[Cyberduck-trac] [Cyberduck] #6482: Incorrect password for SFTP private key cached for session

[Cyberduck]

#6482: Incorrect password for SFTP private key cached for session
----------------------------------------+-------------------------
 Reporter:  Motherboard                 |         Owner:  dkocher
     Type:  defect                      |        Status:  reopened
 Priority:  normal                      |     Milestone:  4.3
Component:  sftp                        |       Version:  4.2.1
 Severity:  normal                      |    Resolution:
 Keywords:  SFTP passphrase public key  |  Architecture:  Intel
 Platform:  Windows 7                   |
----------------------------------------+-------------------------
Changes (by Motherboard):

 * status:  closed => reopened
 * platform:  Mac OS X 10.7 => Windows 7
 * resolution:  worksforme =>


Old description:

> This error occurs on both Windows and Mac.
>
> Here are the steps to reproduce this error:
>
> 1. Create a new SFTP bookmark in Cyberduck that uses a private key that
> is encrypted with a passphrase.
> 2. Double-click the bookmark to connect.
> 3. When prompted for the passphrase, enter the wrong passphrase and click
> the "Save password" checkbox.
>
> The passphrase login will disappear, the user will not connect to the
> SFTP server and the user will not be prompted to re-enter their
> passphrase. If you double-click the bookmark again, an additional SFTP
> session is spawned but there is no opportunity to re-renter the
> passphrase (i.e. the passphrase prompt does not reappear).
>
> What should occur is that the user should be re-prompted for the correct
> passphrase.
>
> The workaround is to close Cyberduck, reopen it, and then Cyberduck will
> give the user an opportunity to re-enter the passphrase.

New description:

 The error only appears to affect PuTTY private keys (e.g., .ppk) and does
 not affect OpenSSH keys.

 Please repeat the process described below using an encrypted PuTTY private
 key.


 ORIGINAL ERROR DESCRIPTION:
 ---------------------------

 This error occurs on both Windows and Mac.

 Here are the steps to reproduce this error:

 1. Create a new SFTP bookmark in Cyberduck that uses a private key that is
 encrypted with a passphrase.
 2. Double-click the bookmark to connect.
 3. When prompted for the passphrase, enter the wrong passphrase and click
 the "Save password" checkbox.

 The passphrase login will disappear, the user will not connect to the SFTP
 server and the user will not be prompted to re-enter their passphrase. If
 you double-click the bookmark again, an additional SFTP session is spawned
 but there is no opportunity to re-renter the passphrase (i.e. the
 passphrase prompt does not reappear).

 What should occur is that the user should be re-prompted for the correct
 passphrase.

 The workaround is to close Cyberduck, reopen it, and then Cyberduck will
 give the user an opportunity to re-enter the passphrase.

--

-- 
Ticket URL: <http://trac.cyberduck.ch/ticket/6482#comment:5>
Cyberduck <http://cyberduck.ch>
Open source FTP, SFTP, WebDAV, Cloud Files, Google Docs & Amazon S3 Browser for Mac & Windows.