Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-52293

Provide details on crypto error instead of "error in libcrypto"

    • openssh-8.7p1-44.el9
    • None
    • Low
    • 1
    • rhel-sst-security-crypto
    • ssg_security
    • 11
    • 1
    • False
    • Hide

      None

      Show
      None
    • No
    • Red Hat Enterprise Linux
    • Crypto24Q4
    • Release Note Not Required
    • None

      Goal

      • As an admin, I want to be able to troubleshoot libcrypto issues when connections through ssh do not make it. For now I'm getting "error: userauth_pubkey: parse key: error in libcrypto" message which doesn't help finding the root cause at all.
        I need the exact message from libcrypto library to be returned.

      Acceptance Criteria

      • "error in libcrypto" is not returned in case of algo error, but a detailed useful message

      Additional details

      Currently the openssh code has this:

       70         case SSH_ERR_LIBCRYPTO_ERROR:
       71                 return "error in libcrypto";  /* XXX fetch and return */
      

      The "XXX" seems self-explanatory that this error is still work in progress.

        1. sshd_debug3.out
          16 kB
          Renaud Métrich

              dbelyavs@redhat.com Dmitry Belyavskiy
              rhn-support-rmetrich Renaud Métrich
              Dmitry Belyavskiy Dmitry Belyavskiy
              Miluse Bezo Konecna Miluse Bezo Konecna
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated: