[pkg-gnupg-maint] Bug#1032907: gpg-agent: "agent refused operation" with openpgp smartcard connecting to openssh-server 9.x

Vagrant Cascadian vagrant at debian.org
Mon Mar 13 22:49:17 GMT 2023


Control: merge 1032907 1008573

On 2023-03-13, Vagrant Cascadian wrote:
> I recently switched to a new laptop running bookworm, and started
> noticing issues connecting to machines running openssh server 0.9.x
> (e.g. running bookworm).
...
>   sign_and_send_pubkey: signing failed for ED25519 "cardno:FFFE 87023833" from agent: agent refused operation
...
> I can also try using my older laptop, which was also running bookworm,
> to see if I missed something in the configuration.

That proved helpful, as the older laptop had a configuration option
pointing to the older bug about this same issue:

  https://bugs.debian.org/1008573

That I had apparently commented on...

It showed a workaround with a one-line entry in .ssh/config:

  KexAlgorithms -sntrup761x25519-sha512 at openssh.com

live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20230313/8ac12bc5/attachment-0001.sig>


More information about the pkg-gnupg-maint mailing list