picosh / pico

hacker labs - open source and managed web services leveraging SSH
https://pico.sh
MIT License
774 stars 28 forks source link

no public keys found for key provided #3

Closed Bjorn-Eric-Abr closed 1 year ago

Bjorn-Eric-Abr commented 1 year ago

Hi!

When trying to access (publish, admin) my blog using ssh -i ~/.ssh/mykey prose.sh i get

no public keys found for key provided
scp: Connection closed

Any suggestion on how to get in? Thanks `

Bjorn-Eric-Abr commented 1 year ago

Hi, still not getting in to my account / blog. Using a Makefile like @neurosnap does here https://github.com/neurosnap/prose-blog/blob/main/makefile so I am certain I am using the same SSH key. Any ideas? Thanks in advance

neurosnap commented 1 year ago

Sorry I missed this gh issue! Unfortunately if you are using an ssh-agent the -i won't always be preferred. Can you share output from ssh -vvv -i ~/.ssh/mykey prose.sh? That will confirm which key is being sent to prose.

Bjorn-Eric-Abr commented 1 year ago

No worries! Got a bit sad since I am kind of hyped about setting it up!

I upgraded to Ventura, could this have something to do with it? https://apple.stackexchange.com/questions/451281/unable-to-scp-since-upgrade-to-ventura

Can I send the log privately? THANKS!

neurosnap commented 1 year ago

Send logs to me [at] erock.io

neurosnap commented 1 year ago

Another way to test this:

ssh-add -D # removes all keys in agent
ssh-add ~/.ssh/mykey # add key used for prose.sh
Bjorn-Eric-Abr commented 1 year ago

Another way to test this:

ssh-add -D # removes all keys in agent
ssh-add ~/.ssh/mykey # add key used for prose.sh

Tried this with no luck.

Sent you an email with the log - thank you so much for taking the time to investigate this - appreciate it

Bjorn-Eric-Abr commented 1 year ago

Ok so I found the issue -

TLDR; added PubkeyAcceptedKeyTypes +ssh-rsa to my ~/.ssh/config after upgrading to Ventura.

I have had recently upgraded my Mac to Ventura, and with that came another version of SSH. Solution was found here.

Thanks to helping me sort this out! 🥇

antoniomika commented 1 year ago

I think we can bump go/x/crypto to solve this, will try and ask for feedback!

antoniomika commented 1 year ago

Managed to make a bunch of updates here and now ssh-rsa should be usable without the above, try it out and let me know how it works!

Bjorn-Eric-Abr commented 1 year ago

@antoniomika Yes, works without PubkeyAcceptedKeyTypes +ssh-rsa now. Good stuff!