Re: [Proftpd-user] signature type 'rsa-sha2-512' does not match publickey algorithm 'ssh-rsa'

when using libssh_0.7.4 it does work.

mod_sftp/1.0.1[23226]: sent server version 'SSH-2.0-mod_sftp'
mod_sftp/1.0.1[23226]: received client version 'SSH-2.0-libssh_0.7.4'
mod_sftp/1.0.1[23226]: handling connection from SSH2 client 'libssh_0.7.4'
mod_sftp/1.0.1[23226]:  + Session key exchange: ecdh-sha2-nistp256
mod_sftp/1.0.1[23226]:  + Session server hostkey: ssh-rsa
mod_sftp/1.0.1[23226]:  + Session client-to-server encryption: aes256-ctr
mod_sftp/1.0.1[23226]:  + Session server-to-client encryption: aes256-ctr
mod_sftp/1.0.1[23226]:  + Session client-to-server MAC: hmac-sha2-256
mod_sftp/1.0.1[23226]:  + Session server-to-client MAC: hmac-sha2-256
mod_sftp/1.0.1[23226]:  + Session client-to-server compression: none
mod_sftp/1.0.1[23226]:  + Session server-to-client compression: none
mod_sftp/1.0.1[23226]: public key SHA256 fingerprint:
46:46:c6:b5:1f:17:0d:1f:64:c7:d5:c6:2a:43:7c:d6:9c:99:7a:da:09:74:91:81:0d:0c:2c:d7:d2:a2:a9:0b
mod_sftp/1.0.1[23226]: sending userauth success
mod_sftp/1.0.1[23226]: user 'xxxxxx' authenticated via 'publickey' method
mod_sftp/1.0.1[23226]: 'subsystem' channel request for 'sftp' subsystem
mod_sftp/1.0.1[23226]: using SFTP protocol version 3 for this session
(channel ID 0)
mod_sftp/1.0.1[23226]: disconnecting client (received EOF)

On Thu, Dec 17, 2020 at 11:16 AM Kris G <[email protected]> wrote:

> Hi,
>
> I have a user who when on proftpd version 1.3.5rc1 publickey based auth
> worked fine but when using 1.3.7a I see this in the logs..
>
> Why does "Session server hostkey" log "rsa-sha2-512" when all other logs
> that show successful logins have just Session server hostkey as "ssh-rsa" ?
>
> mod_sftp/1.0.1[20741]: sent server version 'SSH-2.0-mod_sftp'
> mod_sftp/1.0.1[20741]: received client version 'SSH-2.0-libssh_0.9.0'
> mod_sftp/1.0.1[20741]: handling connection from SSH2 client 'libssh_0.9.0'
> mod_sftp/1.0.1[20741]:  + Session key exchange: ecdh-sha2-nistp256
> mod_sftp/1.0.1[20741]:  + Session server hostkey: rsa-sha2-512
> mod_sftp/1.0.1[20741]:  + Session client-to-server encryption: aes256-ctr
> mod_sftp/1.0.1[20741]:  + Session server-to-client encryption: aes256-ctr
> mod_sftp/1.0.1[20741]:  + Session client-to-server MAC: hmac-sha2-256
> mod_sftp/1.0.1[20741]:  + Session server-to-client MAC: hmac-sha2-256
> mod_sftp/1.0.1[20741]:  + Session client-to-server compression: none
> mod_sftp/1.0.1[20741]:  + Session server-to-client compression: none
> mod_sftp/1.0.1[20741]: public key SHA256 fingerprint:
> 46:46:c6:b5:1f:17:0d:1f:64:c7:d5:c6:2a:43:7c:d6:9c:99:7a:da:09:74:91:81:0d:0c:2c:d7:d2:a2:a9:0b
> mod_sftp/1.0.1[20741]: unable to verify signed data: signature type
> 'rsa-sha2-512' does not match publickey algorithm 'ssh-rsa'
> mod_sftp/1.0.1[20741]: failed to verify 'ssh-rsa' signature on public key
> auth request for user 'xxxx'
> mod_sftp/1.0.1[20741]: sending userauth failure; remaining userauth
> methods: publickey,password,keyboard-interactive
> mod_sftp/1.0.1[20741]: password authentication for user 'xxxx' failed:
> Incorrect password
> mod_sftp/1.0.1[20741]: sending userauth failure; remaining userauth
> methods: publickey,password,keyboard-interactive
> mod_sftp/1.0.1[20741]: client at x.x.x.x sent SSH_DISCONNECT message: Bye
> Bye (Application disconnected)
>

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html