Re: Using Key Pairs on OpenSSH on Win2k3
"Robert Denton" <[email protected]> Tue, 17 Jun 2008 13:20:52 -0700
| Newsgroups | gmane.network.ssh.windows |
|---|---|
| Organization | Headsprout |
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. -------------84d9dd84d20094fc1775957679667f0a Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Great discovery! Perhaps I need an SSH client that can handle interacti= ve commands. Seems like this will be the best solution to the problem. = Sorry for the tardy reply... been on holiday. Robert=20 =5F=5F=5F=5F=5F =20 From: Jon Spriggs [mailto:[email protected]] To: [email protected] Sent: Fri, 30 May 2008 01:04:45 -0700 Subject: Re: Using Key Pairs on OpenSSH on Win2k3 Hi there Robert. =20 I've figured it out (I did some experimenting) and discovered that the= reason why it's not working is that the SSHD can't cope with interact= ive commands, so when you press a key, it doesn't recognise it. =20 What you'll need to do is to run the command locally as the user and = press P to set it to permanent. Now, without having multiple user accou= nts to try this as, I can't verify the next stage... but, there's a dir= ectory in the profile, under Application Data\Subversion\auth\svn.ssl.= server\ where there are a series of files. Clear this folder, then you = *MIGHT* find that by copying the new file that is created when you make= the certificate permanent into other users' profiles, it'll work. =20 Hope that helps :) =20 Jon =20 Robert Denton wrote: The path issue is still a mystery to me= as I have modified the path every which way and it still does not work= . On the upside, this issue is not critical to what I need to do since= all I really need is to be able to do is from a command prompt, "accep= t" an ssl cert. So what I have done is navigated to the subversion bin= dir and issued this: =20 ./svn.exe co https://... =20 Which finally does indeed work. The problem I am seeing now is that I = get prompted to accept an "untrusted" cert. After pressing 'p' for pe= rmanent, the process seems to just stop. Normally it continues on and = accesses the page you requested in the first place. The other problem = I have with this is that the cert should not be untrusted. It is a Como= do cert that browsers (for example) do not have a problem with. =20 Robert=20 =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Thu, 29 May 2008 11:18:45 -0700 Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 =20 command not found is a path issue. I am not familliar with Subversion,= we user PVCS in our shop, but if you suspect the patch, use the set co= mmand from the shell to see what the current path is set to.. just type= in "set" and all the variables will be returned. locate the path, to = confirm it is set correctly. As a side note, I don't believe you need = to escape the space in program files, try: =20 =20 export PATH=3D"/cygdrive/c/Profile files/Subversion/bin:$PATH" =20 =20 or =20 =20 =20 export PATH=3D"$PATH:/cygdrive/c/Profile files/Subversion/bin" = =20 =20 =20 =20 =5F=5F=5F=5F=5F =20 From: [email protected] [mailto:[email protected]] On Behalf Of Rob= ert Denton Sent: Thursday, May 29, 2008 9:26 AM To: [email protected] Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 Hi there. This continues to baffle. I have edited the profile = file as you have recommended, as well as issued the more correct: =20 PATH=3D"$PATH:/cygdrive/c/Program\ Files/Subversion/Subversion/bi= n" =20 but I still get: =20 admin@development ~ $ svn -bash: svn: command not found =20 I even added a shortcut to svn.exe in windows/system32. All to no av= ail. If this is not a path issue what else could it be=3F If it were = a permissions problem I do not think I'd be getting the command not fou= nd error. =20 =20 Robert=20 =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Wed, 28 May 2008 16:42:11 -0700 Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 =20 okay, so once you SSH into devserver, then you from within devserver yo= u are running the svnclient. =20 =20 Assuming you are using the default configuration of copSSH, then your b= ash path comes from: =20 =20 /etc/profile =20 =20 you can edit this file to modify the EXPORT command if you wish to chan= ge the PATH. My default /etc/profile looks like this: = =20 =20 $ cat /etc/profile =20 # If you wish to change the path for all users, it is recommended you e= dit # /etc/bash.bashrc =20 =20 syspath=3D`/bin/cygpath -S` winpath=3D`/bin/cygpath -W` export PATH=3D"/bin:$syspath:$winpath" umask 027 =20 =20 # Set a default prompt of: user@host and current=5Fdirectory PS1=3D'\[\033]0;\w\007 \033[32m\]\u@\h \[\033[33m\w\033[0m\] $ ' =20 Since you're probably running the default install, it should be the sam= e. Just ignore the recomendation of editing /etc/bash.bashrc since the= file doesn't exist on a default copSSH install, and editing the export= here works just as well for such a simple installation. =20 =20 See if that resolve your path issue. I recommend you change it as foll= ows: =20 =20 $ vi /etc/profile =20 # If you wish to change the path for all users, it is recommended you e= dit # /etc/bash.bashrc =20 =20 syspath=3D`/bin/cygpath -S` winpath=3D`/bin/cygpath -W` export PATH=3D"/bin:$syspath:$winpath:cygdrive/c/Program\ Files/Subve= rsion/bin" umask 027 =20 =20 # Set a default prompt of: user@host and current=5Fdirectory PS1=3D'\[\033]0;\w\007 \033[32m\]\u@\h \[\033[33m\w\033[0m\] $ ' =20 Also, I am not a bash pro, but I believe the proper form of the bash co= mmand for setting the path is: =20 PATH=3D"$PATH:/cygdrive/c/Program\ Files/Subversion/Subversion/bin" = =20 =20 By specifying the $PATH=3D you are actually causing the shell to think = you want to execute the contents of $PATH, which is why you are receivi= ng a No such file or directory upon the set command (it's a syntax erro= r issue). =20 =20 Regards, =20 Armand =20 =20 =20 =5F=5F=5F=5F=5F =20 From: [email protected] [mailto:[email protected]] On Behalf Of = Robert Denton Sent: Wednesday, May 28, 2008 4:25 PM To: [email protected] Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 Trying to append to the path seems to not work, also: =20 admin@development ~ $ $PATH =3D $PATH:/cygdrive/c/Program\ Files/Subversion/bin/ -bash: /bin:/cygdrive/c/WINDOWS/system32:/cygdrive/c/WINDOWS: No such = file or directory =20 This might be a key element in solving this problem. I say this since = if I could actually issue the svn co command from a ssh session, then I= should (in theory) be able to select 'p' for permanent, and make this = problem go away. =20 Robert=20 =5F=5F=5F=5F=5F =20 From: Robert Denton [mailto:[email protected]] To: [email protected] Sent: Wed, 28 May 2008 15:56:32 -0700 Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 Okay, let me see if I can explain my set up a little bit. And you mi= ght be right about there being no connection between openssh and the ss= l used to connect to the https server, but here goes: =20 user@svnserver ---(ssh)---> admin@devserver ---(https)---> s= vnserver =20 Seems weird to do it that way, but in order to maintain a mirror of = our code on the dev server we need to issue an 'update' command to the = svn client on the dev server where we want the mirror, and this is trig= gered by a process on the svn server itself. The first part seems to b= e working with one weird exception: =20 If I log onto the devserver and launch a command prompt, the command = 'svn' is known by virtue of path. Oddly, if I ssh to that server as the = same user, the command 'ssh' is not known. Does Cygwin (or OpenSSH) ma= intain it's own path variable=3F If so, where is it kept=3F =20 Robert=20 =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Wed, 28 May 2008 14:33:24 -0700 Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 =20 I don't think the copSSH and the https based activities are related. R= egarding the connection to the other server (via https), how is this co= nnection established=3F I need more information to understand the issu= e. Are you connecting (via ssh) to the server, and then on the server = using wget or other command line util to get something from a web