SSH

Explore all libraries in SSH

Explore all SSH open source software, libraries, packages, source code, cloud functions and APIs.

Popular New Releases in SSH

Bastillion-EC2

1.77.0

lobbyboy

Lobbyboy New Version v0.3.0

ssh-web-console

v0.4.0

sftp-fs

2.0.3

ssh-tarpit

Reworked logging

Popular Libraries in SSH

ssh

by gliderlabs go

2132 BSD-3-Clause

Easy SSH servers in Golang

whoami.filippo.io

by FiloSottile go

1814 MIT

A ssh server that knows who you are. $ ssh whoami.filippo.io

Aker

by aker-gateway python

526 NOASSERTION

SSH bastion/jump host/jumpserver

Bastillion-EC2

by bastillion-io java

415 NOASSERTION

A web-based SSH console to execute commands and manage multiple EC2 instances simultaneously running on Amazon Web Services (AWS).

wslbridge

by rprichard c++

351 MIT

Bridge from Cygwin to WSL pty/pipe I/O

systemd-ngrok

by vincenthsu shell

255 Unlicense

Automatically start ngrok by systemd

go-ssh-examples

by Scalingo go

240 BSD-2-Clause

Go examples of SSH servers and clients

lobbyboy

by laixintao python

195

A lobby boy will create a VPS server when you need one, and destroy it after using it.

ssh-web-console

by genshen go

165 MIT

Connect to your linux machine via ssh in your browser.

Explore all libraries in SSH

Trending New libraries in SSH

lobbyboy

by laixintao python

195

A lobby boy will create a VPS server when you need one, and destroy it after using it.

subsystemctl

by sorah rust

134 MIT

Utility to run systemd in WSL2 with a Linux namespace

sshrc

by cdown shell

51 MIT

Bring your .bashrc, .vimrc, etc. with you when you ssh

SSHCenter

by AsenOsen python

Simple SSH users management tool

wsl-systemd

by sr229 shell

27 MIT

A script that spawns a namespace with systemd as PID1, and allows you to spawn interactive sessions or exec commands inside it

realtime-ssh-honeypot

by Monkey-D-Groot javascript

A small realtime ssh honeypot that visualize bot's ssh to my server. See http://khuyenn.com

high-jump

by distrentic typescript

12 MIT

An SSH jump server using ssh2, socket.io and express.

Python-Tutorial-SSH-Bot-Brute-force-Botnet-Series-Part-1

by ncorbuk python

6 MIT

Python Tutorial || SSH Bot Brute-force || Botnet Series || Part 1

Refusion

by xvSync shell

A simple IPTABLE/FIREWALLD Commands which refuse all ports people try to check on your current SSH Server that you will Secure.

Top Authors in SSH

Moniter123

1 Libraries

piroor

1 Libraries

0robustus1

1 Libraries

IemProg

1 Libraries

michaelwisely

1 Libraries

kylemanna

1 Libraries

ojroques

1 Libraries

gaining

1 Libraries

mysteriumnetwork

1 Libraries

Waqar-Arain

1 Libraries

1 Libraries

1 Libraries

1 Libraries

1 Libraries

1 Libraries

1 Libraries

1 Libraries

1 Libraries

1 Libraries

1 Libraries

Trending Kits in SSH

No Trending Kits are available at this moment for SSH

Trending Discussions on SSH

How to fix? "kex_exchange_identification: read: Connection reset by peer"

Unable to negotiate with 40.74.28.9 port 22: no matching host key type found. Their offer: ssh-rsa

The unauthenticated git protocol on port 9418 is no longer supported

Spring Cloud Config Server GitHub SHA-1 error

Eclipse/Git: "You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type."

Connection reset when using jsch to connect to an sftp server hosted in azure

nexus-staging-maven-plugin: maven deploy failed: An API incompatibility was encountered while executing

Having difficulty to get SSH with a Yubikey working with macOS monterey

Git Bash - ssh connection issue

Paramiko authentication fails with "Agreed upon 'rsa-sha2-512' pubkey algorithm" (and "unsupported public key algorithm: rsa-sha2-512" in sshd log)

How to fix? "kex_exchange_identification: read: Connection reset by peer"

Unable to negotiate with 40.74.28.9 port 22: no matching host key type found. Their offer: ssh-rsa

The unauthenticated git protocol on port 9418 is no longer supported

Spring Cloud Config Server GitHub SHA-1 error

Eclipse/Git: "You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type."

Connection reset when using jsch to connect to an sftp server hosted in azure

nexus-staging-maven-plugin: maven deploy failed: An API incompatibility was encountered while executing

Having difficulty to get SSH with a Yubikey working with macOS monterey

Git Bash - ssh connection issue

Paramiko authentication fails with "Agreed upon 'rsa-sha2-512' pubkey algorithm" (and "unsupported public key algorithm: rsa-sha2-512" in sshd log)

QUESTION

How to fix? "kex_exchange_identification: read: Connection reset by peer"

Asked 2022-Mar-30 at 10:07

I want to copy data with scp in GitLab pipeline using PRIVATE_KEY error is :

1kex_exchange_identification: read: Connection reset by peer
2Connection reset by x.x.x.x port 22
3lost connection
4

pipeline log:

1kex_exchange_identification: read: Connection reset by peer
2Connection reset by x.x.x.x port 22
3lost connection
4$ mkdir -p ~/.ssh
5$ echo &quot;$SSH_PRIVATE_KEY&quot; | tr -d '\r' &gt; ~/.ssh/id_rsa
6$ chmod 600 ~/.ssh/id_rsa
7$ eval &quot;$(ssh-agent -s)&quot;
8Agent pid 22
9
10$ ssh-add ~/.ssh/id_rsa
11Identity added: /root/.ssh/id_rsa (/root/.ssh/id_rsa)
12
13$ ssh-keyscan -H $IP &gt;&gt; ~/.ssh/known_hosts
14# x.x.x.x:22 SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10
15# x.x.x.x:22 SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10
16
17$ scp -rv api.yml root@$IP:/home/services/test/
18Executing: program /usr/bin/ssh host x.x.x.x, user root, command scp -v -r -t /home/services/test/
19
20OpenSSH_8.6p1, OpenSSL 1.1.1l  24 Aug 2021
21debug1: Reading configuration data /etc/ssh/ssh_config
22debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
23debug1: Connecting to x.x.x.x [x.x.x.x] port 22.
24debug1: Connection established.
25debug1: identity file /root/.ssh/id_rsa type -1
26debug1: identity file /root/.ssh/id_rsa-cert type -1
27debug1: identity file /root/.ssh/id_dsa type -1
28debug1: identity file /root/.ssh/id_dsa-cert type -1
29debug1: identity file /root/.ssh/id_ecdsa type -1
30debug1: identity file /root/.ssh/id_ecdsa-cert type -1
31debug1: identity file /root/.ssh/id_ecdsa_sk type -1
32debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1
33debug1: identity file /root/.ssh/id_ed25519 type -1
34debug1: identity file /root/.ssh/id_ed25519-cert type -1
35debug1: identity file /root/.ssh/id_ed25519_sk type -1
36debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1
37debug1: identity file /root/.ssh/id_xmss type -1
38debug1: identity file /root/.ssh/id_xmss-cert type -1
39debug1: Local version string SSH-2.0-OpenSSH_8.6
40kex_exchange_identification: read: Connection reset by peer
41Connection reset by x.x.x.x port 22
42lost connection
43

ANSWER

Answered 2021-Sep-30 at 19:40

1kex_exchange_identification: read: Connection reset by peer
2Connection reset by x.x.x.x port 22
3lost connection
4$ mkdir -p ~/.ssh
5$ echo &quot;$SSH_PRIVATE_KEY&quot; | tr -d '\r' &gt; ~/.ssh/id_rsa
6$ chmod 600 ~/.ssh/id_rsa
7$ eval &quot;$(ssh-agent -s)&quot;
8Agent pid 22
9
10$ ssh-add ~/.ssh/id_rsa
11Identity added: /root/.ssh/id_rsa (/root/.ssh/id_rsa)
12
13$ ssh-keyscan -H $IP &gt;&gt; ~/.ssh/known_hosts
14# x.x.x.x:22 SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10
15# x.x.x.x:22 SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10
16
17$ scp -rv api.yml root@$IP:/home/services/test/
18Executing: program /usr/bin/ssh host x.x.x.x, user root, command scp -v -r -t /home/services/test/
19
20OpenSSH_8.6p1, OpenSSL 1.1.1l  24 Aug 2021
21debug1: Reading configuration data /etc/ssh/ssh_config
22debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
23debug1: Connecting to x.x.x.x [x.x.x.x] port 22.
24debug1: Connection established.
25debug1: identity file /root/.ssh/id_rsa type -1
26debug1: identity file /root/.ssh/id_rsa-cert type -1
27debug1: identity file /root/.ssh/id_dsa type -1
28debug1: identity file /root/.ssh/id_dsa-cert type -1
29debug1: identity file /root/.ssh/id_ecdsa type -1
30debug1: identity file /root/.ssh/id_ecdsa-cert type -1
31debug1: identity file /root/.ssh/id_ecdsa_sk type -1
32debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1
33debug1: identity file /root/.ssh/id_ed25519 type -1
34debug1: identity file /root/.ssh/id_ed25519-cert type -1
35debug1: identity file /root/.ssh/id_ed25519_sk type -1
36debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1
37debug1: identity file /root/.ssh/id_xmss type -1
38debug1: identity file /root/.ssh/id_xmss-cert type -1
39debug1: Local version string SSH-2.0-OpenSSH_8.6
40kex_exchange_identification: read: Connection reset by peer
41Connection reset by x.x.x.x port 22
42lost connection
43kex_exchange_identification: read: Connection reset by peer
44

When an ssh client connects to an ssh server, the server starts by sending a version string to the client. The error that you're getting means that the TCP connection from the client to the server was "abnormally closed" while the client was waiting for this data from the server, in other words immediately after the TCP connection was opened.

As a practical matter, it's likely to mean one of two things:

The ssh server process malfunctioned (crashed), or perhaps it detected some serious issue causing it to exit immediately.
Some firewall is interfering with connections to the ssh server.

It looks like the ssh-keyscan program was able to connect to the server and get a version string without an error. So the ssh server process is apparently able to talk to a client without crashing.

You should talk the administrators of this x.x.x.x host and the network that it's attached to, to see if they can identify the problem from their end. It's possible that something--a firewall, or the ssh server process itself--is seeing the multiple connections, first from the ssh-keyscan process, then by the scp program, as an intrusion attempt. And it's blocking the second connection attempt.

Source https://stackoverflow.com/questions/69394001

QUESTION

Unable to negotiate with 40.74.28.9 port 22: no matching host key type found. Their offer: ssh-rsa

Asked 2022-Mar-28 at 15:54

After start of using NixOS as a new package management system, I get the following error when using git within Azure DevOps repositories and rsa ssh key:

1jaroslavbezdek@mac&gt; git pull
2Unable to negotiate with 40.74.28.9 port 22: no matching host key type found. Their offer: ssh-rsa
3fatal: Could not read from remote repository.
4
5Please make sure you have the correct access rights
6and the repository exists.
7

What can I do with that, please?

ANSWER

Answered 2021-Nov-12 at 12:44

According to this post, you can add ssh.dev.azure.com host config to your ~/.ssh/config file:

Final ~/.ssh/config that worked for me:

1jaroslavbezdek@mac&gt; git pull
2Unable to negotiate with 40.74.28.9 port 22: no matching host key type found. Their offer: ssh-rsa
3fatal: Could not read from remote repository.
4
5Please make sure you have the correct access rights
6and the repository exists.
7Host ssh.dev.azure.com
8    HostName ssh.dev.azure.com
9    User git
10    IdentityFile ~/.ssh/id_rsa
11    IdentitiesOnly yes
12    PubkeyAcceptedAlgorithms +ssh-rsa
13    HostkeyAlgorithms +ssh-rsa
14

Source https://stackoverflow.com/questions/69875520

QUESTION

The unauthenticated git protocol on port 9418 is no longer supported

Asked 2022-Mar-27 at 13:23

I have been using github actions for quite sometime but today my deployments started failing. Below is the error from github action logs

1Command: git
2Arguments: ls-remote --tags --heads git://github.com/adobe-webplatform/eve.git
3Directory: /home/runner/work/stackstream-fe/stackstream-fe
4Output:
5fatal: remote error: 
6  The unauthenticated git protocol on port 9418 is no longer supported.
7

Upon investigation, it appears that below section in my yml file is causing the issue.

1Command: git
2Arguments: ls-remote --tags --heads git://github.com/adobe-webplatform/eve.git
3Directory: /home/runner/work/stackstream-fe/stackstream-fe
4Output:
5fatal: remote error: 
6  The unauthenticated git protocol on port 9418 is no longer supported.
7    - name: Installing modules
8      run: yarn install
9

I have looked into this change log but can't seem to comprehend the issue.

Additional Details: Server: EC2 Instance Github actions steps:

1Command: git
2Arguments: ls-remote --tags --heads git://github.com/adobe-webplatform/eve.git
3Directory: /home/runner/work/stackstream-fe/stackstream-fe
4Output:
5fatal: remote error: 
6  The unauthenticated git protocol on port 9418 is no longer supported.
7    - name: Installing modules
8      run: yarn install
9  steps:
10  - name: Checkout
11    uses: actions/checkout@v2
12
13  - id: vars
14    run: |
15      if [ '${{ github.ref }}' == 'refs/heads/master' ]; then echo &quot;::set-output name=environment::prod_stackstream&quot; ; echo &quot;::set-output name=api-url::api&quot; ; elif [ '${{ github.ref }}' == 'refs/heads/staging' ]; then echo &quot;::set-output name=environment::staging_stackstream&quot;  ; echo &quot;::set-output name=api-url::stagingapi&quot; ; else echo &quot;::set-output name=environment::dev_stackstream&quot; ; echo &quot;::set-output name=api-url::devapi&quot; ; fi
16
17  - uses: pCYSl5EDgo/cat@master
18    id: slack
19    with:
20      path: .github/workflows/slack.txt
21
22  - name: Slack Start Notification
23    uses: 8398a7/action-slack@v3
24    env:
25      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
26      ENVIRONMENT: '`${{ steps.vars.outputs.environment }}`'
27      COLOR: good
28      STATUS: '`Started`'
29    with:
30      status: custom
31      fields: workflow,job,commit,repo,ref,author,took
32      custom_payload: |
33        ${{ steps.slack.outputs.text }}
34
35  - name: Installing modules
36    env:
37      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
38    run: yarn install
39
40  - name: Create Frontend Build
41    env:
42      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
43    run: yarn build
44
45  - name: Deploy to Frontend Server DEV
46    if: ${{ contains(github.ref, 'dev') }}
47    uses: easingthemes/ssh-deploy@v2.1.5
48    env:
49      SSH_PRIVATE_KEY: ${{ secrets.DEV_KEY }}
50      ARGS: '-rltgoDzvO --delete'
51      SOURCE: 'deploy/'
52      REMOTE_HOST: ${{ secrets.DEV_HOST }}
53      REMOTE_USER: plyfolio-dev
54      TARGET: '/home/plyfolio-dev/${{ steps.vars.outputs.environment }}/fe/deploy'
55

package.json file

1Command: git
2Arguments: ls-remote --tags --heads git://github.com/adobe-webplatform/eve.git
3Directory: /home/runner/work/stackstream-fe/stackstream-fe
4Output:
5fatal: remote error: 
6  The unauthenticated git protocol on port 9418 is no longer supported.
7    - name: Installing modules
8      run: yarn install
9  steps:
10  - name: Checkout
11    uses: actions/checkout@v2
12
13  - id: vars
14    run: |
15      if [ '${{ github.ref }}' == 'refs/heads/master' ]; then echo &quot;::set-output name=environment::prod_stackstream&quot; ; echo &quot;::set-output name=api-url::api&quot; ; elif [ '${{ github.ref }}' == 'refs/heads/staging' ]; then echo &quot;::set-output name=environment::staging_stackstream&quot;  ; echo &quot;::set-output name=api-url::stagingapi&quot; ; else echo &quot;::set-output name=environment::dev_stackstream&quot; ; echo &quot;::set-output name=api-url::devapi&quot; ; fi
16
17  - uses: pCYSl5EDgo/cat@master
18    id: slack
19    with:
20      path: .github/workflows/slack.txt
21
22  - name: Slack Start Notification
23    uses: 8398a7/action-slack@v3
24    env:
25      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
26      ENVIRONMENT: '`${{ steps.vars.outputs.environment }}`'
27      COLOR: good
28      STATUS: '`Started`'
29    with:
30      status: custom
31      fields: workflow,job,commit,repo,ref,author,took
32      custom_payload: |
33        ${{ steps.slack.outputs.text }}
34
35  - name: Installing modules
36    env:
37      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
38    run: yarn install
39
40  - name: Create Frontend Build
41    env:
42      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
43    run: yarn build
44
45  - name: Deploy to Frontend Server DEV
46    if: ${{ contains(github.ref, 'dev') }}
47    uses: easingthemes/ssh-deploy@v2.1.5
48    env:
49      SSH_PRIVATE_KEY: ${{ secrets.DEV_KEY }}
50      ARGS: '-rltgoDzvO --delete'
51      SOURCE: 'deploy/'
52      REMOTE_HOST: ${{ secrets.DEV_HOST }}
53      REMOTE_USER: plyfolio-dev
54      TARGET: '/home/plyfolio-dev/${{ steps.vars.outputs.environment }}/fe/deploy'
55   {
56  &quot;name&quot;: &quot;stackstream-fe&quot;,
57  &quot;version&quot;: &quot;1.0.0&quot;,
58  &quot;authors&quot;: [
59    &quot;fayyaznofal@gmail.com&quot;
60  ],
61  &quot;private&quot;: true,
62  &quot;dependencies&quot;: {
63    &quot;@fortawesome/fontawesome-svg-core&quot;: &quot;^1.2.34&quot;,
64    &quot;@fortawesome/free-solid-svg-icons&quot;: &quot;^5.15.2&quot;,
65    &quot;@fortawesome/react-fontawesome&quot;: &quot;^0.1.14&quot;,
66    &quot;@fullcalendar/bootstrap&quot;: &quot;^5.5.0&quot;,
67    &quot;@fullcalendar/core&quot;: &quot;^5.5.0&quot;,
68    &quot;@fullcalendar/daygrid&quot;: &quot;^5.5.0&quot;,
69    &quot;@fullcalendar/interaction&quot;: &quot;^5.5.0&quot;,
70    &quot;@fullcalendar/react&quot;: &quot;^5.5.0&quot;,
71    &quot;@lourenci/react-kanban&quot;: &quot;^2.1.0&quot;,
72    &quot;@redux-saga/simple-saga-monitor&quot;: &quot;^1.1.2&quot;,
73    &quot;@testing-library/jest-dom&quot;: &quot;^5.11.9&quot;,
74    &quot;@testing-library/react&quot;: &quot;^11.2.3&quot;,
75    &quot;@testing-library/user-event&quot;: &quot;^12.6.0&quot;,
76    &quot;@toast-ui/react-chart&quot;: &quot;^1.0.2&quot;,
77    &quot;@types/jest&quot;: &quot;^26.0.14&quot;,
78    &quot;@types/node&quot;: &quot;^14.10.3&quot;,
79    &quot;@types/react&quot;: &quot;^16.9.49&quot;,
80    &quot;@types/react-dom&quot;: &quot;^16.9.8&quot;,
81    &quot;@vtaits/react-color-picker&quot;: &quot;^0.1.1&quot;,
82    &quot;apexcharts&quot;: &quot;^3.23.1&quot;,
83    &quot;availity-reactstrap-validation&quot;: &quot;^2.7.0&quot;,
84    &quot;axios&quot;: &quot;^0.21.1&quot;,
85    &quot;axios-mock-adapter&quot;: &quot;^1.19.0&quot;,
86    &quot;axios-progress-bar&quot;: &quot;^1.2.0&quot;,
87    &quot;bootstrap&quot;: &quot;^5.0.0-beta2&quot;,
88    &quot;chart.js&quot;: &quot;^2.9.4&quot;,
89    &quot;chartist&quot;: &quot;^0.11.4&quot;,
90    &quot;classnames&quot;: &quot;^2.2.6&quot;,
91    &quot;components&quot;: &quot;^0.1.0&quot;,
92    &quot;dotenv&quot;: &quot;^8.2.0&quot;,
93    &quot;draft-js&quot;: &quot;^0.11.7&quot;,
94    &quot;echarts&quot;: &quot;^4.9.0&quot;,
95    &quot;echarts-for-react&quot;: &quot;^2.0.16&quot;,
96    &quot;firebase&quot;: &quot;^8.2.3&quot;,
97    &quot;google-maps-react&quot;: &quot;^2.0.6&quot;,
98    &quot;history&quot;: &quot;^4.10.1&quot;,
99    &quot;i&quot;: &quot;^0.3.6&quot;,
100    &quot;i18next&quot;: &quot;^19.8.4&quot;,
101    &quot;i18next-browser-languagedetector&quot;: &quot;^6.0.1&quot;,
102    &quot;jsonwebtoken&quot;: &quot;^8.5.1&quot;,
103    &quot;leaflet&quot;: &quot;^1.7.1&quot;,
104    &quot;lodash&quot;: &quot;^4.17.21&quot;,
105    &quot;lodash.clonedeep&quot;: &quot;^4.5.0&quot;,
106    &quot;lodash.get&quot;: &quot;^4.4.2&quot;,
107    &quot;metismenujs&quot;: &quot;^1.2.1&quot;,
108    &quot;mkdirp&quot;: &quot;^1.0.4&quot;,
109    &quot;moment&quot;: &quot;2.29.1&quot;,
110    &quot;moment-timezone&quot;: &quot;^0.5.32&quot;,
111    &quot;nouislider-react&quot;: &quot;^3.3.9&quot;,
112    &quot;npm&quot;: &quot;^7.6.3&quot;,
113    &quot;prop-types&quot;: &quot;^15.7.2&quot;,
114    &quot;query-string&quot;: &quot;^6.14.0&quot;,
115    &quot;react&quot;: &quot;^16.13.1&quot;,
116    &quot;react-apexcharts&quot;: &quot;^1.3.7&quot;,
117    &quot;react-auth-code-input&quot;: &quot;^1.0.0&quot;,
118    &quot;react-avatar&quot;: &quot;^3.10.0&quot;,
119    &quot;react-bootstrap&quot;: &quot;^1.5.0&quot;,
120    &quot;react-bootstrap-editable&quot;: &quot;^0.8.2&quot;,
121    &quot;react-bootstrap-sweetalert&quot;: &quot;^5.2.0&quot;,
122    &quot;react-bootstrap-table-next&quot;: &quot;^4.0.3&quot;,
123    &quot;react-bootstrap-table2-editor&quot;: &quot;^1.4.0&quot;,
124    &quot;react-bootstrap-table2-paginator&quot;: &quot;^2.1.2&quot;,
125    &quot;react-bootstrap-table2-toolkit&quot;: &quot;^2.1.3&quot;,
126    &quot;react-chartist&quot;: &quot;^0.14.3&quot;,
127    &quot;react-chartjs-2&quot;: &quot;^2.11.1&quot;,
128    &quot;react-color&quot;: &quot;^2.19.3&quot;,
129    &quot;react-confirm-alert&quot;: &quot;^2.7.0&quot;,
130    &quot;react-content-loader&quot;: &quot;^6.0.1&quot;,
131    &quot;react-countdown&quot;: &quot;^2.3.1&quot;,
132    &quot;react-countup&quot;: &quot;^4.3.3&quot;,
133    &quot;react-cropper&quot;: &quot;^2.1.4&quot;,
134    &quot;react-data-table-component&quot;: &quot;^6.11.8&quot;,
135    &quot;react-date-picker&quot;: &quot;^8.0.6&quot;,
136    &quot;react-datepicker&quot;: &quot;^3.4.1&quot;,
137    &quot;react-dom&quot;: &quot;^16.13.1&quot;,
138    &quot;react-draft-wysiwyg&quot;: &quot;^1.14.5&quot;,
139    &quot;react-drag-listview&quot;: &quot;^0.1.8&quot;,
140    &quot;react-drawer&quot;: &quot;^1.3.4&quot;,
141    &quot;react-dropzone&quot;: &quot;^11.2.4&quot;,
142    &quot;react-dual-listbox&quot;: &quot;^2.0.0&quot;,
143    &quot;react-facebook-login&quot;: &quot;^4.1.1&quot;,
144    &quot;react-flatpickr&quot;: &quot;^3.10.6&quot;,
145    &quot;react-google-login&quot;: &quot;^5.2.2&quot;,
146    &quot;react-hook-form&quot;: &quot;^7.15.2&quot;,
147    &quot;react-i18next&quot;: &quot;^11.8.5&quot;,
148    &quot;react-icons&quot;: &quot;^4.2.0&quot;,
149    &quot;react-image-lightbox&quot;: &quot;^5.1.1&quot;,
150    &quot;react-input-mask&quot;: &quot;^2.0.4&quot;,
151    &quot;react-jvectormap&quot;: &quot;^0.0.16&quot;,
152    &quot;react-leaflet&quot;: &quot;^3.0.5&quot;,
153    &quot;react-meta-tags&quot;: &quot;^1.0.1&quot;,
154    &quot;react-modal-video&quot;: &quot;^1.2.6&quot;,
155    &quot;react-notifications&quot;: &quot;^1.7.2&quot;,
156    &quot;react-number-format&quot;: &quot;^4.7.3&quot;,
157    &quot;react-perfect-scrollbar&quot;: &quot;^1.5.8&quot;,
158    &quot;react-rangeslider&quot;: &quot;^2.2.0&quot;,
159    &quot;react-rating&quot;: &quot;^2.0.5&quot;,
160    &quot;react-rating-tooltip&quot;: &quot;^1.1.6&quot;,
161    &quot;react-redux&quot;: &quot;^7.2.1&quot;,
162    &quot;react-responsive-carousel&quot;: &quot;^3.2.11&quot;,
163    &quot;react-router-dom&quot;: &quot;^5.2.0&quot;,
164    &quot;react-script&quot;: &quot;^2.0.5&quot;,
165    &quot;react-scripts&quot;: &quot;3.4.3&quot;,
166    &quot;react-select&quot;: &quot;^4.3.1&quot;,
167    &quot;react-sparklines&quot;: &quot;^1.7.0&quot;,
168    &quot;react-star-ratings&quot;: &quot;^2.3.0&quot;,
169    &quot;react-super-responsive-table&quot;: &quot;^5.2.0&quot;,
170    &quot;react-switch&quot;: &quot;^6.0.0&quot;,
171    &quot;react-table&quot;: &quot;^7.6.3&quot;,
172    &quot;react-toastify&quot;: &quot;^7.0.3&quot;,
173    &quot;react-toastr&quot;: &quot;^3.0.0&quot;,
174    &quot;react-twitter-auth&quot;: &quot;0.0.13&quot;,
175    &quot;reactstrap&quot;: &quot;^8.8.1&quot;,
176    &quot;recharts&quot;: &quot;^2.0.8&quot;,
177    &quot;redux&quot;: &quot;^4.0.5&quot;,
178    &quot;redux-saga&quot;: &quot;^1.1.3&quot;,
179    &quot;reselect&quot;: &quot;^4.0.0&quot;,
180    &quot;sass&quot;: &quot;^1.37.5&quot;,
181    &quot;simplebar-react&quot;: &quot;^2.3.0&quot;,
182    &quot;styled&quot;: &quot;^1.0.0&quot;,
183    &quot;styled-components&quot;: &quot;^5.2.1&quot;,
184    &quot;toastr&quot;: &quot;^2.1.4&quot;,
185    &quot;typescript&quot;: &quot;^4.0.2&quot;,
186    &quot;universal-cookie&quot;: &quot;^4.0.4&quot;
187  },
188  &quot;devDependencies&quot;: {
189    &quot;@typescript-eslint/eslint-plugin&quot;: &quot;^2.27.0&quot;,
190    &quot;@typescript-eslint/parser&quot;: &quot;^2.27.0&quot;,
191    &quot;@typescript-eslint/typescript-estree&quot;: &quot;^4.15.2&quot;,
192    &quot;eslint-config-prettier&quot;: &quot;^6.10.1&quot;,
193    &quot;eslint-plugin-prettier&quot;: &quot;^3.1.2&quot;,
194    &quot;husky&quot;: &quot;^4.2.5&quot;,
195    &quot;lint-staged&quot;: &quot;^10.1.3&quot;,
196    &quot;prettier&quot;: &quot;^1.19.1&quot;,
197    &quot;react-test-renderer&quot;: &quot;^16.13.1&quot;,
198    &quot;redux-devtools-extension&quot;: &quot;^2.13.8&quot;,
199    &quot;redux-mock-store&quot;: &quot;^1.5.4&quot;
200  },
201  &quot;scripts&quot;: {
202    &quot;start&quot;: &quot;react-scripts start&quot;,
203    &quot;build&quot;: &quot;react-scripts build &amp;&amp; mv build ./deploy/build&quot;,
204    &quot;build-local&quot;: &quot;react-scripts build&quot;,
205    &quot;test&quot;: &quot;react-scripts test&quot;,
206    &quot;eject&quot;: &quot;react-scripts eject&quot;
207  },
208  &quot;eslintConfig&quot;: {
209    &quot;extends&quot;: &quot;react-app&quot;
210  },
211  &quot;husky&quot;: {
212    &quot;hooks&quot;: {
213      &quot;pre-commit&quot;: &quot;lint-staged&quot;
214    }
215  },
216  &quot;lint-staged&quot;: {
217    &quot;*.{js,ts,tsx}&quot;: [
218      &quot;eslint --fix&quot;
219    ]
220  },
221  &quot;browserslist&quot;: {
222    &quot;production&quot;: [
223      &quot;&gt;0.2%&quot;,
224      &quot;not dead&quot;,
225      &quot;not op_mini all&quot;
226    ],
227    &quot;development&quot;: [
228      &quot;last 1 chrome version&quot;,
229      &quot;last 1 firefox version&quot;,
230      &quot;last 1 safari version&quot;
231    ]
232  }
233}
234

package-lock.json

ANSWER

Answered 2022-Mar-16 at 07:01

First, this error message is indeed expected on Jan. 11th, 2022.
See "Improving Git protocol security on GitHub".

January 11, 2022 Final brownout.

This is the full brownout period where we’ll temporarily stop accepting the deprecated key and signature types, ciphers, and MACs, and the unencrypted Git protocol.
This will help clients discover any lingering use of older keys or old URLs.

Second, check your package.json dependencies for any git:// URL, as in this example, fixed in this PR.

As noted by Jörg W Mittag:

There was a 4-month warning.
The entire Internet has been moving away from unauthenticated, unencrypted protocols for a decade, it's not like this is a huge surprise.

Personally, I consider it less an "issue" and more "detecting unmaintained dependencies".

Plus, this is still only the brownout period, so the protocol will only be disabled for a short period of time, allowing developers to discover the problem.

The permanent shutdown is not until March 15th.

For GitHub Actions:

As in actions/checkout issue 14, you can add as a first step:

1Command: git
2Arguments: ls-remote --tags --heads git://github.com/adobe-webplatform/eve.git
3Directory: /home/runner/work/stackstream-fe/stackstream-fe
4Output:
5fatal: remote error: 
6  The unauthenticated git protocol on port 9418 is no longer supported.
7    - name: Installing modules
8      run: yarn install
9  steps:
10  - name: Checkout
11    uses: actions/checkout@v2
12
13  - id: vars
14    run: |
15      if [ '${{ github.ref }}' == 'refs/heads/master' ]; then echo &quot;::set-output name=environment::prod_stackstream&quot; ; echo &quot;::set-output name=api-url::api&quot; ; elif [ '${{ github.ref }}' == 'refs/heads/staging' ]; then echo &quot;::set-output name=environment::staging_stackstream&quot;  ; echo &quot;::set-output name=api-url::stagingapi&quot; ; else echo &quot;::set-output name=environment::dev_stackstream&quot; ; echo &quot;::set-output name=api-url::devapi&quot; ; fi
16
17  - uses: pCYSl5EDgo/cat@master
18    id: slack
19    with:
20      path: .github/workflows/slack.txt
21
22  - name: Slack Start Notification
23    uses: 8398a7/action-slack@v3
24    env:
25      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
26      ENVIRONMENT: '`${{ steps.vars.outputs.environment }}`'
27      COLOR: good
28      STATUS: '`Started`'
29    with:
30      status: custom
31      fields: workflow,job,commit,repo,ref,author,took
32      custom_payload: |
33        ${{ steps.slack.outputs.text }}
34
35  - name: Installing modules
36    env:
37      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
38    run: yarn install
39
40  - name: Create Frontend Build
41    env:
42      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
43    run: yarn build
44
45  - name: Deploy to Frontend Server DEV
46    if: ${{ contains(github.ref, 'dev') }}
47    uses: easingthemes/ssh-deploy@v2.1.5
48    env:
49      SSH_PRIVATE_KEY: ${{ secrets.DEV_KEY }}
50      ARGS: '-rltgoDzvO --delete'
51      SOURCE: 'deploy/'
52      REMOTE_HOST: ${{ secrets.DEV_HOST }}
53      REMOTE_USER: plyfolio-dev
54      TARGET: '/home/plyfolio-dev/${{ steps.vars.outputs.environment }}/fe/deploy'
55   {
56  &quot;name&quot;: &quot;stackstream-fe&quot;,
57  &quot;version&quot;: &quot;1.0.0&quot;,
58  &quot;authors&quot;: [
59    &quot;fayyaznofal@gmail.com&quot;
60  ],
61  &quot;private&quot;: true,
62  &quot;dependencies&quot;: {
63    &quot;@fortawesome/fontawesome-svg-core&quot;: &quot;^1.2.34&quot;,
64    &quot;@fortawesome/free-solid-svg-icons&quot;: &quot;^5.15.2&quot;,
65    &quot;@fortawesome/react-fontawesome&quot;: &quot;^0.1.14&quot;,
66    &quot;@fullcalendar/bootstrap&quot;: &quot;^5.5.0&quot;,
67    &quot;@fullcalendar/core&quot;: &quot;^5.5.0&quot;,
68    &quot;@fullcalendar/daygrid&quot;: &quot;^5.5.0&quot;,
69    &quot;@fullcalendar/interaction&quot;: &quot;^5.5.0&quot;,
70    &quot;@fullcalendar/react&quot;: &quot;^5.5.0&quot;,
71    &quot;@lourenci/react-kanban&quot;: &quot;^2.1.0&quot;,
72    &quot;@redux-saga/simple-saga-monitor&quot;: &quot;^1.1.2&quot;,
73    &quot;@testing-library/jest-dom&quot;: &quot;^5.11.9&quot;,
74    &quot;@testing-library/react&quot;: &quot;^11.2.3&quot;,
75    &quot;@testing-library/user-event&quot;: &quot;^12.6.0&quot;,
76    &quot;@toast-ui/react-chart&quot;: &quot;^1.0.2&quot;,
77    &quot;@types/jest&quot;: &quot;^26.0.14&quot;,
78    &quot;@types/node&quot;: &quot;^14.10.3&quot;,
79    &quot;@types/react&quot;: &quot;^16.9.49&quot;,
80    &quot;@types/react-dom&quot;: &quot;^16.9.8&quot;,
81    &quot;@vtaits/react-color-picker&quot;: &quot;^0.1.1&quot;,
82    &quot;apexcharts&quot;: &quot;^3.23.1&quot;,
83    &quot;availity-reactstrap-validation&quot;: &quot;^2.7.0&quot;,
84    &quot;axios&quot;: &quot;^0.21.1&quot;,
85    &quot;axios-mock-adapter&quot;: &quot;^1.19.0&quot;,
86    &quot;axios-progress-bar&quot;: &quot;^1.2.0&quot;,
87    &quot;bootstrap&quot;: &quot;^5.0.0-beta2&quot;,
88    &quot;chart.js&quot;: &quot;^2.9.4&quot;,
89    &quot;chartist&quot;: &quot;^0.11.4&quot;,
90    &quot;classnames&quot;: &quot;^2.2.6&quot;,
91    &quot;components&quot;: &quot;^0.1.0&quot;,
92    &quot;dotenv&quot;: &quot;^8.2.0&quot;,
93    &quot;draft-js&quot;: &quot;^0.11.7&quot;,
94    &quot;echarts&quot;: &quot;^4.9.0&quot;,
95    &quot;echarts-for-react&quot;: &quot;^2.0.16&quot;,
96    &quot;firebase&quot;: &quot;^8.2.3&quot;,
97    &quot;google-maps-react&quot;: &quot;^2.0.6&quot;,
98    &quot;history&quot;: &quot;^4.10.1&quot;,
99    &quot;i&quot;: &quot;^0.3.6&quot;,
100    &quot;i18next&quot;: &quot;^19.8.4&quot;,
101    &quot;i18next-browser-languagedetector&quot;: &quot;^6.0.1&quot;,
102    &quot;jsonwebtoken&quot;: &quot;^8.5.1&quot;,
103    &quot;leaflet&quot;: &quot;^1.7.1&quot;,
104    &quot;lodash&quot;: &quot;^4.17.21&quot;,
105    &quot;lodash.clonedeep&quot;: &quot;^4.5.0&quot;,
106    &quot;lodash.get&quot;: &quot;^4.4.2&quot;,
107    &quot;metismenujs&quot;: &quot;^1.2.1&quot;,
108    &quot;mkdirp&quot;: &quot;^1.0.4&quot;,
109    &quot;moment&quot;: &quot;2.29.1&quot;,
110    &quot;moment-timezone&quot;: &quot;^0.5.32&quot;,
111    &quot;nouislider-react&quot;: &quot;^3.3.9&quot;,
112    &quot;npm&quot;: &quot;^7.6.3&quot;,
113    &quot;prop-types&quot;: &quot;^15.7.2&quot;,
114    &quot;query-string&quot;: &quot;^6.14.0&quot;,
115    &quot;react&quot;: &quot;^16.13.1&quot;,
116    &quot;react-apexcharts&quot;: &quot;^1.3.7&quot;,
117    &quot;react-auth-code-input&quot;: &quot;^1.0.0&quot;,
118    &quot;react-avatar&quot;: &quot;^3.10.0&quot;,
119    &quot;react-bootstrap&quot;: &quot;^1.5.0&quot;,
120    &quot;react-bootstrap-editable&quot;: &quot;^0.8.2&quot;,
121    &quot;react-bootstrap-sweetalert&quot;: &quot;^5.2.0&quot;,
122    &quot;react-bootstrap-table-next&quot;: &quot;^4.0.3&quot;,
123    &quot;react-bootstrap-table2-editor&quot;: &quot;^1.4.0&quot;,
124    &quot;react-bootstrap-table2-paginator&quot;: &quot;^2.1.2&quot;,
125    &quot;react-bootstrap-table2-toolkit&quot;: &quot;^2.1.3&quot;,
126    &quot;react-chartist&quot;: &quot;^0.14.3&quot;,
127    &quot;react-chartjs-2&quot;: &quot;^2.11.1&quot;,
128    &quot;react-color&quot;: &quot;^2.19.3&quot;,
129    &quot;react-confirm-alert&quot;: &quot;^2.7.0&quot;,
130    &quot;react-content-loader&quot;: &quot;^6.0.1&quot;,
131    &quot;react-countdown&quot;: &quot;^2.3.1&quot;,
132    &quot;react-countup&quot;: &quot;^4.3.3&quot;,
133    &quot;react-cropper&quot;: &quot;^2.1.4&quot;,
134    &quot;react-data-table-component&quot;: &quot;^6.11.8&quot;,
135    &quot;react-date-picker&quot;: &quot;^8.0.6&quot;,
136    &quot;react-datepicker&quot;: &quot;^3.4.1&quot;,
137    &quot;react-dom&quot;: &quot;^16.13.1&quot;,
138    &quot;react-draft-wysiwyg&quot;: &quot;^1.14.5&quot;,
139    &quot;react-drag-listview&quot;: &quot;^0.1.8&quot;,
140    &quot;react-drawer&quot;: &quot;^1.3.4&quot;,
141    &quot;react-dropzone&quot;: &quot;^11.2.4&quot;,
142    &quot;react-dual-listbox&quot;: &quot;^2.0.0&quot;,
143    &quot;react-facebook-login&quot;: &quot;^4.1.1&quot;,
144    &quot;react-flatpickr&quot;: &quot;^3.10.6&quot;,
145    &quot;react-google-login&quot;: &quot;^5.2.2&quot;,
146    &quot;react-hook-form&quot;: &quot;^7.15.2&quot;,
147    &quot;react-i18next&quot;: &quot;^11.8.5&quot;,
148    &quot;react-icons&quot;: &quot;^4.2.0&quot;,
149    &quot;react-image-lightbox&quot;: &quot;^5.1.1&quot;,
150    &quot;react-input-mask&quot;: &quot;^2.0.4&quot;,
151    &quot;react-jvectormap&quot;: &quot;^0.0.16&quot;,
152    &quot;react-leaflet&quot;: &quot;^3.0.5&quot;,
153    &quot;react-meta-tags&quot;: &quot;^1.0.1&quot;,
154    &quot;react-modal-video&quot;: &quot;^1.2.6&quot;,
155    &quot;react-notifications&quot;: &quot;^1.7.2&quot;,
156    &quot;react-number-format&quot;: &quot;^4.7.3&quot;,
157    &quot;react-perfect-scrollbar&quot;: &quot;^1.5.8&quot;,
158    &quot;react-rangeslider&quot;: &quot;^2.2.0&quot;,
159    &quot;react-rating&quot;: &quot;^2.0.5&quot;,
160    &quot;react-rating-tooltip&quot;: &quot;^1.1.6&quot;,
161    &quot;react-redux&quot;: &quot;^7.2.1&quot;,
162    &quot;react-responsive-carousel&quot;: &quot;^3.2.11&quot;,
163    &quot;react-router-dom&quot;: &quot;^5.2.0&quot;,
164    &quot;react-script&quot;: &quot;^2.0.5&quot;,
165    &quot;react-scripts&quot;: &quot;3.4.3&quot;,
166    &quot;react-select&quot;: &quot;^4.3.1&quot;,
167    &quot;react-sparklines&quot;: &quot;^1.7.0&quot;,
168    &quot;react-star-ratings&quot;: &quot;^2.3.0&quot;,
169    &quot;react-super-responsive-table&quot;: &quot;^5.2.0&quot;,
170    &quot;react-switch&quot;: &quot;^6.0.0&quot;,
171    &quot;react-table&quot;: &quot;^7.6.3&quot;,
172    &quot;react-toastify&quot;: &quot;^7.0.3&quot;,
173    &quot;react-toastr&quot;: &quot;^3.0.0&quot;,
174    &quot;react-twitter-auth&quot;: &quot;0.0.13&quot;,
175    &quot;reactstrap&quot;: &quot;^8.8.1&quot;,
176    &quot;recharts&quot;: &quot;^2.0.8&quot;,
177    &quot;redux&quot;: &quot;^4.0.5&quot;,
178    &quot;redux-saga&quot;: &quot;^1.1.3&quot;,
179    &quot;reselect&quot;: &quot;^4.0.0&quot;,
180    &quot;sass&quot;: &quot;^1.37.5&quot;,
181    &quot;simplebar-react&quot;: &quot;^2.3.0&quot;,
182    &quot;styled&quot;: &quot;^1.0.0&quot;,
183    &quot;styled-components&quot;: &quot;^5.2.1&quot;,
184    &quot;toastr&quot;: &quot;^2.1.4&quot;,
185    &quot;typescript&quot;: &quot;^4.0.2&quot;,
186    &quot;universal-cookie&quot;: &quot;^4.0.4&quot;
187  },
188  &quot;devDependencies&quot;: {
189    &quot;@typescript-eslint/eslint-plugin&quot;: &quot;^2.27.0&quot;,
190    &quot;@typescript-eslint/parser&quot;: &quot;^2.27.0&quot;,
191    &quot;@typescript-eslint/typescript-estree&quot;: &quot;^4.15.2&quot;,
192    &quot;eslint-config-prettier&quot;: &quot;^6.10.1&quot;,
193    &quot;eslint-plugin-prettier&quot;: &quot;^3.1.2&quot;,
194    &quot;husky&quot;: &quot;^4.2.5&quot;,
195    &quot;lint-staged&quot;: &quot;^10.1.3&quot;,
196    &quot;prettier&quot;: &quot;^1.19.1&quot;,
197    &quot;react-test-renderer&quot;: &quot;^16.13.1&quot;,
198    &quot;redux-devtools-extension&quot;: &quot;^2.13.8&quot;,
199    &quot;redux-mock-store&quot;: &quot;^1.5.4&quot;
200  },
201  &quot;scripts&quot;: {
202    &quot;start&quot;: &quot;react-scripts start&quot;,
203    &quot;build&quot;: &quot;react-scripts build &amp;&amp; mv build ./deploy/build&quot;,
204    &quot;build-local&quot;: &quot;react-scripts build&quot;,
205    &quot;test&quot;: &quot;react-scripts test&quot;,
206    &quot;eject&quot;: &quot;react-scripts eject&quot;
207  },
208  &quot;eslintConfig&quot;: {
209    &quot;extends&quot;: &quot;react-app&quot;
210  },
211  &quot;husky&quot;: {
212    &quot;hooks&quot;: {
213      &quot;pre-commit&quot;: &quot;lint-staged&quot;
214    }
215  },
216  &quot;lint-staged&quot;: {
217    &quot;*.{js,ts,tsx}&quot;: [
218      &quot;eslint --fix&quot;
219    ]
220  },
221  &quot;browserslist&quot;: {
222    &quot;production&quot;: [
223      &quot;&gt;0.2%&quot;,
224      &quot;not dead&quot;,
225      &quot;not op_mini all&quot;
226    ],
227    &quot;development&quot;: [
228      &quot;last 1 chrome version&quot;,
229      &quot;last 1 firefox version&quot;,
230      &quot;last 1 safari version&quot;
231    ]
232  }
233}
234    - name: Fix up git URLs
235      run: echo -e '[url &quot;https://github.com/&quot;]\n  insteadOf = &quot;git://github.com/&quot;' &gt;&gt; ~/.gitconfig
236

That will change any git://github.com/ into https://github.com/.

For local projects

For all your repositories, you can set:

1Command: git
2Arguments: ls-remote --tags --heads git://github.com/adobe-webplatform/eve.git
3Directory: /home/runner/work/stackstream-fe/stackstream-fe
4Output:
5fatal: remote error: 
6  The unauthenticated git protocol on port 9418 is no longer supported.
7    - name: Installing modules
8      run: yarn install
9  steps:
10  - name: Checkout
11    uses: actions/checkout@v2
12
13  - id: vars
14    run: |
15      if [ '${{ github.ref }}' == 'refs/heads/master' ]; then echo &quot;::set-output name=environment::prod_stackstream&quot; ; echo &quot;::set-output name=api-url::api&quot; ; elif [ '${{ github.ref }}' == 'refs/heads/staging' ]; then echo &quot;::set-output name=environment::staging_stackstream&quot;  ; echo &quot;::set-output name=api-url::stagingapi&quot; ; else echo &quot;::set-output name=environment::dev_stackstream&quot; ; echo &quot;::set-output name=api-url::devapi&quot; ; fi
16
17  - uses: pCYSl5EDgo/cat@master
18    id: slack
19    with:
20      path: .github/workflows/slack.txt
21
22  - name: Slack Start Notification
23    uses: 8398a7/action-slack@v3
24    env:
25      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
26      ENVIRONMENT: '`${{ steps.vars.outputs.environment }}`'
27      COLOR: good
28      STATUS: '`Started`'
29    with:
30      status: custom
31      fields: workflow,job,commit,repo,ref,author,took
32      custom_payload: |
33        ${{ steps.slack.outputs.text }}
34
35  - name: Installing modules
36    env:
37      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
38    run: yarn install
39
40  - name: Create Frontend Build
41    env:
42      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
43    run: yarn build
44
45  - name: Deploy to Frontend Server DEV
46    if: ${{ contains(github.ref, 'dev') }}
47    uses: easingthemes/ssh-deploy@v2.1.5
48    env:
49      SSH_PRIVATE_KEY: ${{ secrets.DEV_KEY }}
50      ARGS: '-rltgoDzvO --delete'
51      SOURCE: 'deploy/'
52      REMOTE_HOST: ${{ secrets.DEV_HOST }}
53      REMOTE_USER: plyfolio-dev
54      TARGET: '/home/plyfolio-dev/${{ steps.vars.outputs.environment }}/fe/deploy'
55   {
56  &quot;name&quot;: &quot;stackstream-fe&quot;,
57  &quot;version&quot;: &quot;1.0.0&quot;,
58  &quot;authors&quot;: [
59    &quot;fayyaznofal@gmail.com&quot;
60  ],
61  &quot;private&quot;: true,
62  &quot;dependencies&quot;: {
63    &quot;@fortawesome/fontawesome-svg-core&quot;: &quot;^1.2.34&quot;,
64    &quot;@fortawesome/free-solid-svg-icons&quot;: &quot;^5.15.2&quot;,
65    &quot;@fortawesome/react-fontawesome&quot;: &quot;^0.1.14&quot;,
66    &quot;@fullcalendar/bootstrap&quot;: &quot;^5.5.0&quot;,
67    &quot;@fullcalendar/core&quot;: &quot;^5.5.0&quot;,
68    &quot;@fullcalendar/daygrid&quot;: &quot;^5.5.0&quot;,
69    &quot;@fullcalendar/interaction&quot;: &quot;^5.5.0&quot;,
70    &quot;@fullcalendar/react&quot;: &quot;^5.5.0&quot;,
71    &quot;@lourenci/react-kanban&quot;: &quot;^2.1.0&quot;,
72    &quot;@redux-saga/simple-saga-monitor&quot;: &quot;^1.1.2&quot;,
73    &quot;@testing-library/jest-dom&quot;: &quot;^5.11.9&quot;,
74    &quot;@testing-library/react&quot;: &quot;^11.2.3&quot;,
75    &quot;@testing-library/user-event&quot;: &quot;^12.6.0&quot;,
76    &quot;@toast-ui/react-chart&quot;: &quot;^1.0.2&quot;,
77    &quot;@types/jest&quot;: &quot;^26.0.14&quot;,
78    &quot;@types/node&quot;: &quot;^14.10.3&quot;,
79    &quot;@types/react&quot;: &quot;^16.9.49&quot;,
80    &quot;@types/react-dom&quot;: &quot;^16.9.8&quot;,
81    &quot;@vtaits/react-color-picker&quot;: &quot;^0.1.1&quot;,
82    &quot;apexcharts&quot;: &quot;^3.23.1&quot;,
83    &quot;availity-reactstrap-validation&quot;: &quot;^2.7.0&quot;,
84    &quot;axios&quot;: &quot;^0.21.1&quot;,
85    &quot;axios-mock-adapter&quot;: &quot;^1.19.0&quot;,
86    &quot;axios-progress-bar&quot;: &quot;^1.2.0&quot;,
87    &quot;bootstrap&quot;: &quot;^5.0.0-beta2&quot;,
88    &quot;chart.js&quot;: &quot;^2.9.4&quot;,
89    &quot;chartist&quot;: &quot;^0.11.4&quot;,
90    &quot;classnames&quot;: &quot;^2.2.6&quot;,
91    &quot;components&quot;: &quot;^0.1.0&quot;,
92    &quot;dotenv&quot;: &quot;^8.2.0&quot;,
93    &quot;draft-js&quot;: &quot;^0.11.7&quot;,
94    &quot;echarts&quot;: &quot;^4.9.0&quot;,
95    &quot;echarts-for-react&quot;: &quot;^2.0.16&quot;,
96    &quot;firebase&quot;: &quot;^8.2.3&quot;,
97    &quot;google-maps-react&quot;: &quot;^2.0.6&quot;,
98    &quot;history&quot;: &quot;^4.10.1&quot;,
99    &quot;i&quot;: &quot;^0.3.6&quot;,
100    &quot;i18next&quot;: &quot;^19.8.4&quot;,
101    &quot;i18next-browser-languagedetector&quot;: &quot;^6.0.1&quot;,
102    &quot;jsonwebtoken&quot;: &quot;^8.5.1&quot;,
103    &quot;leaflet&quot;: &quot;^1.7.1&quot;,
104    &quot;lodash&quot;: &quot;^4.17.21&quot;,
105    &quot;lodash.clonedeep&quot;: &quot;^4.5.0&quot;,
106    &quot;lodash.get&quot;: &quot;^4.4.2&quot;,
107    &quot;metismenujs&quot;: &quot;^1.2.1&quot;,
108    &quot;mkdirp&quot;: &quot;^1.0.4&quot;,
109    &quot;moment&quot;: &quot;2.29.1&quot;,
110    &quot;moment-timezone&quot;: &quot;^0.5.32&quot;,
111    &quot;nouislider-react&quot;: &quot;^3.3.9&quot;,
112    &quot;npm&quot;: &quot;^7.6.3&quot;,
113    &quot;prop-types&quot;: &quot;^15.7.2&quot;,
114    &quot;query-string&quot;: &quot;^6.14.0&quot;,
115    &quot;react&quot;: &quot;^16.13.1&quot;,
116    &quot;react-apexcharts&quot;: &quot;^1.3.7&quot;,
117    &quot;react-auth-code-input&quot;: &quot;^1.0.0&quot;,
118    &quot;react-avatar&quot;: &quot;^3.10.0&quot;,
119    &quot;react-bootstrap&quot;: &quot;^1.5.0&quot;,
120    &quot;react-bootstrap-editable&quot;: &quot;^0.8.2&quot;,
121    &quot;react-bootstrap-sweetalert&quot;: &quot;^5.2.0&quot;,
122    &quot;react-bootstrap-table-next&quot;: &quot;^4.0.3&quot;,
123    &quot;react-bootstrap-table2-editor&quot;: &quot;^1.4.0&quot;,
124    &quot;react-bootstrap-table2-paginator&quot;: &quot;^2.1.2&quot;,
125    &quot;react-bootstrap-table2-toolkit&quot;: &quot;^2.1.3&quot;,
126    &quot;react-chartist&quot;: &quot;^0.14.3&quot;,
127    &quot;react-chartjs-2&quot;: &quot;^2.11.1&quot;,
128    &quot;react-color&quot;: &quot;^2.19.3&quot;,
129    &quot;react-confirm-alert&quot;: &quot;^2.7.0&quot;,
130    &quot;react-content-loader&quot;: &quot;^6.0.1&quot;,
131    &quot;react-countdown&quot;: &quot;^2.3.1&quot;,
132    &quot;react-countup&quot;: &quot;^4.3.3&quot;,
133    &quot;react-cropper&quot;: &quot;^2.1.4&quot;,
134    &quot;react-data-table-component&quot;: &quot;^6.11.8&quot;,
135    &quot;react-date-picker&quot;: &quot;^8.0.6&quot;,
136    &quot;react-datepicker&quot;: &quot;^3.4.1&quot;,
137    &quot;react-dom&quot;: &quot;^16.13.1&quot;,
138    &quot;react-draft-wysiwyg&quot;: &quot;^1.14.5&quot;,
139    &quot;react-drag-listview&quot;: &quot;^0.1.8&quot;,
140    &quot;react-drawer&quot;: &quot;^1.3.4&quot;,
141    &quot;react-dropzone&quot;: &quot;^11.2.4&quot;,
142    &quot;react-dual-listbox&quot;: &quot;^2.0.0&quot;,
143    &quot;react-facebook-login&quot;: &quot;^4.1.1&quot;,
144    &quot;react-flatpickr&quot;: &quot;^3.10.6&quot;,
145    &quot;react-google-login&quot;: &quot;^5.2.2&quot;,
146    &quot;react-hook-form&quot;: &quot;^7.15.2&quot;,
147    &quot;react-i18next&quot;: &quot;^11.8.5&quot;,
148    &quot;react-icons&quot;: &quot;^4.2.0&quot;,
149    &quot;react-image-lightbox&quot;: &quot;^5.1.1&quot;,
150    &quot;react-input-mask&quot;: &quot;^2.0.4&quot;,
151    &quot;react-jvectormap&quot;: &quot;^0.0.16&quot;,
152    &quot;react-leaflet&quot;: &quot;^3.0.5&quot;,
153    &quot;react-meta-tags&quot;: &quot;^1.0.1&quot;,
154    &quot;react-modal-video&quot;: &quot;^1.2.6&quot;,
155    &quot;react-notifications&quot;: &quot;^1.7.2&quot;,
156    &quot;react-number-format&quot;: &quot;^4.7.3&quot;,
157    &quot;react-perfect-scrollbar&quot;: &quot;^1.5.8&quot;,
158    &quot;react-rangeslider&quot;: &quot;^2.2.0&quot;,
159    &quot;react-rating&quot;: &quot;^2.0.5&quot;,
160    &quot;react-rating-tooltip&quot;: &quot;^1.1.6&quot;,
161    &quot;react-redux&quot;: &quot;^7.2.1&quot;,
162    &quot;react-responsive-carousel&quot;: &quot;^3.2.11&quot;,
163    &quot;react-router-dom&quot;: &quot;^5.2.0&quot;,
164    &quot;react-script&quot;: &quot;^2.0.5&quot;,
165    &quot;react-scripts&quot;: &quot;3.4.3&quot;,
166    &quot;react-select&quot;: &quot;^4.3.1&quot;,
167    &quot;react-sparklines&quot;: &quot;^1.7.0&quot;,
168    &quot;react-star-ratings&quot;: &quot;^2.3.0&quot;,
169    &quot;react-super-responsive-table&quot;: &quot;^5.2.0&quot;,
170    &quot;react-switch&quot;: &quot;^6.0.0&quot;,
171    &quot;react-table&quot;: &quot;^7.6.3&quot;,
172    &quot;react-toastify&quot;: &quot;^7.0.3&quot;,
173    &quot;react-toastr&quot;: &quot;^3.0.0&quot;,
174    &quot;react-twitter-auth&quot;: &quot;0.0.13&quot;,
175    &quot;reactstrap&quot;: &quot;^8.8.1&quot;,
176    &quot;recharts&quot;: &quot;^2.0.8&quot;,
177    &quot;redux&quot;: &quot;^4.0.5&quot;,
178    &quot;redux-saga&quot;: &quot;^1.1.3&quot;,
179    &quot;reselect&quot;: &quot;^4.0.0&quot;,
180    &quot;sass&quot;: &quot;^1.37.5&quot;,
181    &quot;simplebar-react&quot;: &quot;^2.3.0&quot;,
182    &quot;styled&quot;: &quot;^1.0.0&quot;,
183    &quot;styled-components&quot;: &quot;^5.2.1&quot;,
184    &quot;toastr&quot;: &quot;^2.1.4&quot;,
185    &quot;typescript&quot;: &quot;^4.0.2&quot;,
186    &quot;universal-cookie&quot;: &quot;^4.0.4&quot;
187  },
188  &quot;devDependencies&quot;: {
189    &quot;@typescript-eslint/eslint-plugin&quot;: &quot;^2.27.0&quot;,
190    &quot;@typescript-eslint/parser&quot;: &quot;^2.27.0&quot;,
191    &quot;@typescript-eslint/typescript-estree&quot;: &quot;^4.15.2&quot;,
192    &quot;eslint-config-prettier&quot;: &quot;^6.10.1&quot;,
193    &quot;eslint-plugin-prettier&quot;: &quot;^3.1.2&quot;,
194    &quot;husky&quot;: &quot;^4.2.5&quot;,
195    &quot;lint-staged&quot;: &quot;^10.1.3&quot;,
196    &quot;prettier&quot;: &quot;^1.19.1&quot;,
197    &quot;react-test-renderer&quot;: &quot;^16.13.1&quot;,
198    &quot;redux-devtools-extension&quot;: &quot;^2.13.8&quot;,
199    &quot;redux-mock-store&quot;: &quot;^1.5.4&quot;
200  },
201  &quot;scripts&quot;: {
202    &quot;start&quot;: &quot;react-scripts start&quot;,
203    &quot;build&quot;: &quot;react-scripts build &amp;&amp; mv build ./deploy/build&quot;,
204    &quot;build-local&quot;: &quot;react-scripts build&quot;,
205    &quot;test&quot;: &quot;react-scripts test&quot;,
206    &quot;eject&quot;: &quot;react-scripts eject&quot;
207  },
208  &quot;eslintConfig&quot;: {
209    &quot;extends&quot;: &quot;react-app&quot;
210  },
211  &quot;husky&quot;: {
212    &quot;hooks&quot;: {
213      &quot;pre-commit&quot;: &quot;lint-staged&quot;
214    }
215  },
216  &quot;lint-staged&quot;: {
217    &quot;*.{js,ts,tsx}&quot;: [
218      &quot;eslint --fix&quot;
219    ]
220  },
221  &quot;browserslist&quot;: {
222    &quot;production&quot;: [
223      &quot;&gt;0.2%&quot;,
224      &quot;not dead&quot;,
225      &quot;not op_mini all&quot;
226    ],
227    &quot;development&quot;: [
228      &quot;last 1 chrome version&quot;,
229      &quot;last 1 firefox version&quot;,
230      &quot;last 1 safari version&quot;
231    ]
232  }
233}
234    - name: Fix up git URLs
235      run: echo -e '[url &quot;https://github.com/&quot;]\n  insteadOf = &quot;git://github.com/&quot;' &gt;&gt; ~/.gitconfig
236git config --global url.&quot;https://github.com/&quot;.insteadOf git://github.com/
237

