X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 2A54E385801A
Authentication-Results:	sourceware.org; dmarc=none (p=none dis=none)
	header.from=SystematicSw.ab.ca
Authentication-Results:	sourceware.org;
	spf=none smtp.mailfrom=brian DOT inglis AT systematicsw DOT ab DOT ca
X-Authority-Analysis:	v=2.4 cv=fPVaYbWe c=1 sm=1 tr=0 ts=60a30265
	a=T+ovY1NZ+FAi/xYICV7Bgg==:117 a=T+ovY1NZ+FAi/xYICV7Bgg==:17
	a=IkcTkHD0fZMA:10 a=kPCIzciLAAAA:20 a=TImcKGuyeGIbufSLrCcA:9 a=QEXdDO2ut3YA:10
Subject:	Re: curl SFTP transfer from Cygwin on Win10 to Ubuntu 18.04 fails
	with Unknown host key type: 1835008
To:	cygwin AT cygwin DOT com
References:	<CS1PR8401MB0661782A5CCF9842B233F87CFE509 AT CS1PR8401MB0661 DOT NAMPRD84 DOT PROD DOT OUTLOOK DOT COM>
	<97187a2e-3310-28fc-157f-65e795262382 AT SystematicSw DOT ab DOT ca>
From:	Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Organization:	Systematic Software
Message-ID:	<79db00ca-739d-7171-dd78-1a5340d1be58@SystematicSw.ab.ca>
Date:	Mon, 17 May 2021 17:55:15 -0600
User-Agent:	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
	Thunderbird/78.10.1
MIME-Version:	1.0
In-Reply-To:	<97187a2e-3310-28fc-157f-65e795262382@SystematicSw.ab.ca>
X-CMAE-Envelope:	MS4xfIQ+lU8d+igS7hNFZwX4nAro9y618proYw+/nwMBfu+HIozfxR3erxnlHTuozrtbsA4bVrJltZSqjV3K22cEnglSDz1wtNOWUr1KWjTcQeHnsBp2ttmt
	389wGDl7ZEM60m+Bh2/QKRKWoW/eDo2rmJZFDX18cQml4CVowqzHjtl1fzhDGx0z5Lujzf007EA23AB57x8HxsvexPzx6R2Xgfg=
X-Spam-Status:	No, score=0.8 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
	KAM_LAZY_DOMAIN_SECURITY, KAM_NUMSUBJECT, NICE_REPLY_A,
	RCVD_IN_BARRACUDACENTRAL, RCVD_IN_DNSWL_LOW, SPF_HELO_NONE, SPF_NONE,
	TXREP autolearn=no autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	cygwin AT cygwin DOT com
Errors-To:	cygwin-bounces AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 14HNtQLR013377

On 2021-05-14 23:47, Brian Inglis wrote:
> On 2021-05-13 22:40, Voris, Ben via Cygwin wrote:
>> curl issue https://github.com/curl/curl/issues/7057 was closed with:
>> "This seems to be purely a libssh2 issue and not a curl one."
>> Curl reports "libssh2/1.7.0"
>> On the same system, ssh reports " OpenSSH_8.5p1, OpenSSL 1.1.1f  31 Mar 2020"
>> The curl code in https://github.com/curl/curl/blob/master/lib/vssh/libssh2.c has a number of defines to control what 
>> type of host keys it will accept, including LIBSSH2_KNOWNHOST_KEY_ED25519
>> Was the curl built with this set?
>> Details are in the curl issue, but here they are again.
>> Here is the curl failure:
>> : curl -vvv -s -T t.cpp sftp://bvoris AT nucnuc/tmp/t2.cpp
>> * STATE: INIT => CONNECT handle 0x800085338; line 1634 (connection #-5000)
>> * Added connection 0. The cache now contains 1 members
>> * STATE: CONNECT => RESOLVING handle 0x800085338; line 1680 (connection #0)
>> * family0 == v4, family1 == v6
>> *   Trying 192.168.1.5:22...
>> * STATE: RESOLVING => CONNECTING handle 0x800085338; line 1762 (connection #0)
>> * Connected to nucnuc (192.168.1.5) port 22 (#0)
>> * STATE: CONNECTING => PROTOCONNECT handle 0x800085338; line 1825 (connection #0)
>> * SFTP 0x8000847c8 state change from SSH_STOP to SSH_INIT
>> * Found host nucnuc in /home/BVoris/.ssh/known_hosts
>> * Unknown host key type: 1835008
>> * SFTP 0x8000847c8 state change from SSH_INIT to SSH_SESSION_FREE
>> * SFTP 0x8000847c8 state change from SSH_SESSION_FREE to SSH_STOP
>> * multi_done
>> * The cache now contains 0 members
>> * SSH DISCONNECT starts now
>> * SSH DISCONNECT is done
>> * Closing connection 0
>> The curl/libcurl version:
>> curl 7.76.1 (x86_64-pc-cygwin) libcurl/7.76.1 OpenSSL/1.1.1f zlib/1.2.11 brotli/1.0.9 zstd/1.4.9 libidn2/2.2.0 
>> libpsl/0.21.0 (+libidn2/2.0.4) libssh2/1.7.0 nghttp2/1.37.0
>> Release-Date: 2021-04-14
>> Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs 
>> smtp smtps telnet tftp
>> Features: alt-svc AsynchDNS brotli Debug GSS-API HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz Metalink NTLM 
>> NTLM_WB PSL SPNEGO SSL TLS-SRP TrackMemory UnixSockets zstd
>> The known_hosts entry from the client:
>> nucnuc ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICmjvQ5jehz5Jwt1PDGJBSgcXVhoMRnbn/E2p3srSK+c
>> curl is run on CYGWIN_NT-10.0 3.2.0(0.340/5/3) 2021-03-29 08:42 x86_64 Cygwin
>> The target system has:
>> OpenSSH_7.6p1 Ubuntu-4ubuntu0.3, OpenSSL 1.0.2n 7 Dec 2017
> 
> Looks like it will need libssh2 1.9.0+.
> The next version 1.9.1 is nearing release incorporating all the updated support
> as well as all CVE and other patches.
> 
> I am working on a couple of build issues, with upstream, and also 32 bit x86 builds.
> 
> If I can get those resolved, I could adopt libssh2 (also hosted/supported @haxx.se
> involving some of the same folks), releasing an update when the new libssh2 release
> is available, and releasing an updated curl release 2 with the updated libssh2.

New libssh2 1.9+ releases are available with latest ciphers and CVE patches,
and new curl -2 releases are available built with the new libssh2 releases.

Please upgrade your Cygwin installation, retest, and let us know if you still
have any issues, or you can now successfully connect.

After some more Cygwin et al testing of the latest libssh2 upstream repo
commits and snapshots, the libssh2 project is eager to release the latest
libssh2 1.9.1, and newer releases of curl will be made available using
those updates.

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in binary units and prefixes, physical quantities in SI.]

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -