search

kryptco / kr

DEPRECATED A dev tool for SSH auth + Git commit/tag signing using a key stored in Krypton.
https://krypt.co/developers/
Other
1.59k stars 109 forks source link

Public key for @IP does not match pinned key. If the host key has actually changed, remove the pinned key in Krypton. #322

Open gloubix opened 3 years ago

gloubix commented 3 years ago

Hi,

I tried compiling on arch KR ; everything worked even pairing but when i connect : i have those errors :

`root@OXYRTX:~/.ssh # ssh pi@192.168.1.38

Krypton ▶ Requesting SSH authentication from phone

Krypton ▶ Phone approval required. Respond using the Krypton app

Krypton ▶ Public key for 192.168.1.38 does not match pinned key. If the host key has actually changed, remove the pinned key in Krypton.

sign_and_send_pubkey: signing failed for RSA "Kratos" from agent: agent refused operation

pi@192.168.1.38's password:

ssh_dispatch_run_fatal: Connection to UNKNOWN port 65535: Broken pipe

`

Anyway to make it see that the public key has not changed .... ?

viggy96 commented 2 years ago

I've noticed I get this problem between using Krypton on WSL and Linux. I can unpin the key in the app then use it on Linux for example. Then when I go to WSL, it complains about the pinned key. Then I can unpin the key can use it in WSL. But then I go back to Linux and it complains there.

ElykDeer commented 2 years ago

OpenSSH 8.6 changed default key algorithms, causing the error above. I'd recommend updating SSH on machines where you're getting this issue; I've had to compile from source on my Ubuntu LTS installs.

KMontag42 commented 2 years ago

I have the latest 8.X OpenSSH (8.9) on my machine and this is still happening. Any ideas why this is still happening?

tfriedel commented 1 year ago

Also getting this issue between WSL and Ubuntu. Do I need to upgrade SSH on the server as well? That one is still at 8.2p1.

andriisemenov-emma commented 1 year ago

Same here, any solution yet?