[KARAF-5809] 'simple' host.key files no longer work

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.2.0
• Fix Version/s: 4.2.1
• Component/s: karaf
• Assignee: Jean-Baptiste Onofré
• Reporter: Johannes Utzig
• Created: 10/Jul/18 15:04
• Updated: 15/Sep/18 16:35
• Resolved: 12/Jul/18 04:26

Description

It seems  that with KARAF-5286 support for the 'simple' host key format was removed.

If one tries to connect to a karaf instance that still has a 'simple' host.key, it produces this exception:

org.apache.commons.ssl.ProbablyNotPKCS8Exception: asn1 parse failure: java.io.IOException: DER length more than 4 bytes

It seems that in this case the SSH server generates a new key in memory without persisting it which means that on each start the client will see a new SSH fingerprint.

I would like to submit a pull request that falls back to the old format in case the file is not a valid PEM. If that's successful it would replace the host.key with a PEM version of that keypair.

Issue Links

• links to: GitHub Pull Request #543