serve= r=3F If you are using an SSH tunnel to connect to the https server usi= ng the ssh server as a middle point then I would need to know what clie= nt libraries on your client computer are used to establish the https s= ession. =20 =20 Armand =20 =20 =5F=5F=5F=5F=5F =20 From: [email protected] [mailto:[email protected]] On Behalf= Of Robert Denton Sent: Wednesday, May 28, 2008 12:49 PM To: [email protected] Subject: Re: Using Key Pairs on OpenSSH on Win2k3 =20 So I took your advice and installed CopSSH instead and it = is working as desired, with one minor snag. First, the application I a= m using this for is to connect to the copssh server and run some comman= ds. One of the commands involves connection to a different server via = https. When I do this I get prompted to accept the certificate. Choos= ing 'p' for permanent has no effect. =20 Advice I have gotten from other forums is that I need to download Com= odo's Trusted Root Certificate and append it to the end of the ca-bundl= e.crt that is used by OpenSSH. Unfortunately a search of the system yi= elds no such file. Where does CopSSH place this file=3F And do you ag= ree that this is the recommended course of action=3F =20 Robert =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Thu, 22 May 2008 09:17:19 -0700 Subject: Re: Using Key Pairs on OpenSSH on Win2k3 =20 Robert, =20 Before I look into potential causes, the first I would like to know is= : are you using copSSH, the Cygwin installation with the openSSH packag= e installed, or the "openSSH for Windows" project from source forge=3F =20 Why do I ask=3F Al three are openSSH from the cygwin project the foll= owing conditions: Cygwin is the thick install proding the option to turn you windows box= into a GNU Linux like operating system (via the bash or other shell an= d some special mappers built into cygwin). The cygwin project installs = a basic configuration of openSSH which works well on older windows sys= tems, but requires specific things be done to get the SSH server to wor= k 100% on windows 2003 and Vista. =20 CopSSH is a pre-packaged minimal installation of Cygwin with a couple = minor enhancement patches that installs Cygwin, openSSH, configures you= computer (even vista and win2k3) so that openSSH works without any tw= eaking at all. =20 "OpenSSH for Windows" is a dead sourceforge project that is almost id= entical to copSSH, except that development on the project has stopped a= long time ago, and this package requires more tweaking of the ssh sett= ings and the server that the other options, and is running very old ssh= code that should not be used anymore in my opinion. =20 If you want the easy solution, install copSSH and everything will work= . If you want to get what you have working and you did not install copS= SH then we can offer assistance with making all the appropriate changes= , but it will take more time to get SSH services up and running with p= ublic keys, but you will have the option of using any piece of the cygw= in project easily. =20 Armand =20 =20 -------------84d9dd84d20094fc1775957679667f0a Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <!DOCTYPE html PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'> <html> <head> <meta http-equiv=3D'Content-Type' content=3D'text/html;charset=3Dus-asc= ii'> <style>BODY{font:10pt Tahoma, Verdana, sans-serif;}</style> </head> <body> Great discovery! Perhaps I need an SSH client that can handle inte= ractive commands. Seems like this will be the best solution to the= problem. Sorry for the tardy reply... been on holiday.<br><br>Rob= ert <br><blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); padd= ing-left: 5px; margin-left: 5px; margin-right: 0px;"><hr><b>From:</b> Jo= n Spriggs [mailto:[email protected]]<br><b>To:</b> [email protected]<br= ><b>Sent:</b> Fri, 30 May 2008 01:04:45 -0700<br><b>Subject:</b> Re: Usi= ng Key Pairs on OpenSSH on Win2k3<br><br> =20 Hi there Robert.<br> <br> I've figured it out (I did some experimenting) and discovered that the reason why it's not working is that the SSHD can't cope with interactive commands, so when you press a key, it doesn't recognise it.<= br> <br> What you'll need to do is to run the command locally as the user and press P to set it to permanent. Now, without having multiple user accounts to try this as, I can't verify the next stage... but, there's a directory in the profile, under Application Data\Subversion\auth\svn.ssl.server\ where there are a series of files. Clear this folder, then you *MIGHT* find that by copying the new file that is created when you make the certificate permanent into other users' profiles, it'll work.<br> <br> Hope that helps :)<br> <br> Jon<br> <br> Robert Denton wrote: <blockquote type=3D"cite"> =20 The path issue is still a mystery to me as I have modified the path every which way and it still does not work. On the upside, this issue is not critical to what I need to do since all I really need is to be able to do is from a command prompt, "accept" an ssl cert. So what I have = done is navigated to the subversion bin dir and issued this:<br> <br> ./svn.exe co <a class=3D"moz-txt-link-freetext" href=3D"https://">https:= //</a>...<br> <br> Which finally does indeed work. The problem I am seeing now is that I get prompted to accept an "untrusted" cert. After pressing 'p' for permanent, the process seems to just stop. Normally it continues o= n and accesses the page you requested in the first place. The other problem I have with this is that the cert should not be untrusted. It is a Comodo cert that browsers (for example) do not have a problem with.= <br> <br> Robert <br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); padding-le= ft: 5px; margin-left: 5px; margin-right: 0px;"> <hr><b>From:</b> Welsh, Armand [<a class=3D"moz-txt-link-freetext" h= ref=3D"mailto:[email protected]">mailto:[email protected]</a= >]<br> <b>To:</b> <a class=3D"moz-txt-link-abbreviated" href=3D"mailto:ssh@= erdelynet.com">[email protected]</a><br> <b>Sent:</b> Thu, 29 May 2008 11:18:45 -0700<br> <b>Subject:</b> RE: Using Key Pairs on OpenSSH on Win2k3<br> <br> <div align=3D"left"><span class=3D"842181418-29052008">command not found is a path issue. I am not familliar with Subversion, we user PVCS in our shop, but if you suspect the patch, use the set command from the shell to see what the current path is set to.. just type in "set" and all the variables will be returned. locate the path, to confirm it is set correctly. As a side note, I don't believe you n= eed to escape the space in program files, try:</span></div> <div align=3D"left"><span class=3D"842181418-29052008"></span> = </div> <div align=3D"left"><span class=3D"842181418-29052008">export PATH=3D"/cygdrive/c/Profile files/Subversion/bin:$PATH"</span></div> <div align=3D"left"><span class=3D"842181418-29052008"></span> = </div> <div align=3D"left"><span class=3D"842181418-29052008">or</span></di= v> <div align=3D"left"><span class=3D"842181418-29052008"> <div align=3D"left"><span class=3D"842181418-29052008"></span> = </div> <div align=3D"left"><span class=3D"842181418-29052008">export PATH=3D"$PATH:/cygdrive/c/Profile files/Subversion/bin"</span></div> </span></div> <div align=3D"left"><span class=3D"842181418-29052008"></span> = </div> <div align=3D"left"><span class=3D"842181418-29052008"></span> = </div> <br> <div class=3D"OutlookMessageHeader" align=3D"left"> <hr><b>From:</b> <a href=3D"mailto:[email protected]">ssh@erdelynet.= com</a> [mailto:<a href=3D"mailto:[email protected]">[email protected]</= a>] <b>On Behalf Of </b>Robert Denton<br> <b>Sent:</b> Thursday, May 29, 2008 9:26 AM<br> <b>To:</b> <a href=3D"mailto:[email protected]">[email protected]</a= ><br> <b>Subject:</b> RE: Using Key Pairs on OpenSSH on Win2k3<br> <br> </div> Hi there. This continues to baffle. I have edited the profil= e file as you have recommended, as well as issued the more correct:<br> <br> <span class=3D"614182923-28052008">PATH=3D"$PATH:/cygdrive/c/Program= \ Files/Subversion/Subversion/bin"<br> <br> but I still get:<br> <br> <a href=3D"mailto:admin@development">admin@development</a> ~<br> $ svn<br> -bash: svn: command not found<br> <br> I even added a shortcut to svn.exe in windows/system32. All to no avail. If this is not a path issue what else could it be=3F = If it were a permissions problem I do not think I'd be getting the command not found error.<br> <br> </span><br> Robert <br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); padding-= left: 5px; margin-left: 5px; margin-right: 0px;"> <hr> <b>From:</b> Welsh, Armand [mailto:<a href=3D"mailto:Armand.W= [email protected]">[email protected]</a>]<br> <b>To:</b> <a href=3D"mailto:[email protected]">[email protected]<= /a><br> <b>Sent:</b> Wed, 28 May 2008 16:42:11 -0700<br> <b>Subject:</b> RE: Using Key Pairs on OpenSSH on Win2k3<br> <br> <div align=3D"left"><span class=3D"614182923-28052008">okay, so on= ce you SSH into devserver, then you from within devserver you are running the svnclient. </span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div> <div align=3D"left"><span class=3D"614182923-28052008">Assuming yo= u are using the default configuration of copSSH, then your bash path comes from:</span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div> <div align=3D"left"><span class=3D"614182923-28052008">/etc/profil= e</span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div> <div align=3D"left"><span class=3D"614182923-28052008">you can edi= t this file to modify the EXPORT command if you wish to change the PATH.&n= bsp; My default /etc/profile looks like this:</span></div> <blockquote style=3D"margin-right: 0px;"> <div align=3D"left"><span class=3D"614182923-28052008"></span>&n= bsp;</div> </blockquote> <div align=3D"left"><span class=3D"614182923-28052008">$ cat /etc/profile</span></div> <blockquote style=3D"margin-right: 0px;"><span class=3D"614182923-= 28052008"> <div align=3D"left"># If you wish to change the path for all users, it is recommended you edit<br> # /etc/bash.bashrc</div> <div> </div> <div align=3D"left"><span class=3D"614182923-28052008">syspath= =3D`/bin/cygpath -S`<br> winpath=3D`/bin/cygpath -W`<br> export PATH=3D"/bin:$syspath:$winpath"<br> umask 027</span></div> <div> </div> <div align=3D"left"><span class=3D"614182923-28052008"># Set a default prompt of: <a href=3D"mailto:user@host">user@host</a> and current=5Fdirectory<br> PS1=3D'\[\033]0;\w\007<br> \033[32m\]\u@\h \[\033[33m\w\033[0m\]<br> $ '<br> </span></div> </span></blockquote> <div align=3D"left"><span class=3D"614182923-28052008">Since you'r= e probably running the default install, it should be the same. Just ignore the recomendation of editing /etc/bash.bashrc since the file doesn't exist on a default copSSH install, and editing the export here works just as well for such a simple installation.</span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div> <div align=3D"left"><span class=3D"614182923-28052008">See if that resolve your path issue. I recommend you change it as follows:</sp= an></div> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div> <div align=3D"left"><span class=3D"614182923-28052008">$ vi /etc/profile</span></div> <blockquote style=3D"margin-right: 0px;"><span class=3D"614182923-= 28052008"> <div align=3D"left"># If you wish to change the path for all users, it is recommended you edit<br> # /etc/bash.bashrc</div> <div> </div> <div align=3D"left"><span class=3D"614182923-28052008">syspath= =3D`/bin/cygpath -S`<br> winpath=3D`/bin/cygpath -W`<br> export PATH=3D"/bin:$syspath:$winpath:cygdrive/c/Program\ Files/Subversion/bin"<br> umask 027</span></div> <div> </div> <div align=3D"left"><span class=3D"614182923-28052008"># Set a default prompt of: <a href=3D"mailto:user@host">user@host</a> and current=5Fdirectory<br> PS1=3D'\[\033]0;\w\007<br> \033[32m\]\u@\h \[\033[33m\w\033[0m\]<br> $ '</span><span class=3D"614182923-28052008"></span></div> </span></blockquote> <div align=3D"left"><span class=3D"614182923-28052008">Also, I am = not a bash pro, but I believe the proper form of the bash command for setting the path is:</span></div> <div align=3D"left"><span class=3D"614182923-28052008">PATH=3D"$PA= TH:/cygdrive/c/Program\ Files/Subversion/Subversion/bin"</span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div> <div align=3D"left"><span class=3D"614182923-28052008">By specifyi= ng the $PATH=3D you are actually causing the shell to think you want to execute the contents of $PATH, which is why you are receiving a No such file or directory upon the set command (it's a syntax error issue).