You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "calderonth (via GitHub)" <gi...@apache.org> on 2025/03/24 17:46:35 UTC
Re: [I] Supplied key (org.apache.sshd.common.config.keys.OpenSshCertificateImpl) is not a RSAPublicKey instance [mina-sshd]
calderonth commented on issue #650:
URL: https://github.com/apache/mina-sshd/issues/650#issuecomment-2748952180
Are we sure this is fully fixed @tomaswolf ?
I am using the 2.15.1-SNAPSHOT JAR and I am still not fully able to use ssh user certificates against Apache SSHD Mina implementation.
It seems to work partially but it might be missing something to bubble up the fact that authentication has succeeded in the session.
I am trying to add suppor to gerrit and you can see from the `sshd_log` that it successfully authed me with a cert (great) but somehow then `sshd` still throws an error complaining about the state.
```
==> /var/tmp/gerrit-site/logs/sshd_log <==
[2025-03-24T13:39:47.249-04:00] a70ce66f [sshd-SshDaemon[687313e1](port=22)-nio2-thread-27] tcalderon a/1000001 LOGIN FROM 10.20.91.29
==> /var/tmp/gerrit-site/logs/error_log <==
[2025-03-24T13:39:47.342-04:00] [sshd-SshDaemon[687313e1](port=22)-nio2-thread-28] WARN org.apache.sshd.server.session.ServerUserAuthService : handleUserAuthRequestMessage(ServerSessionImpl[null@/10.20.91.29:36060]) Failed (IllegalStateException) to authenticate using factory method=publickey: null
[2025-03-24T13:39:47.343-04:00] [sshd-SshDaemon[687313e1](port=22)-nio2-thread-28] WARN org.apache.sshd.server.session.ServerUserAuthService : handleUserAuthRequestMessage(ServerSessionImpl[null@/10.20.91.29:36060]) Failed (IllegalStateException) to authenticate using factory method=publickey: null
==> /var/tmp/gerrit-site/logs/sshd_log <==
[2025-03-24T13:39:47.346-04:00] a70ce66f [sshd-SshDaemon[687313e1](port=22)-nio2-thread-29] tcalderon a/1000001 LOGOUT
```
Any insights into what's missing?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org