maemo.org Bugzilla – Full Text Bug Listing
|Summary:||Fail to upload package update to chinook-extras|
|Product:||[Websites] maemo.org Website||Reporter:||Antonio Gomes (tonikitoo) <tonikitoo>|
|Status:||RESOLVED INVALID||QA Contact:||repositories <repositories>|
I had my ssh and gpg rsa keys uploaded to maemo garage after been invited to be maintanance. STEPS TO REPRODUCE THE PROBLEM: Follow steps sent by email just after uploading my keys (proper changes in /ssh/config and /etc/dput.cf and packages signed with debsign) then I tried to upload as suggested: $ dput chinook-extras prism-maemo_0.0.3-1_armel.changes Checking Signature on .changes gpg: Signature made Mon 02 Jun 2008 09:14:20 AM AMT using RSA key ID D37D3B7F gpg: Good signature from "Antonio Gomes (GPG RSA keys) <email@example.com>" Good signature on /scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1_armel.changes. Checking Signature on .dsc gpg: Signature made Mon 02 Jun 2008 09:14:17 AM AMT using RSA key ID D37D3B7F gpg: Good signature from "Antonio Gomes (GPG RSA keys) <firstname.lastname@example.org>" Good signature on /scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1.dsc. Uploading to chinook-extras (via scp to garage.maemo.org): Permission denied (publickey,keyboard-interactive). lost connection Warning: The execution of '/usr/bin/scp' as 'scp -p /scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1.dsc /scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1.tar.gz /scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1_armel.deb /scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1_armel.changes email@example.com:/var/www/extras/incoming/chinook' returned a nonzero exit code. Error while uploading. Maybe I miss sent my keys ? The quoted output bellow seems to be the problem: "Permission denied (publickey,keyboard-interactive). lost connection" My issue is similar to bug 1981 and bug 2813. Could you help me ? Feel free to edit my keys locally, removing break lines or something. REPRODUCIBILITY: always
fwiw, my garage user is 'tonikitoo'
I have checked your ssh public key, and it looks quite ok. There are no linebreaks or anything there. Could you try to ssh to garage.maemo.org? Try to use the -vvv option for verbose debug messages.
Antonio, can you please answer Marcell's questions? Thanks. :)
As I have told you before in an email last week, you have a key that has been blacklisted. This is because of the Debian openssl vulnerability. ssh-vulnkeys: COMPROMISED: 2048 7c:1b:8f:0a:d1:aa:6c:58:ef:db:6d:fe:3a:0c:a0:38 agomes@tonix Please update your Debian system and regenerate your keys. After that you can replace your key via garage. This isn't actually a bug in garage but a problem in your local setup. Your key will be blacklisted in every recent version of openssh.