Bug #79006 Cannot use ssh key authentication with new version of OpenSSH private key

• Submitted: 28 Oct 2015 21:02
• Modified: 15 Feb 2018 8:35
• Reporter: Kevin Abel
• Status: Won't fix
• Category: MySQL Workbench
• Severity: S3 (Non-critical)
• Version: 6.3.7
• OS: MacOS (10.11.1)
• CPU Architecture: Any

[28 Oct 2015 21:02] Kevin Abel

Description:
Trying to log in to a an SSH connection with an SSH key that was generated using the "new" OpenSSH private key format fails. The underlying ssh client (paramiko) does not currently support parsing this key format and assumes the key file is unencrypted. This results in the ssh authentication immediately failing without any prompt. 

Testing the connection shows the following alert message:
ERROR Could not establish SSH connection: not a valid RSA private key file.

A workaround is to add the private key to an SSH Agent.

How to repeat:
1. Create an OpenSSH private key using the new format: `ssh-keygen -o -a 16 -f alt_id_rsa`
2. Create a new MySQL connection for an instance over ssh using the newly generated ssh private key
3. Test the connection

Suggested fix:
Work with the upstream client library to get support for this recommended/new key format built into the library.

[29 Oct 2015 15:13] MySQL Verification Team

Thank you for the bug report. Which version are you using and which OS?. Thanks.

[29 Oct 2015 18:38] Kevin Abel

[Added OS and versions]

[29 Oct 2015 18:52] Kevin Abel

[Confirmed this is still an issue in 6.3.5]

[19 Jul 2016 11:44] MySQL Verification Team

Please try version 6.3.7.

[21 Jul 2016 15:23] Kevin Abel

Yes the issue still remains in 6.3.7. This has also been reported to the paramiko upstream project at https://github.com/paramiko/paramiko/issues/602.

[15 Feb 2018 8:35] Mike Lischke

With the next release Workbench will switch to LibSSH, hence there's no need to fix paramiko issues anymore.