Re: Post Fedora 41 upgrade - sshd problem

[Charlie Dennett <cdennett@xxxxxxxxx>]

On Thu, Oct 31, 2024 at 10:48 AM Max Pyziur <pyz@xxxxxxxxx> wrote:

Greetings again,

Post-upgrade and using ssh to access other machines via ssh I get the following error:
pyz@Gryphon ~> ssh brill -v
OpenSSH_9.8p1, OpenSSL 3.2.2 4 Jun 2024
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Reading configuration data /etc/ssh/ssh_config.d/20-systemd-ssh-proxy.conf
debug1: Reading configuration data /etc/ssh/ssh_config.d/30-libvirt-ssh-proxy.conf
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config
/etc/ssh/ssh_config line 57: Bad key types 'ssh-rsa,ssh-dss,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519'.
/etc/ssh/ssh_config line 58: Bad key types 'ssh-rsa,ssh-dss,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519'.
/etc/ssh/ssh_config: terminating, 2 bad configuration options

I know that this is an occasional occurrence post upgrade.

Thank you for any and all advice.

Just some guesswork here.  On my system /etc/ssh/ssh_config includes other files (which includes other files).  I found the list of key types listed in /etc/crypto-policies/back-ends/openssh.config (which is a sym link to /usr/share/crypto-policies/DEFAULT/openssh.txt).   I'd check in that back-ends directory (and the DEFAULT directory the link points to) and see if there is a file ending in .rpmnew.  Sometimes a package update will add that to a file name if the original file has been changed.    If so, you can replace the file with the newer version. 

Also, those files come from:

rpm -q --whatprovides /etc/crypto-policies/back-ends/openssh.config
crypto-policies-20241010-1.git8baf557.fc41.noarch

You can always try reinstalling that package.

As I said, this is just some guesswork. 

--

Charlie

-- 
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue