[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#735664: openssh-client: ssh-agent gets duplicate keys, breaks ssh-add



reassign 735664 gnome-keyring
thanks

On Fri, 2014-01-17 11:12:08 Francois Gouget wrote:
> This bug seems to arise from an interaction between gnome-keyring-agent,
> ssh-agent and ssh-add.
> 
> When I log in my ssh key is automatically added to ssh-agent, by
> gnome-keyring-agent as far as I understand, but obviously still requires me
> to enter the password in order to be used.

> $ ssh-add -l
> 1024 65:d0:25:dd:dc:39:19:08:75:cf:d3:34:1c:da:2b:1b fgouget@debian (DSA)
> $ ssh-add
> Enter passphrase for /home/fgouget/.ssh/id_dsa:
> Identity added: /home/fgouget/.ssh/id_dsa (/home/fgouget/.ssh/id_dsa)
> $ ssh-add -l
> 1024 65:d0:25:dd:dc:39:19:08:75:cf:d3:34:1c:da:2b:1b /home/fgouget/.ssh/id_dsa (DSA)
> 1024 65:d0:25:dd:dc:39:19:08:75:cf:d3:34:1c:da:2b:1b fgouget@debian (DSA)
> $ ssh remote
> [prompts for the fgouget@debian passphrase]
> 
> 
> Furthermore the fgouget@debian entry cannot be removed:
> 
> $ ssh-add -D
> All identities removed.
> $ ssh-add -l
> 1024 65:d0:25:dd:dc:39:19:08:75:cf:d3:34:1c:da:2b:1b fgouget@debian (DSA)

This looks like you're using ssh-add from openssh-client, but gnome-keyring
as ssh-agent (not the one from openssh-agent).

ssh-add is a rather dumb tool that just issues commands over the unix domain
socket to an ssh-agent. The sockets protocol is described at [1], used
datatypes at [2].

The problem is definitely at the agents side, not at ssh-add's or ssh's
(the SSH2_AGENTC_SIGN_REQUEST don't include the comment).

The ssh-add -D part of your bug is already in [3].


Timo

[1] http://api.libssh.org/rfc/PROTOCOL.agent
[2] https://tools.ietf.org/html/rfc4251#section-5
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=472477

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: