Question about SSH protocol for developper access

Question about SSH protocol for developper access

[Pierre Muller]

  I am not sure this is the correct mailing list for this question,
but I was wondering if it would not be better to allow now also SSH version
2 keys
for remote write access to Gnu repositories.

  The reason for me to ask is simply that protocol 1 is now disabled by
default on Cygwin installation.
This means that ssh-agent, which I normally use to avoid having to type my
password
each time I access git repository for instance, does not work for my
SSH-version 1 key anymore…

  I suppose that this has to do with the fact that version 1 is less
“secure” than version 2.
what are the reasons why GNU still insists on only using version 1 keys?

If someone can tell me where would be a better place to ask this question,
it would also be great,
and I would be happy to move the topic to another list.

Pierre Muller
as pascal language maintainer of GDB

Re: Question about SSH protocol for developper access

[Paul_Koning]

> On Oct 28, 2015, at 6:43 AM, Pierre Muller <pierre.muller@ics-cnrs.unistra.fr> wrote:
> 
> 
>   I am not sure this is the correct mailing list for this question,
> but I was wondering if it would not be better to allow now also SSH version
> 2 keys
> for remote write access to Gnu repositories.
> 
>   The reason for me to ask is simply that protocol 1 is now disabled by
> default on Cygwin installation.
> This means that ssh-agent, which I normally use to avoid having to type my
> password
> each time I access git repository for instance, does not work for my
> SSH-version 1 key anymore.
> 
>   I suppose that this has to do with the fact that version 1 is less
> "secure" than version 2.
> what are the reasons why GNU still insists on only using version 1 keys?

I don't believe that it does.  I have an SSH 2 key registered with the GNU servers, not a V1 key.  Maybe all you need to do is submit your SSH V2 key.

A related question is whether the GNU servers should disable SSH V1 across the board.  It seems like a good idea to do so.

	paul

Re: Question about SSH protocol for developper access

[Andreas Schwab]

"Pierre Muller" <pierre.muller@ics-cnrs.unistra.fr> writes:

> what are the reasons why GNU still insists on only using version 1 keys?

Does it?  Are you sure you have installed a version 2 key on sourceware?

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."

RE: Question about SSH protocol for developper access

[Pierre Muller]

> -----Message d'origine-----
> De : gdb-owner@sourceware.org [mailto:gdb-owner@sourceware.org] De la
> part de Andreas Schwab
> Envoyé : mercredi 28 octobre 2015 11:55
> À : Pierre Muller
> Cc : 'GDB Development'
> Objet : Re: Question about SSH protocol for developper access
> 
> "Pierre Muller" <pierre.muller@ics-cnrs.unistra.fr> writes:
> 
> > what are the reasons why GNU still insists on only using version 1
> keys?
> 
> Does it?  Are you sure you have installed a version 2 key on
> sourceware?

  I always thought that shell access was not authorized on sourceware.org
machine...

And indeed:
 
$ ssh  muller@sourceware.org
Enter passphrase for RSA key '/home/Pierre/.ssh/identity':
Last login: Wed Oct 28 11:23:17 2015 from gw-ics.u-strasbg.fr
Connection to sourceware.org closed.

scp also fails, so I have no idea how I could add another key by myself.

Pierre
 

Re: Question about SSH protocol for developper access

[Andreas Schwab]

"Pierre Muller" <pierre.muller@ics-cnrs.unistra.fr> writes:

> scp also fails, so I have no idea how I could add another key by myself.

http://sourceware.org/ml/overseers/2015-q4/msg00018.html

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."

Re: Question about SSH protocol for developper access

[Andreas Schwab]

The commands for account management are available here:

http://www.sourceware.org/sourceware/accountinfo.html

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."