search

puppetlabs / bolt

Bolt is an open source orchestration tool that automates the manual work it takes to maintain your infrastructure on an as-needed basis or as part of a greater orchestration workflow. It can be installed on your local workstation and connects directly to remote nodes with SSH or WinRM, so you are not required to install any agent software.
https://puppet.com/docs/bolt/latest/bolt.html
Apache License 2.0
492 stars 222 forks source link

RSA using SHA1 #3129

Open cummingscody opened 1 year ago

cummingscody commented 1 year ago

Describe the Bug

Bolt run from RHEL6->RHEL9 with RSA key errors out when using net-ssh

all authorization methods failed (tried none, publickey, password)
"target":"cilv6s015","action":"command","object":null,"status":"failure","value":"_error":"details":,"kind":"puppetlabs.tasks/connect-error","msg":"Authentication failed for user root@cilv6s015","issue_code":"AUTH_ERROR"
Failed on cilv6s015:
  Authentication failed for user root@cilv6s015

Expected Behavior

Should be able to connect and run commands without native-ssh: true

Steps to Reproduce

Steps to reproduce the behavior:

Environment

Additional Context

Quick inspection looks net-ssh < 7 doesn't allow for SHA2 with RSA keys.

beechtom commented 1 year ago

@cummingscody Unfortunately Bolt is limited to whatever algorithms are supported in net-ssh. Deprecated algorithms are disabled by default, though you can enable them with the ssh.*-algorithms config options listed here. Have you tried setting those?

github-actions[bot] commented 1 year ago

This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.

silug commented 1 year ago

This is related to #3121.

github-actions[bot] commented 1 year ago

This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.

silug commented 1 year ago

This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.

This is still an issue.

github-actions[bot] commented 1 year ago

This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.

bastelfreak commented 1 year ago

I still think this is a valid issue and the bot is absolutely useless and just creates a burden on the contributor side.

pr3c0g commented 9 months ago

Still a valid issue, just commenting to prevent bot from labeling this as Stale :).

davidsandilands commented 2 weeks ago

@bastelfreak I think the bot is now dead fortunately :-)