DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:content-type
	:content-transfer-encoding:mime-version; q=dns; s=default; b=VMR
	HjC1qWdj9YNoa3th3tJ13v82kO7R0LfHGMulWl47+HYnt4yO0lM3vtP7mnNSzWcs
	Aln6QENlL12CXhQh2tV8Ux+BYDQr43BcXGQAmVqOr1SYtgPr/RtphT49csdQnFSh
	1kZIeKe7KScwAiFG/Y9MmtfciroMj0g4Bp+m//30=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
From: "White, W John (GE Transportation)" <W.J.White@ge.com>
To: "cygwin@sourceware.org" <cygwin@sourceware.org>
Subject: OpenSSH 6.8p1-1 and keychain: can't determine fingerprint
Date: Fri, 27 Mar 2015 04:13:35 +0000
Message-ID: <69F9E229B7A50E4CB4ABF60DC7EBD1E9179F513E@ALPURAPA03.e2k.ad.ge.com>
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

After updating to OpenSSH 6.8p1-1, I experienced an issue where, at
every login, keychain (in my .bash_profile) wrote a warning:

My .bash_profile lines:
# Start keychain, passing as args all private keys to be cached
keychain ${HOME}/.ssh/id_dsa #, other_key1, other_key2, ...
# That creates a file which must be sourced to set env vars
source ${HOME}/.keychain/${HOSTNAME}-sh

The warning:
Can't determine fingerprint from the following line, falling back to filename

A post
( http://newscentral.exsees.com/item/d00c4734c9eed7abe32de6a741f5a3fe-8dd4abc7f69143e4ea63672f83a77a14 )
to an Arch Linux forum expressed a similar report, along with a solution,
adding a case for SHA256 or MD5:
https://github.com/funtoo/keychain/blob/master/keychain.sh#L692 .

For clarity, that's:
*\ SHA256:[0-9a-zA-Z\+\/=]*|*\ MD5:[0-9a-zA-Z\+\/=]*)
    # The new OpenSSH 6.8+ format,
    #   1024 SHA256:mVPwvezndPv/ARoIadVY98vAC0g+P/5633yTC4d/wXE /home/barney/.ssh/id_dsa (DSA)
    echo "$ef_line" | cut -f2 -d' '
    ;;

I applied the changes to my /usr/bin/keychain, and the errors stopped.

I think this change belongs in Cygwin, too, since OpenSSH 6.8p1-1 .

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple