[Cyberduck-trac] [Cyberduck] #10772: "known_hosts" records incorrect SFTP address for servers with non-22 ports
Cyberduck
trac at cyberduck.io
Sat Aug 3 14:09:32 UTC 2019
#10772: "known_hosts" records incorrect SFTP address for servers with non-22 ports
------------------------+-------------------------
Reporter: xupaddy | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: sftp | Version:
Severity: normal | Keywords:
Architecture: Intel | Platform: macOS 10.14
------------------------+-------------------------
Hi,
In Cyberduck 7.0.2, the ~/.ssh/known_hosts file will not record SFTP
server's port number, invalids the "Remember Server Signature" function.
Here is the procedure to reproduce:
1. Connect to an SFTP server that has a non-standard port, let's say
"ssh.example.com:54321".
2. Cyberduck asks you whether to remember this server signature. Choose
"Always".
3. Find a new line in the ~/.ssh/known_hosts file:
{{{
ssh.example.com ssh-ed25519
AAAAC3NzaC1lZDI1NTE5AAAAIJRw0CtHEseIIU/6OUf/NYNKXPs5tCu6EfwUty3bzZcm
}}}
4. Disconnect the server and repeat Step 1. Now Cyberduck asks you again
for saving the signature. Choose "Always" again.
5. Now there are two duplicate lines in ~/.ssh/known_hosts file:
{{{
ssh.example.com ssh-ed25519
AAAAC3NzaC1lZDI1NTE5AAAAIJRw0CtHEseIIU/6OUf/NYNKXPs5tCu6EfwUty3bzZcm
ssh.example.com ssh-ed25519
AAAAC3NzaC1lZDI1NTE5AAAAIJRw0CtHEseIIU/6OUf/NYNKXPs5tCu6EfwUty3bzZcm
}}}
----
This bug does not exist in Cyberduck 7.0.1. In this version, the following
line is added to ~/.ssh/known_hosts when you choose to remember the
signature:
{{{
[ssh.example.com]:54321 ssh-ed25519
AAAAC3NzaC1lZDI1NTE5AAAAIJRw0CtHEseIIU/6OUf/NYNKXPs5tCu6EfwUty3bzZcm
}}}
which is correct. Cyberduck will not ask you to remember it again during
the second connection.
You can see that the missing PORT number in Cyberduck 7.0.2 causes this
bug.
--
Ticket URL: <https://trac.cyberduck.io/ticket/10772>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows
More information about the Cyberduck-trac
mailing list