Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-55133

Debian Buster private keys rejected for ssh agents

    XMLWordPrintable

    Details

    • Similar Issues:
    • Released As:
      Jenkins 2.157, TrileadSSH build-217-jenkins-14

      Description

      The ssh-slaves plugin won't connect a Debian Buster ("testing") agent using a private key generated on Debian Buster. Debian Buster will be Debian 10 when released in Q1 2019 or Q2 2019.

      It will connect to a Debian Buster agent using a private key generated on Ubuntu 16 or Debian 9, but not with a key generated on Debian Buster.

      The same problem exists for ed25519 private keys and for rsa private keys.

      The message is Unknown Cipher: aes256-ctr and the stack trace reported by the ssh-slaves plugin is:

      [12/11/18 16:26:08] [SSH] SSH host key matches key seen previously for this host. Connection will be allowed.
      ERROR: SSH authentication failed
      java.lang.IllegalArgumentException: Unknown Cipher: aes256-ctr
      	at com.trilead.ssh2.signature.OpenSshCertificateDecoder$SshCipher.getInstance(OpenSshCertificateDecoder.java:207)
      	at com.trilead.ssh2.signature.OpenSshCertificateDecoder.createKeyPair(OpenSshCertificateDecoder.java:77)
      	at com.trilead.ssh2.crypto.PEMDecoder.decodeKeyPair(PEMDecoder.java:493)
      	at com.trilead.ssh2.auth.AuthenticationManager.authenticatePublicKey(AuthenticationManager.java:225)
      	at com.trilead.ssh2.Connection.authenticateWithPublicKey(Connection.java:483)
      	at com.cloudbees.jenkins.plugins.sshcredentials.impl.TrileadSSHPublicKeyAuthenticator.doAuthenticate(TrileadSSHPublicKeyAuthenticator.java:109)
      	at com.cloudbees.jenkins.plugins.sshcredentials.SSHAuthenticator.authenticate(SSHAuthenticator.java:436)
      	at com.cloudbees.jenkins.plugins.sshcredentials.SSHAuthenticator.authenticate(SSHAuthenticator.java:455)
      	at hudson.plugins.sshslaves.SSHLauncher.openConnection(SSHLauncher.java:1213)
      	at hudson.plugins.sshslaves.SSHLauncher$2.call(SSHLauncher.java:846)
      	at hudson.plugins.sshslaves.SSHLauncher$2.call(SSHLauncher.java:833)
      	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
      	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
      	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
      	at java.lang.Thread.run(Thread.java:748)
      [12/11/18 16:26:08] [SSH] Authentication failed.
      

      The alternative is to generate a private key / public key pair on another computer and copy it to the Debian Buster machine.

        Attachments

          Issue Links

            Activity

            markewaite Mark Waite created issue -
            markewaite Mark Waite made changes -
            Field Original Value New Value
            Summary Debian Buster ("testing") private keys rejected for ssh agents Debian Buster private keys rejected for ssh agents
            ifernandezcalvo Ivan Fernandez Calvo made changes -
            Component/s trilead-api-plugin [ 22324 ]
            ifernandezcalvo Ivan Fernandez Calvo made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            ifernandezcalvo Ivan Fernandez Calvo made changes -
            Remote Link This issue links to "PR (Web Link)" [ 22132 ]
            ifernandezcalvo Ivan Fernandez Calvo made changes -
            Status In Progress [ 3 ] In Review [ 10005 ]
            ifernandezcalvo Ivan Fernandez Calvo made changes -
            Status In Review [ 10005 ] Resolved [ 5 ]
            Resolution Fixed [ 1 ]
            Released As Jenkins 2.157, TrileadSSH build-217-jenkins-14
            markewaite Mark Waite made changes -
            Status Resolved [ 5 ] Closed [ 6 ]

              People

              • Assignee:
                ifernandezcalvo Ivan Fernandez Calvo
                Reporter:
                markewaite Mark Waite
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: