Uploaded image for project: 'Karaf'
  1. Karaf
  2. KARAF-5073

OpenSSHGeneratorFileKeyProvider is unable to write SSH keys

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 4.1.0, 4.1.2
    • 4.1.2, 4.2.0.M1
    • karaf
    • None
    • all

    Description

      Project: org.apache.karaf.shell.ssh

      Class org.apache.karaf.shell.ssh.OpenSSHGeneratorFileKeyProvider has method doWriteKeyPair to write generated SSH keys to the disk.

      When I run karaf and log in with SSH, the keys are generated, but not written. In console stays:
      > sun.security.rsa.RSAPrivateCrtKeyImpl cannot be cast to org.apache.commons.ssl.PEMItem

      After inspicing the implementation and comparing it with the not-yes-ssl-commons code I can't see how this method could function for anyone in current form. PEMUtil.encode expected the collection of org.apache.commons.ssl.PEMItem items, which have no inheriting classes nor implement/extend anything.

      Probably the correct way would be either using toPEM and formatRSAPrivateKey methods from PEMUtil, but it doesn't seem obvious to me what method is symethrical to the constructor of org.apache.commons.ssl.PKCS8Key.

      One is sure, doWriteKeyPair with current codebase can no way work.

      Attachments

        Activity

          People

            cschneider Christian Schneider
            l.lech Lukasz Lech
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: