Re: accessing a fedora box (latest fedora 35) from Windows using PuTTY/WinSCP only possible with userid/password

[Kevin Becker <kevin@xxxxxxxxxxxxxxx>]

On Nov 20, 2021, at 9:24 AM, Walter H. via users <users@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

/var/log/secure shows this:

Nov 20 15:11:33 lxfedora sshd[2584]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]

so the question is:  what is the default value of this 'PubkeyAcceptedAlgorithms', in order to set it to the default PLUS 'ssh-rsa';

This is handled by the system-wide crypto policies.  I’m sure there is a way to create a custom crypto policy to tweak this one parameter but I’ve never done it.  You can roll everything back to LEGACY with 

update-crypto-policies --set LEGACY

Or you can target a specifc older release:

update-crypto-policies --set DEFAULT:FEDORA32

To bring it back to the current default policy:

update-crypto-policies --set DEFAULT

However rather than change the policy on fedora, I think the recommendation would be to regenerate your putty key with a stronger algorithm and/or key length and copy the new public key to your other boxes.

Attachment: signature.asc
Description: Message signed with OpenPGP

_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure