You are not logged in.
What am I supposed to paste into SSH Public Key in my AUR profile?
I get "The PGP key fingerprint is invalid"
when I put in result of cat ~/.ssh/aur
Last edited by Lockheed (2021-04-24 07:19:39)
Offline
If you called your private key "aur", then the public key you need to enter is in "aur.pub".
| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |
Offline
Thanks, but I am getting the same error.
aur.pub starts with ssh-rsa. My old one was starting with ssh-dss
Offline
Are there line breaks in your key?
Last edited by trout (2021-04-22 20:33:50)
Offline
I don't think so. Can someone paste a scrambled example of how the pasted value should look like?
Last edited by Lockheed (2021-04-22 20:47:25)
Offline
I'm on a Windows PC right now and generated this through PuTTYGen, but the format should be the same as the authorized_keys file and is as follows (note: this is a freshly generated demo):
ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEA2YSnwqAcwIPrBoZkG/dPxyaLM6xiFSY28R9TvTaMFOi7aqDBWgi5ZcKcMITGdBXeRlT2w0yeTANk67l31r0XncJKS/pGpkvfusSDoxxlPkbTP37vBB4bNCTWLU63+eV62ltYFRiir56lkryhJ2hIIbwqz9XPSeYG3DRawfQFng8Oo0C8FUae7kuO1Qq5yZ0dCoA7LRFk9fqedOITDSWhzS3BPeR7+VOH4IAttGzOYlKMTjTKOV4Lrm3qVVHAnxCComVGu42aE65cIu09q90/ExZ/7n+QH2Fi3PM6mv2tdzWyZPJRMhcbwbsY3iCTqy5eV2mzlVOL0T1Fxm86yUUX6w== demo
Offline
Looks like mine. Is that a username (demo)on the end? My file ends with username@host but whether I leave it or remove it, it won't save.
Offline
The whitespace-separated word at the end is a comment, and does not matter.
Considering that ssh public keys do not contain sensitive info (they are needed by the server, not by you, the only thing you can do with a pubkey is allow the privkey's owner to prove they generated the pubkey and therefore get to log in), you could try posting the exact text you tried inputting to the AUR.
Managing AUR repos The Right Way -- aurpublish (now a standalone tool)
Offline
ssh-rsa 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
Offline
Your key is broken.
0 ✓ rne@envy ~ $ cat ssh.pub
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC17ByDbFOgk8J+h00l1U+cJzGYJBdY+coGjqfGU9D6b4B8Zm9X7ZEfSd5DhSZmecuKd6tCmKtVKnxyDx0F54a6eVX4NbCAX4gxEkZLGzPdLSjEMx0loEYq5zu0kmEJpk1Kn3fwXN2x4VUe45o+n368+R9W2MbuJDh70tKXp9T4B40C5L6XBsD3Uwu5ThE7xB78lbvATnWtmuGLtCSzb3qiuSEg9H3kf98i4sKYjFILCVsX5C0ShqT+GxYuotUhgxj4OJQtlfuDPF5ZKYWuXN+tBtVWg8J2CtvTe0NuSDo+pD3Tn09aMLaJPlzq47n6z52TOwxHd8JqgS281YaCr9to2jTXoQNwm+1jwJ7MB0PbExQXAGcYSNflaodXB2uW2Dcjj8e7CQATQJmUn6sWHfgfpe2t7xTkInqMmBe4ygBF1nlmnbjRvFWA7U5YmwFJUhCFTJXDKjjpOLH+h72q5Id5qwQIRPTxyXp1BfXJ5pJX8A9W1l3lOFyjP8=
0 ✓ rne@envy ~ $ ssh-keygen -lf ssh.pub
ssh.pub is not a public key file.
Consider generating a new keypair.
Inofficial first vice president of the Rust Evangelism Strike Force
Offline
The AUR validates the pubkey as invalid (strict mode) base64.
$ ssh-keygen -l -f /tmp/lockheed.pub
/tmp/lockheed.pub is not a public key file.
Dunno what you did to that string, but ssh doesn't like it at all.
EDIT: ninjaed...
Last edited by eschwartz (2021-04-22 21:43:09)
Managing AUR repos The Right Way -- aurpublish (now a standalone tool)
Offline
I think it's because I removed the user part. Here's the whole one:
ssh-rsa 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 juha@panzor
Offline
No it is not. And given the commands above, you could have tested that yourself.
And quite frankly I tend to assume trolling here, since an 11-year Arch veteran with over 1,400 posts on these boards should know how to manage SSH keys and use the AUR.
Why are you being an asshole? [...]
I don't know. It was late and I probably got more triggered by the last post than I should have.
That was uncalled for and I apologise.
Last edited by schard (2021-04-23 09:49:35)
Inofficial first vice president of the Rust Evangelism Strike Force
Offline
No it is not. And given the commands above, you could have tested that yourself.
And quite frankly I tend to assume trolling here, since an 11-year Arch veteran with over 1,400 posts on these boards should know how to manage SSH keys and use the AUR.
Why are you being an asshole? What does being an arch veteran have to do with "using the AUR", which many Arch users don't do (binary repos are nice), and which you've arbitrarily redefined as "upload to the AUR" -- a definite subset of "using the AUR" which even fewer people do?
Why would someone with 1400 posts on these boards and who has been here for 11 years, be immune to having some head-scratching issue that confuses them? The initial thread posting is entirely reasonable IMO.
You do have a point about the commands to test it being mentioned and easily used to test the hypothesis "I think it's because I removed the user part". But I really don't believe there is any rule that long-time users are required to no longer have the perspective of an inexperienced user who needs help in logically thinking through the problem.
If you just despise the inexperienced, you can curse them out or accuse them of intentionally malicious "trolling" or whatever judgmentalism you'd like to engage in, without taking into account how long one has been here. Idiots and fools who don't deserve your magnificent help, presumably don't deserve your magnificent help even on their first day here.
(Please do not accuse people of trolling unless you're a whole lot more sure than you have any right to be, here.)
Managing AUR repos The Right Way -- aurpublish (now a standalone tool)
Offline
I think it's because I removed the user part. Here's the whole one:
ssh-rsa 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 juha@panzor
I'd like to reiterate what I said before:
The whitespace-separated word at the end is a comment, and does not matter.
Your analysis is wrong. Also, the posted output is still, according to ssh-keygen -l, "not a public key file".
Also:
The AUR validates the pubkey as invalid (strict mode) base64.
The reason I said this is because I was actually looking at the source code for the AUR as I said it, and tested it with your key, and that is the error it gave.
If you'd like further proof that it is the base64 string here which is a problem and NOT the comment...
The AUR will, upon successfully accepting a key, delete the user part (i.e. "the comment") before storing the rest, and returning to the AUR profile page will show only "ssh-rsa <base64-string>", no juha@panzor left.
All in all, I don't know why your ssh key is completely broken, but the quickest fix is to generate a new one.
Or you could investigate shell history etc. to try to figure out what happened to the current one.
You could also try using
ssh-keygen -y -f ~/.ssh/aur
and compare the output to ~/.ssh/aur.pub -- if the -y option successfully recreates the public key from scratch, then the ~/.ssh/aur file is a valid private key -- and the differences between the old public key file and the one you've just printed with -y, might indicate how it got corrupted.
Managing AUR repos The Right Way -- aurpublish (now a standalone tool)
Offline
You could also generate a Ed25519 key. They are shorter and less likely to get mangled by C&P.
ssh-keygen -f ~/.ssh/aur -t ed25519
Offline
My apologies, I was tired last night and did not mention that I did in fact tested this key with
what eschwart mentioned earlier in this thread:
ssh-keygen -lf ~/.ssh/aur.pub
3072 SHA256:ASCgC7q/6zGOQ4toOFcdF/BECmME1CZ9bI26beFvvwo juha@panzor (RSA)
which I assume is a positive verification?
With regards to the suggestion to compare the key outputs, I see no differences:
cat ~/.ssh/aur.pub
ssh-rsa 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 juha@panzor
~> ssh-keygen -y -f ~/.ssh/aur
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC17ByDbFOgk8J+h00l1U+cJzGYJBdY+coGjqfGU9D6b4B8Zm9X/7ZEfSd5DhS/ZmecuKd6tCmKtVKnxyDx0F54a6eVX4N/bCAX4gxEkZLGzPdLSjEMx0l/oEYq5zu0kmEJpk1Kn3fwXN2x4VUe45o+n368+R9W2MbuJDh70/tKXp9T4B40C5L6XBsD3Uwu5ThE7xB78lbvATnWtmuGLtCSzb3qiuSEg9H3kf98i4sKYjFILCVsX5C0ShqT+GxYuotUhgxj4OJQtlfuDPF5ZKYWuX//N+tBtVWg8J2CtvTe0NuSDo+pD3Tn09aMLaJPlzq47n6z52TOwxHd8JqgS281YaCr9to2jTXoQNwm+1jwJ7MB/0PbExQXAGcYSNflaodXB2uW2Dcjj8e7/CQATQJmUn6sWHfgfpe2t7xTkInqMmBe4ygBF1nlmnbjRvFWA7U5YmwFJUhCFTJXDKjjpOLH+h72q5Id5qwQIRPTxyXp1BfXJ5pJX8A9W1l3lOFyjP8= juha@panzor
@a821, I tried your suggestion (which indeed simplifies the key a lot), resulting with
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJI4BqK/tnKCi77u+v8y2Feu4k5ueieMLBCP/RtWdQob juha@panzor
but the result is the same
The PGP key fingerprint is invalid.
Offline
My apologies, I was tired last night and did not mention that I did in fact tested this key with
what eschwart mentioned earlier in this thread:ssh-keygen -lf ~/.ssh/aur.pub 3072 SHA256:ASCgC7q/6zGOQ4toOFcdF/BECmME1CZ9bI26beFvvwo juha@panzor (RSA)
which I assume is a positive verification?
Indeed it is.
@a821, I tried your suggestion (which indeed simplifies the key a lot), resulting with
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJI4BqK/tnKCi77u+v8y2Feu4k5ueieMLBCP/RtWdQob juha@panzor
but the result is the same
The PGP key fingerprint is invalid.
Are you trying to paste the SSH key into the PGP key field? Then you're in the wrong place in the AUR web UI.
The field for the SSH keys is below the two password fields.
Last edited by schard (2021-04-23 10:52:48)
Inofficial first vice president of the Rust Evangelism Strike Force
Offline
This is the only field for keys I can see:
https://i.imgur.com/eObvlQF.png
Mod Edit - Replaced oversized image with link.
CoC - Pasting pictures and code
Last edited by Slithery (2021-04-23 11:41:55)
Offline
Check the field "PGP-Key-Fingerprint" (or alike, I have my interface in German).
Most likely the web application is complaining about an invalid value there.
Inofficial first vice president of the Rust Evangelism Strike Force
Offline
It contains my forum/AUR nickname. What is supposed to be in there?
Offline
Well, since the label says "PGP-Key-Fingerprint" and not "AUR nickname", probably not the latter, but the former.
If you don't use PGP, just leave the field empty.
Inofficial first vice president of the Rust Evangelism Strike Force
Offline
Bloody hell. Now I understand.
LastPass browser plugin kept putting my nickname in there after several seconds of getting into the profile edit, which made me think it was always there.
I removed it and it solved the problem.
Thank you and everyone else for the their time and suggestions!
Last edited by Lockheed (2021-04-23 11:14:24)
Offline
My apologies, I was tired last night and did not mention that I did in fact tested this key with
what eschwart mentioned earlier in this thread:ssh-keygen -lf ~/.ssh/aur.pub 3072 SHA256:ASCgC7q/6zGOQ4toOFcdF/BECmME1CZ9bI26beFvvwo juha@panzor (RSA)
which I assume is a positive verification?
With regards to the suggestion to compare the key outputs, I see no differences:
cat ~/.ssh/aur.pub ssh-rsa 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 juha@panzor ~> ssh-keygen -y -f ~/.ssh/aur ssh-rsa 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 juha@panzor
Diff of the first one you posted in post #12, and the one you just posted right here:
-ssh-rsa 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 juha@panzor
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC17ByDbFOgk8J+h00l1U+cJzGYJBdY+coGjqfGU9D6b4B8Zm9X/7ZEfSd5DhS/ZmecuKd6tCmKtVKnxyDx0F54a6eVX4N/bCAX4gxEkZLGzPdLSjEMx0l/oEYq5zu0kmEJpk1Kn3fwXN2x4VUe45o+n368+R9W2MbuJDh70/tKXp9T4B40C5L6XBsD3Uwu5ThE7xB78lbvATnWtmuGLtCSzb3qiuSEg9H3kf98i4sKYjFILCVsX5C0ShqT+GxYuotUhgxj4OJQtlfuDPF5ZKYWuX//N+tBtVWg8J2CtvTe0NuSDo+pD3Tn09aMLaJPlzq47n6z52TOwxHd8JqgS281YaCr9to2jTXoQNwm+1jwJ7MB/0PbExQXAGcYSNflaodXB2uW2Dcjj8e7/CQATQJmUn6sWHfgfpe2t7xTkInqMmBe4ygBF1nlmnbjRvFWA7U5YmwFJUhCFTJXDKjjpOLH+h72q5Id5qwQIRPTxyXp1BfXJ5pJX8A9W1l3lOFyjP8= juha@panzor
Notice the "/" all got removed the first time you posted (but apparently were still in the file!)
Managing AUR repos The Right Way -- aurpublish (now a standalone tool)
Offline