IT28655: DSA SSH AUTHENTICATION ERROR IN LINUX SFTP SERVER USING DSA KEYS

APAR status

• Closed as program error.

Error description

• IBM Sterling B2B Integrator V5.2.6.3_9 generates an invalid
  signature specifically for DSA SSH Keys.
  
  Error observed on the SFTP UNIX Server:
  
  
  fatal: bad sigbloblen 48 != SIGBLOB_LEN dsa ssh authentication
  
  Error in sftpclient.log:
  [2019-02-12 08:40:28.347] DEBUG Session.beginSession(BSR,R,PT)
  getting the keyid info for key name :
  PNN_SI_QA_SFTP_UserId_KEY_SSH_DSS_2048
  [2019-02-12 08:40:28.353] DEBUG Session.beginSession(BSR,R,PT)
  getting the private key part based on key name :
  PNN_SI_QA_SFTP_UserId_KEY_SSH_DSS_2048
  [2019-02-12 08:40:28.353] DEBUG Session.beginSession(BSR,R,PT)
  getting the public key part based on key name :
  PNN_SI_QA_SFTP_UserId_KEY_SSH_DSS_2048
  [2019-02-12 08:40:28.364] ERROR Session.beginSession(BSR,R,PT)
  runnable caught exception. SSH_DISCONNECT_BY_APPLICATION:SFTP
  session channel closed by server.
  [2019-02-12 08:40:28.364] ERROR [1549957228364] EOF received
  from remote side [Unknown cause]
  [2019-02-12 08:40:28.364] ERRORDTL
  [1549957228364]com.maverick.ssh.SshException: EOF received from
  remote side [Unknown cause]
      at com.maverick.ssh2.TransportProtocol.b(Unknown Source)
      at com.maverick.ssh2.TransportProtocol.j(Unknown Source)
      at com.maverick.ssh2.TransportProtocol.nextMessage(Unknown
  Source)
      at
  com.maverick.ssh2.AuthenticationProtocol.readMessage(Unknown
  Source)
      at
  com.maverick.ssh2.Ssh2PublicKeyAuthentication.authenticate(Unkno
  wn Source)
      at
  com.maverick.ssh2.AuthenticationProtocol.authenticate(Unknown
  Source)
      at com.maverick.ssh2.Ssh2Client.authenticate(Unknown Source)
      at
  com.sterlingcommerce.woodstock.services.sftpclient.client.Sessio
  n.authenticateToServer(Session.java:1528)
      at
  com.sterlingcommerce.woodstock.services.sftpclient.client.Sessio
  n.access$1300(Session.java:122)
      at
  com.sterlingcommerce.woodstock.services.sftpclient.client.Sessio
  n$1.run(Session.java:377)
      at
  EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(Unkno
  wn Source)
      at java.lang.Thread.run(Thread.java:798)
  
  The DSA Key is 2048 bits long.
  

Local fix

• STRRTC - 580096
  GB / GB
  Circumvention: None
  

Problem summary

• USERS AFFECTED:
  ALL
  
  PROBLEM DESCRIPTION:
  DSA SSH authentication error in Linux SFTP Server using DSA Keys
  in IBM Sterling B2B Integrator 5.2.6.3 IFix 9.
  
  PLATFORMS AFFECTED:
  ALL
  

Problem conclusion

• RESOLUTION SUMMARY:
  
  A code fix is provided.
  
  
  DELIVERED IN:
  5020603_10
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR B2B INTEGRA

• Fixed component ID

  5725D0600

Applicable component levels