Hello,
A very strange problem... on one of my fedora build machine I'm getting the following error when I do a git pull
$ git pull sign_and_send_pubkey: signing failed for RSA "/home/steved/.ssh/id_rsa" from agent: agent refused operation steved@pkgs.fedoraproject.org: Permission denied (publickey). fatal: Could not read from remote repository.
Please make sure you have the correct access rights and the repository exists.
On a different machine, using the same public and private rsa keys... The pull works...
$ git pull Already up to date.
Anybody have clue at as to what is going on??
tia,
steved.
V Tue, Oct 26, 2021 at 01:31:31PM -0400, Steve Dickson napsal(a):
A very strange problem... on one of my fedora build machine I'm getting the following error when I do a git pull
$ git pull sign_and_send_pubkey: signing failed for RSA "/home/steved/.ssh/id_rsa" from agent: agent refused operation
Disabled SHA-1 in system-wide cryptopolicy?
-- Petr
Hi Steve,
You don't specify which version of Fedora each box is using, but if you have one running F32 or earlier and one running F33+ then Petr is probably correct. This is likely a result of SHA-1 being disabled in the DEFAULT SWCP:
https://fedoraproject.org/wiki/Changes/StrongCryptoSettings2 https://pagure.io/fedora-docs/release-notes/issue/470
You can use 'update-crypto-policies --show' to see what your active policy is, presumably it is DEFAULT on both machines.
Cheers,
Chris
On Wed, 27 Oct 2021 at 12:11, Petr Pisar ppisar@redhat.com wrote:
V Tue, Oct 26, 2021 at 01:31:31PM -0400, Steve Dickson napsal(a):
A very strange problem... on one of my fedora build machine I'm getting the following error when I do a git pull
$ git pull sign_and_send_pubkey: signing failed for RSA "/home/steved/.ssh/id_rsa"
from
agent: agent refused operation
Disabled SHA-1 in system-wide cryptopolicy?
-- Petr _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
It turns out all that was needed was a reboot.
I did an update and since the kernel was not updated I didn't do a reboot... that was the mistake... I guess the flux capacitor got update and needed a reboot!
Thanks for the help!!
steved.
On 10/27/21 8:16 AM, Chris Kelley wrote:
Hi Steve,
You don't specify which version of Fedora each box is using, but if you have one running F32 or earlier and one running F33+ then Petr is probably correct. This is likely a result of SHA-1 being disabled in the DEFAULT SWCP:
https://fedoraproject.org/wiki/Changes/StrongCryptoSettings2 https://fedoraproject.org/wiki/Changes/StrongCryptoSettings2 https://pagure.io/fedora-docs/release-notes/issue/470 https://pagure.io/fedora-docs/release-notes/issue/470
You can use 'update-crypto-policies --show' to see what your active policy is, presumably it is DEFAULT on both machines.
Cheers,
Chris
On Wed, 27 Oct 2021 at 12:11, Petr Pisar <ppisar@redhat.com mailto:ppisar@redhat.com> wrote:
V Tue, Oct 26, 2021 at 01:31:31PM -0400, Steve Dickson napsal(a): > A very strange problem... on one of my fedora > build machine I'm getting the following error > when I do a git pull > > $ git pull > sign_and_send_pubkey: signing failed for RSA "/home/steved/.ssh/id_rsa" from > agent: agent refused operation Disabled SHA-1 in system-wide cryptopolicy? -- Petr _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org <mailto:devel@lists.fedoraproject.org> To unsubscribe send an email to devel-leave@lists.fedoraproject.org <mailto:devel-leave@lists.fedoraproject.org> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ <https://docs.fedoraproject.org/en-US/project/code-of-conduct/> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines <https://fedoraproject.org/wiki/Mailing_list_guidelines> List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org <https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure <https://pagure.io/fedora-infrastructure>
devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure