I need to be clearer. The 12.3 machine is the client machine trying to rsync with an 11.1 machine running the relevant sshd. I created new keys on the 12.3 machine (after fresh install) and put them in ~/.ssh/athorized_keys file on the 11.1 machine. But the 11.1 machine can't understand the keys of the 12.3 machine, when the 12.3 machine tries to login ssh or rsync to the 11.1 machine. This is because the 11.1 machine doesn't have the same ciphers as the 12.3 machine. All are using ssh2. Copying older keys doesn't relate to this case that I can see. Thanks, Allen ---- Address: Allen Wilkinson (cell) (216) 548-2349 1286 Yellowstone Road Cleveland Heights, OH 44121 USA (INTERNET) aw(at)chaff(dot)biz +++++++ On Wed, 4 Dec 2013, John M Andersen wrote:
On Friday, November 29, 2013 04:58:38 PM Allen Wilkinson wrote:
On Fri, 29 Nov 2013, James Knott wrote:
Allen Wilkinson wrote:
In my recent experience between Suse 11.1 and 12.3, the /etc/ssh config files use different ciphers (found via diff'ing the files), hence the keys generated are incompatible. I haven't spent time to fix this yet. I'd welcome news if others have found a fix.
While the different versions may generate use different ciphers when creating a key, does that make any difference to users? IIRC, different ciphers can be selected when creating a key, but any cipher should be usable.
If the public key of the client machine was created using a cipher not accessible to the server machine, then how can the server translate the key to validate a client login? (I am talking about automated passwordless logins) ---
There hasn't been any loss of cyphers, that I can recall. they are all still available, even those that are no longer recommended.
Newer installations no longer have ssh1 turned on by default, but that is a one-line fix in sshd_conf if you want to still support that.
--
From the Myth of Me -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org