<html><head></head><body><div>Hi all,</div><div>Sorry if this question has already been raised but I couldn't get any information...</div><div><br></div><div>I've written an ssh-based application with OTP. I'm using rsa keys for authentication.</div><div>ssh version:</div><div><br></div><div>$ ssh -V</div><div>OpenSSH_7.5p1 Debian-5, OpenSSL 1.0.2l 25 May 2017</div><div><br></div><div>With elixir 1.4.5 / erlang 18.3, the application works fine. With elixir 1.4.5 / erlang 20.0 (Debian package from Erlang Solutions), authentication fails with 'Permission denied (publickey)'.</div><div><br></div><div>The failing call trace:</div><div>ssh_auth:handle_userauth_request/1</div><div>ssh_transport:verify/4</div><div>public_key:verify/4</div><div>crypto:verify/5 -> returns false</div><div><br></div><div>I've seen potential incompatibilites in <a href="http://erlang.org/doc/apps/ssh/notes.html">http://erlang.org/doc/apps/ssh/notes.html</a></div><div>I suppose using recent ssh client, negotation should avoid incompatibilites...</div><div><br></div><div>Any idea ? Known bug ? </div><div><br></div><div>Thank you for your help !</div><div><br></div><div><br></div><div>Here is the trace from SSH connection:</div><div><br></div><div>$ ssh -p 10022 -v localhost</div><div>OpenSSH_7.5p1 Debian-5, OpenSSL 1.0.2l 25 May 2017</div><div>debug1: Reading configuration data /home/jean/.ssh/config</div><div>debug1: Reading configuration data /etc/ssh/ssh_config</div><div>debug1: /etc/ssh/ssh_config line 19: Applying options for *</div><div>debug1: Connecting to localhost [::1] port 10022.</div><div>debug1: connect to address ::1 port 10022: Connection refused</div><div>debug1: Connecting to localhost [127.0.0.1] port 10022.</div><div>debug1: Connection established.</div><div>debug1: identity file /home/jean/.ssh/id_rsa type 1</div><div>debug1: key_load_public: No such file or directory</div><div>debug1: identity file /home/jean/.ssh/id_rsa-cert type -1</div><div>debug1: key_load_public: No such file or directory</div><div>debug1: identity file /home/jean/.ssh/id_dsa type -1</div><div>debug1: key_load_public: No such file or directory</div><div>debug1: identity file /home/jean/.ssh/id_dsa-cert type -1</div><div>debug1: key_load_public: No such file or directory</div><div>debug1: identity file /home/jean/.ssh/id_ecdsa type -1</div><div>debug1: key_load_public: No such file or directory</div><div>debug1: identity file /home/jean/.ssh/id_ecdsa-cert type -1</div><div>debug1: key_load_public: No such file or directory</div><div>debug1: identity file /home/jean/.ssh/id_ed25519 type -1</div><div>debug1: key_load_public: No such file or directory</div><div>debug1: identity file /home/jean/.ssh/id_ed25519-cert type -1</div><div>debug1: Enabling compatibility mode for protocol 2.0</div><div>debug1: Local version string SSH-2.0-OpenSSH_7.5p1 Debian-5</div><div>debug1: Remote protocol version 2.0, remote software version Mingus Orchestrator</div><div>debug1: no match: Mingus Orchestrator</div><div>debug1: Authenticating to localhost:10022 as 'jean'</div><div>debug1: SSH2_MSG_KEXINIT sent</div><div>debug1: SSH2_MSG_KEXINIT received</div><div>debug1: kex: algorithm: ecdh-sha2-nistp256</div><div>debug1: kex: host key algorithm: ecdsa-sha2-nistp256</div><div>debug1: kex: server->client cipher: aes128-ctr MAC: hmac-sha2-256 compression: none</div><div>debug1: kex: client->server cipher: aes128-ctr MAC: hmac-sha2-256 compression: none</div><div>debug1: sending SSH2_MSG_KEX_ECDH_INIT</div><div>debug1: expecting SSH2_MSG_KEX_ECDH_REPLY</div><div>debug1: Server host key: ecdsa-sha2-nistp256 SHA256:/Yf6jxsGavhDvq5XRwjdG6sgLT3o2Xs06d63lhXWRjg</div><div>debug1: Host '[localhost]:10022' is known and matches the ECDSA host key.</div><div>debug1: Found key in /home/jean/.ssh/known_hosts:895</div><div>debug1: rekey after 4294967296 blocks</div><div>debug1: SSH2_MSG_NEWKEYS sent</div><div>debug1: expecting SSH2_MSG_NEWKEYS</div><div>debug1: SSH2_MSG_NEWKEYS received</div><div>debug1: rekey after 4294967296 blocks</div><div>debug1: SSH2_MSG_EXT_INFO received</div><div>debug1: kex_input_ext_info: server-sig-algs=<ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ecdsa-sha2-nistp256,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss></div><div>debug1: SSH2_MSG_SERVICE_ACCEPT received</div><div>debug1: Authentications that can continue: publickey</div><div>debug1: Next authentication method: publickey</div><div>debug1: Offering RSA public key: /home/jean/.ssh/id_rsa</div><div>debug1: Server accepts key: pkalg rsa-sha2-512 blen 277</div><div>debug1: Authentications that can continue: publickey</div><div>debug1: Offering RSA public key: <a href="mailto:jean@aquila">jean@aquila</a></div><div>debug1: Authentications that can continue: publickey</div><div>debug1: Trying private key: /home/jean/.ssh/id_dsa</div><div>debug1: Trying private key: /home/jean/.ssh/id_ecdsa</div><div>debug1: Trying private key: /home/jean/.ssh/id_ed25519</div><div>debug1: No more authentication methods to try.</div><div>Permission denied (publickey).</div><div></div><div></div><div><br></div><div><br></div><div><br></div><div><span><pre>-- <br></pre><div>Jean Parpaillon</div><div>--</div><div>Senior Developper @ KBRW Adventure</div><div>Chairman @ OW2 Consortium</div><div>--</div><div>Phone: +33 6 30 10 92 86</div><div>im: <a href="mailto:jean.parpaillon@gmail.com">jean.parpaillon@gmail.com</a></div><div>skype: jean.parpaillon</div><div>linkedin: <a href="http://www.linkedin.com/in/jeanparpaillon/en">http://www.linkedin.com/in/jeanparpaillon/en</a></div></span></div></body></html>