</spa= n></div> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div> <div align=3D"left"><span class=3D"614182923-28052008">Regards,</s= pan></div> <div align=3D"left"><span class=3D"614182923-28052008">Armand</spa= n></div> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div> <div class=3D"OutlookMessageHeader" align=3D"left"> <hr> <b>From:</b> <a href=3D"mailto:[email protected]">ssh@erdelyn= et.com</a> [mailto:<a href=3D"mailto:[email protected]">[email protected]= m</a>] <b>On Behalf Of </b>Robert Denton<br> <b>Sent:</b> Wednesday, May 28, 2008 4:25 PM<br> <b>To:</b> <a href=3D"mailto:[email protected]">[email protected]<= /a><br> <b>Subject:</b> RE: Using Key Pairs on OpenSSH on Win2k3<br> <br> </div> Trying to append to the path seems to not work, also:<br> <br> <a href=3D"mailto:admin@development">admin@development</a> ~<br> $ $PATH =3D $PATH:/cygdrive/c/Program\ Files/Subversion/bin/<br> -bash: /bin:/cygdrive/c/WINDOWS/system32:/cygdrive/c/WINDOWS: No such file or directory<br> <br> This might be a key element in solving this problem. I say this since if I could actually issue the svn co command from a ssh session, then I should (in theory) be able to select 'p' for permanent, and make this problem go away.<br> <br> Robert <br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); paddin= g-left: 5px; margin-left: 5px; margin-right: 0px;"> <hr> <b>From:</b> Robert Denton [mailto:<a href=3D"mailto:robert= @headsprout.com">[email protected]</a>]<br> <b>To:</b> <a href=3D"mailto:[email protected]">[email protected]= m</a><br> <b>Sent:</b> Wed, 28 May 2008 15:56:32 -0700<br> <b>Subject:</b> RE: Using Key Pairs on OpenSSH on Win2k3<br> <br> Okay, let me see if I can explain my set up a little bit. And you might be right about there being no connection between openssh and the ssl used to connect to the https server, but here goes:<br> <br> <a href=3D"mailto:user@svnserver">user@svnserver</a> ---(ssh)---> <a href=3D"mailto:admin@devserver">admin@devserver</a> ---(https)---> svnserver<br> <br> Seems weird to do it that way, but in order to maintain a mirror o= f our code on the dev server we need to issue an 'update' command to the svn client on the dev server where we want the mirror, and this is triggered by a process on the svn server itself. The first part se= ems to be working with one weird exception:<br> <br> If I log onto the devserver and launch a command prompt, the command 'svn' is known by virtue of path. Oddly, if I ssh to that server as the same user, the command 'ssh' is not known. Does Cygwin (or OpenSSH) maintain it's own path variable=3F If so, where is it kept=3F<br> <br> Robert <br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); padd= ing-left: 5px; margin-left: 5px; margin-right: 0px;"> <hr> <b>From:</b> Welsh, Armand [mailto:<a href=3D"mailto:Arma= [email protected]">[email protected]</a>]<br> <b>To:</b> <a href=3D"mailto:[email protected]">ssh@erdelynet.= com</a><br> <b>Sent:</b> Wed, 28 May 2008 14:33:24 -0700<br> <b>Subject:</b> RE: Using Key Pairs on OpenSSH on Win2k3<br> <br> <div align=3D"left"><span class=3D"758572821-28052008">I don't think the copSSH and the https based activities are related. Regar= ding the connection to the other server (via https), how is this connection established=3F I need more information to understand the issue.&nb= sp; Are you connecting (via ssh) to the server, and then on the server using wget or other command line util to get something from a web server=3F I= f you are using an SSH tunnel to connect to the https server using the ssh server as a middle point then I would need to know what client libraries on your client computer are used to establish the https session.</span></div> <div align=3D"left"><span class=3D"758572821-28052008"></span>= </div> <div align=3D"left"><span class=3D"758572821-28052008">Armand<= /span></div> <br> <div class=3D"OutlookMessageHeader" align=3D"left"> <hr> <b>From:</b> <a href=3D"mailto:[email protected]">ssh@erd= elynet.com</a> [mailto:<a href=3D"mailto:[email protected]">ssh@erdelyne= t.com</a>] <b>On Behalf Of </b>Robert Denton<br> <b>Sent:</b> Wednesday, May 28, 2008 12:49 PM<br> <b>To:</b> <a href=3D"mailto:[email protected]">ssh@erdelynet.= com</a><br> <b>Subject:</b> Re: Using Key Pairs on OpenSSH on Win2k3<br> <br> </div> So I took your advice and installed CopSSH instead and it is working as desired, with one minor snag. First, the application I am using th= is for is to connect to the copssh server and run some commands. One = of the commands involves connection to a different server via https. = When I do this I get prompted to accept the certificate. Choosing 'p' f= or permanent has no effect.<br> <br> Advice I have gotten from other forums is that I need to download Comodo's <span style=3D"margin-top: 0px; font-family: monospace; font-st= yle: normal; font-variant: normal; font-weight: normal; font-size: 90%; = line-height: normal; font-size-adjust: none; font-stretch: normal;">Trus= ted Root Certificate and append it to the end of the ca-bundle.crt that is used by OpenSSH. Unfortunately a search of the system yields no su= ch file. Where does CopSSH place this file=3F And do you agree = that this is the recommended course of action=3F</span><br> <br> Robert<br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); pa= dding-left: 5px; margin-left: 5px; margin-right: 0px;"> <hr> <b>From:</b> Welsh, Armand [mailto:<a href=3D"mailto:Ar= [email protected]">[email protected]</a>]<br> <b>To:</b> <a href=3D"mailto:[email protected]">ssh@erdelyne= t.com</a><br> <b>Sent:</b> Thu, 22 May 2008 09:17:19 -0700<br> <b>Subject:</b> Re: Using Key Pairs on OpenSSH on Win2k3<br> <br> Robert,<br> <br> Before I look into potential causes, the first I would like to know is: are you using copSSH, the Cygwin installation with the openSSH package installed, or the "openSSH for Windows" project from source forge=3F<br> <br> Why do I ask=3F Al three are openSSH from the cygwin project the following conditions:<br> Cygwin is the thick install proding the option to turn you windows box into a GNU Linux like operating system (via the bash or other shell and some special mappers built into cygwin). The cygwin project installs a basic configuration of openSSH which works well on older windows systems, but requires specific things be done to get the SSH server to work 100% on windows 2003 and Vista.<br> <br> CopSSH is a pre-packaged minimal installation of Cygwin with a couple minor enhancement patches that installs Cygwin, openSSH, configures you computer (even vista and win2k3) so that openSSH works without any tweaking at all.<br> <br> "OpenSSH for Windows" is a dead sourceforge project that is almost identical to copSSH, except that development on the project has stopped a long time ago, and this package requires more tweaking of the ssh settings and the server that the other options, and is running very old ssh code that should not be used anymore in my opinion.<br> <br> If you want the easy solution, install copSSH and everything will work. If you want to get what you have working and you did not install copSSH then we can offer assistance with making all the appropriate changes, but it will take more time to get SSH services up and running with public keys, but you will have the option of using any piece of the cygwin project easily.<br> <br> Armand<br> <br> </blockquote> </blockquote> </blockquote> </blockquote> </blockquote> </blockquote> </blockquote><style> BODY {FONT:10pt Tahoma,Verdana,sans-serif} * {color:#000000;} </style> </body></html> -------------84d9dd84d20094fc1775957679667f0a-- -- List Info: http://erdelynet.com/ssh-l/ List Archives: http://erdelynet.com/archive/ssh-l/ To Unsubscribe: Mail mailto:[email protected] If you are having trouble unsubscribing, visit the List Info page for help.