RSA using SHA1

Open
#3,129 9 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Stale
Tech stack
ruby

Research direction

Start with the Bolt SSH connection path used by bolt run, focusing on RSA authentication and the native-ssh: true alternative, then inspect how the net-ssh dependency handles RSA SHA2. Reproduce with the stated RHEL6-to-RHEL9 environment and ~/.ssh/id_rsa_bolt. Done means Bolt connects and runs commands without native SSH.

Written by the indexing model from the issue text.

Description

Bug Jira

Describe the Bug

Bolt run from RHEL6->RHEL9 with RSA key errors out when using net-ssh

all authorization methods failed (tried none, publickey, password)
"target":"cilv6s015","action":"command","object":null,"status":"failure","value":"_error":"details":,"kind":"puppetlabs.tasks/connect-error","msg":"Authentication failed for user root@cilv6s015","issue_code":"AUTH_ERROR"
Failed on cilv6s015:
  Authentication failed for user root@cilv6s015

Expected Behavior

Should be able to connect and run commands without native-ssh: true

Steps to Reproduce

Steps to reproduce the behavior:

  • Populate inventory.yaml
    Include RSA under private-key ( private-key: ~/.ssh/id_rsa_bolt )

Environment

  • Version 3.23.0
  • RH6->RH9

Additional Context

Quick inspection looks net-ssh < 7 doesn't allow for SHA2 with RSA keys.

Dominant language
Ruby
Stars
558
Forks
224
Avg merge
1h 4m
Merged PRs (30d)
1

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from puppetlabs/bolt

All issues in puppetlabs/bolt

Similar issues

More Ruby issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.