Bug 3213 - Fail to upload package update to chinook-extras
: Fail to upload package update to chinook-extras
Status: RESOLVED INVALID
Product: maemo.org Website
Repositories
: unspecified
: All Linux
: Low normal (vote)
: ---
Assigned To: unassigned
: repositories@maemo.bugs
:
:
:
:
  Show dependency tree
 
Reported: 2008-06-03 14:24 UTC by Antonio Gomes (tonikitoo)
Modified: 2008-06-10 10:20 UTC (History)
2 users (show)

See Also:


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description Antonio Gomes (tonikitoo) (reporter) 2008-06-03 14:24:54 UTC
I had my ssh and gpg rsa keys uploaded to maemo garage after been invited to be
maintanance. 
STEPS TO REPRODUCE THE PROBLEM:

Follow steps sent by email just after uploading my keys (proper changes in
/ssh/config and /etc/dput.cf and packages signed with debsign)

then I tried to upload as suggested:

$ dput chinook-extras prism-maemo_0.0.3-1_armel.changes 
Checking Signature on .changes
gpg: Signature made Mon 02 Jun 2008 09:14:20 AM AMT using RSA key ID D37D3B7F
gpg: Good signature from "Antonio Gomes (GPG RSA keys) <tonikitoo@gmail.com>"
Good signature on
/scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1_armel.changes.
Checking Signature on .dsc
gpg: Signature made Mon 02 Jun 2008 09:14:17 AM AMT using RSA key ID D37D3B7F
gpg: Good signature from "Antonio Gomes (GPG RSA keys) <tonikitoo@gmail.com>"
Good signature on
/scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1.dsc.
Uploading to chinook-extras (via scp to garage.maemo.org):
Permission denied (publickey,keyboard-interactive).
lost connection
Warning: The execution of '/usr/bin/scp' as
  'scp -p
/scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1.dsc
/scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1.tar.gz
/scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1_armel.deb
/scratchbox/users/agomes/home/agomes/prism/mozilla-build-system-firefox3b5/prism-maemo_0.0.3-1_armel.changes
tonikitoo@garage.maemo.org:/var/www/extras/incoming/chinook'
  returned a nonzero exit code.
Error while uploading.


Maybe I miss sent my keys ? The quoted output bellow seems to be the problem:

"Permission denied (publickey,keyboard-interactive).
lost connection"

My issue is similar to bug 1981 and bug 2813. Could you help me ? Feel free to
edit my keys locally, removing break lines or something.

REPRODUCIBILITY:
always
Comment 1 Antonio Gomes (tonikitoo) (reporter) 2008-06-04 05:11:28 UTC
fwiw, my garage user is 'tonikitoo'
Comment 2 Marcell Lengyel maemo.org 2008-06-05 10:14:06 UTC
I have checked your ssh public key, and it looks quite ok. There are no
linebreaks or anything there. Could you try to ssh to garage.maemo.org? Try to
use the -vvv option for verbose debug messages.
Comment 3 Andre Klapper maemo.org 2008-06-09 13:29:14 UTC
Antonio, can you please answer Marcell's questions? Thanks. :)
Comment 4 Niels Breet maemo.org 2008-06-10 09:56:09 UTC
As I have told you before in an email last week, you have a key that has been
blacklisted. This is because of the Debian openssl vulnerability.

ssh-vulnkeys:
COMPROMISED: 2048 7c:1b:8f:0a:d1:aa:6c:58:ef:db:6d:fe:3a:0c:a0:38 agomes@tonix

Please update your Debian system and regenerate your keys. After that you can
replace your key via garage.

This isn't actually a bug in garage but a problem in your local setup. Your key
will be blacklisted in every recent version of openssh.
Comment 5 Andre Klapper maemo.org 2008-06-10 10:20:08 UTC
See http://www.debian.org/security/2008/dsa-1571 and
http://wiki.debian.org/SSLkeys . Closing as INVALID as per last comment.