Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 22 Jan 2023 01:45:04 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 269088] devel/gitolite: Unable to add ecdsa-sk or ed25519-sk keys
Message-ID:  <bug-269088-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D269088

            Bug ID: 269088
           Summary: devel/gitolite: Unable to add ecdsa-sk or ed25519-sk
                    keys
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: mat@FreeBSD.org
          Reporter: nate1010smith+freebsd@gmail.com
             Flags: maintainer-feedback?(mat@FreeBSD.org)
          Assignee: mat@FreeBSD.org

The FreeBSD port of Gitolite currently does not work with SSH keys of type
ecdsa-sk and ed25519-sk.

The root cause appears to be a regex added by
"patch-src_triggers_post-compile_ssh-authkeys" which is applied to
"src/triggers/post-compile/ssh-authkeys".

The regex contains "^(ecdsa|ssh)-" which excludes the "sk-ecdsa" and
"sk-ssh-ed25519" prefixes. That exclusion causes the space between the opti=
ons
and the key to be omitted which then causes authentication to fail for those
keys.

A possible solution would be to use "^(sk-)?(ecdsa|ssh)-" but that will sti=
ll
break when other key types are added. I'm not sure if there's a way to
implement a more robust fix without fully parsing the SSH key file format.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-269088-7788>