← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1464298] [NEW] default hash function and hash format changed in OpenSSH 6.8 (ssh-keygen)

 

Public bug reported:

The following tests fail on Fedora 22 because ssh-keygen output changed
in OpenSSH 6.8:

* nova.tests.unit.api.ec2.test_cloud.CloudTestCase.test_import_key_pair
* nova.tests.unit.compute.test_keypairs.ImportKeypairTestCase.test_success_ssh

Before OpenSSH used MD5 and hex with colons to display a fingerprint. It
now uses SHA256 encoded to base64:

"""
 * Add FingerprintHash option to ssh(1) and sshd(8), and equivalent
   command-line flags to the other tools to control algorithm used
   for key fingerprints. The default changes from MD5 to SHA256 and
   format from hex to base64.
"""
http://www.openssh.com/txt/release-6.8

** Affects: nova
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1464298

Title:
  default hash function and hash format changed in OpenSSH 6.8 (ssh-
  keygen)

Status in OpenStack Compute (Nova):
  New

Bug description:
  The following tests fail on Fedora 22 because ssh-keygen output
  changed in OpenSSH 6.8:

  * nova.tests.unit.api.ec2.test_cloud.CloudTestCase.test_import_key_pair
  * nova.tests.unit.compute.test_keypairs.ImportKeypairTestCase.test_success_ssh

  Before OpenSSH used MD5 and hex with colons to display a fingerprint.
  It now uses SHA256 encoded to base64:

  """
   * Add FingerprintHash option to ssh(1) and sshd(8), and equivalent
     command-line flags to the other tools to control algorithm used
     for key fingerprints. The default changes from MD5 to SHA256 and
     format from hex to base64.
  """
  http://www.openssh.com/txt/release-6.8

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1464298/+subscriptions


Follow ups

References