"svn up" over ssh does not work

"svn up" over ssh does not work

[Thomas Koenig]

Hi,

I am getting

$ LANG=C svn up
Updating '.':
svn: E170013: Unable to connect to a repository at URL 
'svn+ssh://tkoenig@gcc.gnu.org/svn/gcc/trunk'
svn: E210002: To better debug SSH connection problems, remove the -q 
option from 'ssh' in the [tunnels] section of your Subversion 
configuration file.
svn: E210002: Network connection closed unexpectedly

read-only svn (without ssh) works.

Anything wrong with the servers?

Regards

	Thomas

Re: "svn up" over ssh does not work

[Andreas Schwab]

On Jan 27 2018, Thomas Koenig <tkoenig@netcologne.de> wrote:

> svn: E210002: To better debug SSH connection problems, remove the -q 
> option from 'ssh' in the [tunnels] section of your Subversion
> configuration file.

And what does it say?

Andreas.

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 58CA 54C7 6D53 942B 1756  01D3 44D5 214B 8276 4ED5
"And now for something completely different."

Re: "svn up" over ssh does not work

[Thomas Koenig]

Am 28.01.2018 um 11:58 schrieb Andreas Schwab:
> On Jan 27 2018, Thomas Koenig <tkoenig@netcologne.de> wrote:
> 
>> svn: E210002: To better debug SSH connection problems, remove the -q
>> option from 'ssh' in the [tunnels] section of your Subversion
>> configuration file.
> 
> And what does it say?
> 
> Andreas.

Nothing, but replacing it with "-v" yielded

OpenSSH_7.6p1, OpenSSL 1.0.2n-fips  7 Dec 2017
debug1: Reading configuration data /home/ig25/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 25: Applying options for *
debug1: Connecting to gcc.gnu.org [209.132.180.131] port 22.
debug1: Connection established.
debug1: identity file /home/ig25/.ssh/id_rsa type 0
debug1: key_load_public: No such file or directory
debug1: identity file /home/ig25/.ssh/id_rsa-cert type -1
debug1: identity file /home/ig25/.ssh/id_dsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ig25/.ssh/id_dsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ig25/.ssh/id_ecdsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ig25/.ssh/id_ecdsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ig25/.ssh/id_ed25519 type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ig25/.ssh/id_ed25519-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.6
debug1: Remote protocol version 1.99, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c000000
debug1: Authenticating to gcc.gnu.org:22 as 'tkoenig'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: diffie-hellman-group-exchange-sha256
debug1: kex: host key algorithm: ssh-rsa
debug1: kex: server->client cipher: aes128-ctr MAC: umac-64@openssh.com 
compression: none
debug1: kex: client->server cipher: aes128-ctr MAC: umac-64@openssh.com 
compression: none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(2048<3072<8192) sent
debug1: got SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: got SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: ssh-rsa 
SHA256:MFNiczzfX8/nvLSRZwR3CxMyycKtMan64Zm4C373FeM
debug1: Host 'gcc.gnu.org' is known and matches the RSA host key.
debug1: Found key in /home/ig25/.ssh/known_hosts:12
debug1: rekey after 4294967296 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey after 4294967296 blocks
debug1: Skipping ssh-dss key /home/ig25/.ssh/id_dsa - not in 
PubkeyAcceptedKeyTypes
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: RSA 
SHA256:wxYM1dVeitcO4H9nq0GL/nIHnlVerL/znSPjkapg9/s /home/ig25/.ssh/id_rsa
debug1: Authentications that can continue: publickey
debug1: Trying private key: /home/ig25/.ssh/id_ecdsa
debug1: Trying private key: /home/ig25/.ssh/id_ed25519
debug1: No more authentication methods to try.
tkoenig@gcc.gnu.org: Permission denied (publickey).

Re: "svn up" over ssh does not work

[Andreas Schwab]

On Jan 28 2018, Thomas Koenig <tkoenig@netcologne.de> wrote:

> debug1: Offering public key: RSA
> SHA256:wxYM1dVeitcO4H9nq0GL/nIHnlVerL/znSPjkapg9/s /home/ig25/.ssh/id_rsa

That's your new key, of course it won't work.  What does it say if you
use your old new?

Andreas.

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 58CA 54C7 6D53 942B 1756  01D3 44D5 214B 8276 4ED5
"And now for something completely different."

Re: "svn up" over ssh does not work

[Jonathan Wakely]

On 27 January 2018 at 12:11, Thomas Koenig wrote:
> Hi,
>
> I am getting
>
> $ LANG=C svn up
> Updating '.':
> svn: E170013: Unable to connect to a repository at URL
> 'svn+ssh://tkoenig@gcc.gnu.org/svn/gcc/trunk'
> svn: E210002: To better debug SSH connection problems, remove the -q option
> from 'ssh' in the [tunnels] section of your Subversion configuration file.
> svn: E210002: Network connection closed unexpectedly
>
> read-only svn (without ssh) works.
>
> Anything wrong with the servers?

No, the problem must be at your end. Did you recently update your
OpenSSH version?

Does your local config now disable DSA keys by default, and your key
on gcc.gnu.org is a DSA key?

i.e. does this work?
SVN_SSH="ssh -o PubkeyAcceptedKeyTypes=ssh-dss" svn up

If it does then edit your ~/.ssh/config to add that option for Host gcc.gnu.org

Re: "svn up" over ssh does not work

[Andreas Schwab]

To debug authentication problems you can use "ssh gcc.gnu.org alive".

Andreas.

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 58CA 54C7 6D53 942B 1756  01D3 44D5 214B 8276 4ED5
"And now for something completely different."

Re: "svn up" over ssh does not work

[Thomas Koenig]

Am 28.01.2018 um 13:43 schrieb Jonathan Wakely:

> i.e. does this work?
> SVN_SSH="ssh -o PubkeyAcceptedKeyTypes=ssh-dss" svn up

Yes, it did. Thanks a lot!

I used this to add my new key via

ssh -o PubkeyAcceptedKeyTypes=ssh-dss  tkoenig@gcc.gnu.org appendkey < 
id_rsa.pub

and now everything is working again.

Regards

	Thomas