Uploaded image for project: 'Guacamole'
  1. Guacamole
  2. GUACAMOLE-745

Add support for OpenSSH private key format

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Minor
    • Resolution: Done
    • None
    • 1.5.0
    • guacd, SSH
    • None
    • Docker official images 1.0.0

    Description

      Since OpenSSH 7.8, ssh-keygen does not generate keys in PEM format by default anymore: https://www.openssh.com/txt/release-7.8

      Attempting to use keys in the new format in Guacamole does not work, and does not print any helpful error message even in debug mode:

      guacd_1      | guacd[296]: DEBUG:        Attempting private key import (WITHOUT passphrase)
guacd_1      | guacd[296]: DEBUG:        Initial import failed: (null)
guacd_1      | guacd[296]: DEBUG:        Re-attempting private key import (WITH passphrase)
guacd_1      | guacd[296]: ERROR:        Auth key import failed: (null)

      It would be nice if keys in OpenSSH new format were supported. At least a more helpful error message should be printed (like "unrecognized key format").

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. GUACAMOLE-1504 SSH public key authentication fails with "Unable to extract public key from private key"

          • Major - Major loss of function.
          • Closed
          fixes

          Bug - A problem which impairs or prevents the functions of the product. GUACAMOLE-1553 Make Error - Presumably OpenSSL 3?

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. GUACAMOLE-746 Add support for ED25519 SSH keys

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          supercedes

          Improvement - An improvement or enhancement to an existing feature or task. GUACAMOLE-945 Migrate SSH support (back) to libssh

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              Unassigned Unassigned
              nicoulaj Julien Nicoulaud
              Votes:
              2 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: