SFTP: can not use ssh public keys in ssh-ed25519 format ?
CompletedHello
A customer has sent us a new SSH public key, generated with ed25519. I can't load it and got the following message:
Unable to read public key file The file does not appear to contain a public key in any recognized format. The public key file can be in RFC 4716 SSH format, OpenSSH v2 format, or from a PEM or DER encoded certificate. Reported errors: SSH format error: Line too long OpenSSH format error: Unable to retrieve SSH key from encoded data SSL format error: Error reading PEM certificate file: no start line
I searched the documentation for key type support and didn't found any details for ed25519. Is anyone using this format with Cerberus 12.2.2.0?
Cheers, Sébastien
-
Official comment
Hi Sébastien,
Unfortunately we do not support ed25519 formatted keys yet. At the moment, the public key file needs to be in RFC 4716 SSH or OpenSSH v2 format, or from a PEM or DER-encoded certificate. We have an open enhancement request to support ed25519 keys that is actually in progress and we hope to have it out soon. I can't say yet exactly when that will be introduced, but it's in progress, but may not be long.
Ian
-
Hi Ian, thank you for the explanation !
0 -
Hello team. Is the above still the case or does Cerberus support ed25519 keys as of version 12.11.6 or higher? I can't confirm the key was generated as such, but one of our customers provided a public key that produced the exact same error message as the one that started this support post (and is not prefaced with SSH RSA).
Thanks!
0 -
Hello Will,
As of 12.11.6, the above case still does hold true. Version 13, however has introduced ED25519 key support. If you are experiencing this issue on 12.11.6, the same information and advice would apply. You can read more about version specific changes within our release notes at: https://www.cerberusftp.com/products/releasenotes
Thanks,
Connor
0
Post is closed for comments.
Comments
4 comments