0-f53.google.com [209.85.216.53]) by pigeon.gentoo.org (Postfix) with ESMTP id 2DD361C03C for ; Thu, 24 Feb 2011 13:53:00 +0000 (UTC) Received: by qwc9 with SMTP id 9so546301qwc.40 for ; Thu, 24 Feb 2011 05:53:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type:content-transfer-encoding; bh=V1hKEzsPH7B3299l6OolmF5oVexGw+QyP9KiFCUPZPI=; b=uF3LxBCvlnNtYAQ6nA9B5rbRgycBHcB40qGQ0Ym0ssWLdvUgyXjPeqPlL/KVnZvb/G fto3qxx36wL4GOdF7/1GvWREUbpZyg7ESshQH1EdkrKuK8+b8wCkK0sz6MqAKqhR4Prv iFLK/EQNFJuiwHG7w76no4I+MhuLqzCToqBq0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=hooPFXZY2L3vtJLSWJH3Uzm+7HvxQeSxN+AoFdQBZwz7sldqCxHmS54AQscjIjiakd UfxOeLbA936ERMFMl4eMMmRLJ4y9qfnIJGwIz47BYmr9uNcLXSVasEGGEx3hbrX0CVid a679Qxp7SuxxMvaDB1USIF9fqEapBD4JGc2bk= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.224.28.212 with SMTP id n20mr740502qac.181.1298555580286; Thu, 24 Feb 2011 05:53:00 -0800 (PST) Received: by 10.224.214.68 with HTTP; Thu, 24 Feb 2011 05:53:00 -0800 (PST) In-Reply-To: <4D665A51.7050304@optonline.net> References: <4D63A165.4000007@optonline.net> <20110223084613.833972569@data.antarean.org> <4D665A51.7050304@optonline.net> Date: Thu, 24 Feb 2011 13:53:00 +0000 Message-ID: Subject: Re: [gentoo-user] ssh problem From: Mick To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Archives-Salt: X-Archives-Hash: 7e065fc4b8536cd1409b30b21a33c9e0 On 24 February 2011 13:17, dhk wrote: > On 02/23/2011 03:42 AM, Joost Roeleveld wrote: >> On Tuesday 22 February 2011 14:51:31 Mick wrote: >>> On 22 February 2011 14:19, =A0 wrote: >>>> ----- Original Message ----- >>>> From: Mick >>>> >>>>> There was a change in the default ssh encryption algorithm. You may >>>>> want to check if that is causing the problem. >>>> >>>> How would I do that? >>> >>> By examining your config files? =A0Previously your keys would be in >>> ~/.ssh/id_dsa[rsa].pub, but now with ECDSA being the default they >>> would be in ~/.ssh/id_ecdsa.pub >>> >>> I recall something being mentioned in the elog asking to regenerate >>> the key-pair. >>> >>> HTH. >> >> If this is the case, you could try speciying your key on the command-lin= e >> using the "-i" flag: >> >> # ssh -i .ssh/id_dsa.pub >> >> Replace the file with the one on your machine. >> >> HTH, >> >> Joost >> >> > > I still haven't gotten this to work. =A0Am I the only one using this? =A0= The > "ssh -i .ssh/id_dsa.pub host" didn't work. =A0I get a message "Read from > socket failed: Connection reset by peer" with or without the -i option. > > When I re-emerged openssh the following output is displayed. > > # emerge openssh > Calculating dependencies... done! >>>> Verifying ebuild manifests >>>> Emerging (1 of 1) net-misc/openssh-5.8_p1-r1 >>>> Installing (1 of 1) net-misc/openssh-5.8_p1-r1 >>>> Jobs: 1 of 1 complete =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 = =A0 Load avg: 2.80, > 1.95, 1.43 > > =A0* Messages for package net-misc/openssh-5.8_p1-r1: > > =A0* Starting with openssh-5.8p1, the server will default to a newer key > =A0* algorithm (ECDSA). =A0You are encouraged to manually update your sto= red > =A0* keys list as servers update theirs. =A0See ssh-keyscan(1) for more i= nfo. > =A0* Remember to merge your config files in /etc/ssh/ and then > =A0* reload sshd: '/etc/init.d/sshd reload'. > =A0* Please be aware users need a valid shell in /etc/passwd > =A0* in order to be allowed to login. >>>> Auto-cleaning packages... > >>>> No outdated packages were found on your system. > > =A0* GNU info directory index is up-to-date. > > The ssh-keyscan man page hasn't helped. > > As of now I can only log in from older systems. This would imply that your older (rsa/dsa) server keys still work. What have you changed on your Gentoo client? Have you tried using ssh user@host to login with? --=20 Regards, Mick