Hello folks, I am new here, so please be gentle :), and any help will be appreciated. Essentially what I am trying to do is, to use Jsch ( the java implementation of SSH client). it has support for Public key based authentication. Since there is a requirement for FIPS enablement, we are trying to use the Algorithm SHA256withRSA, instead of SHA1withRSA. When the code tries to verify the signature of the public key of the server using this algorithm, it is throwing an exception ObjectIdentifier mismatch: 1.3.14.3.2.26. (which is the OID of SHA1). So my understanding is the server is forcing the signature to be SHA1. I did try to use the parameter PubkeyAcceptedKeyTypes ssh-ed25519*,ecdsa-sha2*,rsa-sha2-*,ssh-rsa But that does not help. Also with the same SHA256withRSA algorithm when the code sign the data and send it to server, it results in signature unverified error. debug3: mm_answer_keyverify: publickey 0x56471045da10 signature unverified Things work fine for ECDSA keypair with sha256. I am able to successfully connect using this keypair. My understanding was, as of 7.2 the support for SHA256 with RSA was there ( https://www.openssh.com/txt/release-7.2) Are there any options which I am not aware of? At the moment I am using openssh-7.9p1-233.1.x86_64 on SLES12. Thanks a lot for the help. Regards Renjith _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
