RSA using SHA1
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- ruby
- Domain
- authentication, devops, security
Research direction
Start with the Bolt SSH connection path used by bolt run, focusing on RSA authentication and the native-ssh: true alternative, then inspect how the net-ssh dependency handles RSA SHA2. Reproduce with the stated RHEL6-to-RHEL9 environment and ~/.ssh/id_rsa_bolt. Done means Bolt connects and runs commands without native SSH.
Written by the indexing model from the issue text.
Description
Describe the Bug
Bolt run from RHEL6->RHEL9 with RSA key errors out when using net-ssh
all authorization methods failed (tried none, publickey, password)
"target":"cilv6s015","action":"command","object":null,"status":"failure","value":"_error":"details":,"kind":"puppetlabs.tasks/connect-error","msg":"Authentication failed for user root@cilv6s015","issue_code":"AUTH_ERROR"
Failed on cilv6s015:
Authentication failed for user root@cilv6s015
Expected Behavior
Should be able to connect and run commands without native-ssh: true
Steps to Reproduce
Steps to reproduce the behavior:
- Populate inventory.yaml
Include RSA underprivate-key(private-key: ~/.ssh/id_rsa_bolt)
Environment
- Version 3.23.0
- RH6->RH9
Additional Context
Quick inspection looks net-ssh < 7 doesn't allow for SHA2 with RSA keys.
- Dominant language
- Ruby
- Stars
- 558
- Forks
- 224
- Avg merge
- 1h 4m
- Merged PRs (30d)
- 1
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from puppetlabs/bolt
-
Bug
Difficulty 4/5 3-5 days Newbie friendliness 45/100
puppetlabs/bolt#3405 ·
-
Feature
Difficulty 5/5 Over a week Newbie friendliness 35/100
puppetlabs/bolt#3404 · 1 comment ·
-
Bug
Difficulty 4/5 3-5 days Newbie friendliness 35/100
puppetlabs/bolt#3399 · 1 comment ·
-
Feature
Difficulty 4/5 3-5 days Newbie friendliness 42/100
puppetlabs/bolt#3398 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
puppetlabs/bolt#3395 ·
Similar issues
-
バグ
Difficulty 1/5 Under an hour Newbie friendliness 92/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
voxpupuli/puppet-epel#186 · 1 comment ·
-
external_created_at is no longer used for the message timestamp since the new message UI (v4.4.0) OpenBug Frontend
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
TheOdinProject/curriculum#31402 · 1 comment ·
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 78/100