如题 parse private key [/Users/ruan/.ssh/id_dsa] failed: ssh: unhandle

我试了一下，发现只支持 1024 位的： <div class="highlight highlight-source-shell notranslate posi

macOS 12 带的 ssh-keygen 应该是没有问题的 <div class="snippet-clipboard-content notranslate

不支持 dsa 算法私钥 about trzsz-ssh HOT 7 CLOSED

trzsz commented on June 14, 2024

不支持 dsa 算法私钥

from trzsz-ssh.

Comments (7)

lonnywong commented on June 14, 2024 1

我试了一下，发现只支持 1024 位的：

$ ssh-keygen -t dsa -b 2048
Invalid DSA key length: must be 1024 bits

1024 位的私钥已经不安全了，据说 openssh 加上 dsa 是个错误：golang/go#23751 (comment) ，看来下个版本要把对 dsa 的支持删了。

from trzsz-ssh.

lonnywong commented on June 14, 2024

DSA 私钥是怎么生成的，多少位的？

from trzsz-ssh.

ruanimal commented on June 14, 2024

macOS 12 带的 ssh-keygen 应该是没有问题的

ssh-keygen -t dsa
Generating public/private dsa key pair.
Enter file in which to save the key (/Users/ruan/.ssh/id_dsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /Users/ruan/.ssh/id_dsa
Your public key has been saved in /Users/ruan/.ssh/id_dsa.pub
The key fingerprint is:
SHA256:h3IiL+STmUUpwOrWpxHX+/t5fNb8QksR+C/XaIhLFJE ruan@ruandeMacBook-Pro
The key's randomart image is:
+---[DSA 1024]----+
| ..       .o .   |
|  ..   .  E . .  |
| .  . +    . . . |
|.  . + . ..   o  |
|. . = + S... . +.|
| o = O = .o . * +|
|.   @ . .. ..+ =.|
|   . o   .. .oooo|
|         .oo. o.o|
+----[SHA256]-----+

from trzsz-ssh.

ruanimal commented on June 14, 2024

dsa 已经被 openssh 默认禁用了，dsa 支持确实可以删除了。

另外，建议 tssh 解析文件失败提示一些warning信息就ok了，别直接退出。

from trzsz-ssh.

lonnywong commented on June 14, 2024

OK，我周末优化一下这里的逻辑。

from trzsz-ssh.

lonnywong commented on June 14, 2024

v0.1.7 已优化。

from trzsz-ssh.

ruanimal commented on June 14, 2024