You can also use SSH, but GitHub Security reminds us that, as of March 15th, 2022, GitHub stopped accepting DSA keys. RSA keys uploaded after Nov 2, 2021 will work only with SHA-2 signatures.
The deprecated MACs, ciphers, and unencrypted Git protocol are permanently disabled.

So this (with the right key) would work:

1Command: git
2Arguments: ls-remote --tags --heads git://github.com/adobe-webplatform/eve.git
3Directory: /home/runner/work/stackstream-fe/stackstream-fe
4Output:
5fatal: remote error: 
6  The unauthenticated git protocol on port 9418 is no longer supported.
7    - name: Installing modules
8      run: yarn install
9  steps:
10  - name: Checkout
11    uses: actions/checkout@v2
12
13  - id: vars
14    run: |
15      if [ '${{ github.ref }}' == 'refs/heads/master' ]; then echo &quot;::set-output name=environment::prod_stackstream&quot; ; echo &quot;::set-output name=api-url::api&quot; ; elif [ '${{ github.ref }}' == 'refs/heads/staging' ]; then echo &quot;::set-output name=environment::staging_stackstream&quot;  ; echo &quot;::set-output name=api-url::stagingapi&quot; ; else echo &quot;::set-output name=environment::dev_stackstream&quot; ; echo &quot;::set-output name=api-url::devapi&quot; ; fi
16
17  - uses: pCYSl5EDgo/cat@master
18    id: slack
19    with:
20      path: .github/workflows/slack.txt
21
22  - name: Slack Start Notification
23    uses: 8398a7/action-slack@v3
24    env:
25      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
26      ENVIRONMENT: '`${{ steps.vars.outputs.environment }}`'
27      COLOR: good
28      STATUS: '`Started`'
29    with:
30      status: custom
31      fields: workflow,job,commit,repo,ref,author,took
32      custom_payload: |
33        ${{ steps.slack.outputs.text }}
34
35  - name: Installing modules
36    env:
37      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
38    run: yarn install
39
40  - name: Create Frontend Build
41    env:
42      REACT_APP_API_URL: 'https://${{ steps.vars.outputs.api-url }}mergestack.com/api/v1'
43    run: yarn build
44
45  - name: Deploy to Frontend Server DEV
46    if: ${{ contains(github.ref, 'dev') }}
47    uses: easingthemes/ssh-deploy@v2.1.5
48    env:
49      SSH_PRIVATE_KEY: ${{ secrets.DEV_KEY }}
50      ARGS: '-rltgoDzvO --delete'
51      SOURCE: 'deploy/'
52      REMOTE_HOST: ${{ secrets.DEV_HOST }}
53      REMOTE_USER: plyfolio-dev
54      TARGET: '/home/plyfolio-dev/${{ steps.vars.outputs.environment }}/fe/deploy'
55   {
56  &quot;name&quot;: &quot;stackstream-fe&quot;,
57  &quot;version&quot;: &quot;1.0.0&quot;,
58  &quot;authors&quot;: [
59    &quot;fayyaznofal@gmail.com&quot;
60  ],
61  &quot;private&quot;: true,
62  &quot;dependencies&quot;: {
63    &quot;@fortawesome/fontawesome-svg-core&quot;: &quot;^1.2.34&quot;,
64    &quot;@fortawesome/free-solid-svg-icons&quot;: &quot;^5.15.2&quot;,
65    &quot;@fortawesome/react-fontawesome&quot;: &quot;^0.1.14&quot;,
66    &quot;@fullcalendar/bootstrap&quot;: &quot;^5.5.0&quot;,
67    &quot;@fullcalendar/core&quot;: &quot;^5.5.0&quot;,
68    &quot;@fullcalendar/daygrid&quot;: &quot;^5.5.0&quot;,
69    &quot;@fullcalendar/interaction&quot;: &quot;^5.5.0&quot;,
70    &quot;@fullcalendar/react&quot;: &quot;^5.5.0&quot;,
71    &quot;@lourenci/react-kanban&quot;: &quot;^2.1.0&quot;,
72    &quot;@redux-saga/simple-saga-monitor&quot;: &quot;^1.1.2&quot;,
73    &quot;@testing-library/jest-dom&quot;: &quot;^5.11.9&quot;,
74    &quot;@testing-library/react&quot;: &quot;^11.2.3&quot;,
75    &quot;@testing-library/user-event&quot;: &quot;^12.6.0&quot;,
76    &quot;@toast-ui/react-chart&quot;: &quot;^1.0.2&quot;,
77    &quot;@types/jest&quot;: &quot;^26.0.14&quot;,
78    &quot;@types/node&quot;: &quot;^14.10.3&quot;,
79    &quot;@types/react&quot;: &quot;^16.9.49&quot;,
80    &quot;@types/react-dom&quot;: &quot;^16.9.8&quot;,
81    &quot;@vtaits/react-color-picker&quot;: &quot;^0.1.1&quot;,
82    &quot;apexcharts&quot;: &quot;^3.23.1&quot;,
83    &quot;availity-reactstrap-validation&quot;: &quot;^2.7.0&quot;,
84    &quot;axios&quot;: &quot;^0.21.1&quot;,
85    &quot;axios-mock-adapter&quot;: &quot;^1.19.0&quot;,
86    &quot;axios-progress-bar&quot;: &quot;^1.2.0&quot;,
87    &quot;bootstrap&quot;: &quot;^5.0.0-beta2&quot;,
88    &quot;chart.js&quot;: &quot;^2.9.4&quot;,
89    &quot;chartist&quot;: &quot;^0.11.4&quot;,
90    &quot;classnames&quot;: &quot;^2.2.6&quot;,
91    &quot;components&quot;: &quot;^0.1.0&quot;,
92    &quot;dotenv&quot;: &quot;^8.2.0&quot;,
93    &quot;draft-js&quot;: &quot;^0.11.7&quot;,
94    &quot;echarts&quot;: &quot;^4.9.0&quot;,
95    &quot;echarts-for-react&quot;: &quot;^2.0.16&quot;,
96    &quot;firebase&quot;: &quot;^8.2.3&quot;,
97    &quot;google-maps-react&quot;: &quot;^2.0.6&quot;,
98    &quot;history&quot;: &quot;^4.10.1&quot;,
99    &quot;i&quot;: &quot;^0.3.6&quot;,
100    &quot;i18next&quot;: &quot;^19.8.4&quot;,
101    &quot;i18next-browser-languagedetector&quot;: &quot;^6.0.1&quot;,
102    &quot;jsonwebtoken&quot;: &quot;^8.5.1&quot;,
103    &quot;leaflet&quot;: &quot;^1.7.1&quot;,
104    &quot;lodash&quot;: &quot;^4.17.21&quot;,
105    &quot;lodash.clonedeep&quot;: &quot;^4.5.0&quot;,
106    &quot;lodash.get&quot;: &quot;^4.4.2&quot;,
107    &quot;metismenujs&quot;: &quot;^1.2.1&quot;,
108    &quot;mkdirp&quot;: &quot;^1.0.4&quot;,
109    &quot;moment&quot;: &quot;2.29.1&quot;,
110    &quot;moment-timezone&quot;: &quot;^0.5.32&quot;,
111    &quot;nouislider-react&quot;: &quot;^3.3.9&quot;,
112    &quot;npm&quot;: &quot;^7.6.3&quot;,
113    &quot;prop-types&quot;: &quot;^15.7.2&quot;,
114    &quot;query-string&quot;: &quot;^6.14.0&quot;,
115    &quot;react&quot;: &quot;^16.13.1&quot;,
116    &quot;react-apexcharts&quot;: &quot;^1.3.7&quot;,
117    &quot;react-auth-code-input&quot;: &quot;^1.0.0&quot;,
118    &quot;react-avatar&quot;: &quot;^3.10.0&quot;,
119    &quot;react-bootstrap&quot;: &quot;^1.5.0&quot;,
120    &quot;react-bootstrap-editable&quot;: &quot;^0.8.2&quot;,
121    &quot;react-bootstrap-sweetalert&quot;: &quot;^5.2.0&quot;,
122    &quot;react-bootstrap-table-next&quot;: &quot;^4.0.3&quot;,
123    &quot;react-bootstrap-table2-editor&quot;: &quot;^1.4.0&quot;,
124    &quot;react-bootstrap-table2-paginator&quot;: &quot;^2.1.2&quot;,
125    &quot;react-bootstrap-table2-toolkit&quot;: &quot;^2.1.3&quot;,
126    &quot;react-chartist&quot;: &quot;^0.14.3&quot;,
127    &quot;react-chartjs-2&quot;: &quot;^2.11.1&quot;,
128    &quot;react-color&quot;: &quot;^2.19.3&quot;,
129    &quot;react-confirm-alert&quot;: &quot;^2.7.0&quot;,
130    &quot;react-content-loader&quot;: &quot;^6.0.1&quot;,
131    &quot;react-countdown&quot;: &quot;^2.3.1&quot;,
132    &quot;react-countup&quot;: &quot;^4.3.3&quot;,
133    &quot;react-cropper&quot;: &quot;^2.1.4&quot;,
134    &quot;react-data-table-component&quot;: &quot;^6.11.8&quot;,
135    &quot;react-date-picker&quot;: &quot;^8.0.6&quot;,
136    &quot;react-datepicker&quot;: &quot;^3.4.1&quot;,
137    &quot;react-dom&quot;: &quot;^16.13.1&quot;,
138    &quot;react-draft-wysiwyg&quot;: &quot;^1.14.5&quot;,
139    &quot;react-drag-listview&quot;: &quot;^0.1.8&quot;,
140    &quot;react-drawer&quot;: &quot;^1.3.4&quot;,
141    &quot;react-dropzone&quot;: &quot;^11.2.4&quot;,
142    &quot;react-dual-listbox&quot;: &quot;^2.0.0&quot;,
143    &quot;react-facebook-login&quot;: &quot;^4.1.1&quot;,
144    &quot;react-flatpickr&quot;: &quot;^3.10.6&quot;,
145    &quot;react-google-login&quot;: &quot;^5.2.2&quot;,
146    &quot;react-hook-form&quot;: &quot;^7.15.2&quot;,
147    &quot;react-i18next&quot;: &quot;^11.8.5&quot;,
148    &quot;react-icons&quot;: &quot;^4.2.0&quot;,
149    &quot;react-image-lightbox&quot;: &quot;^5.1.1&quot;,
150    &quot;react-input-mask&quot;: &quot;^2.0.4&quot;,
151    &quot;react-jvectormap&quot;: &quot;^0.0.16&quot;,
152    &quot;react-leaflet&quot;: &quot;^3.0.5&quot;,
153    &quot;react-meta-tags&quot;: &quot;^1.0.1&quot;,
154    &quot;react-modal-video&quot;: &quot;^1.2.6&quot;,
155    &quot;react-notifications&quot;: &quot;^1.7.2&quot;,
156    &quot;react-number-format&quot;: &quot;^4.7.3&quot;,
157    &quot;react-perfect-scrollbar&quot;: &quot;^1.5.8&quot;,
158    &quot;react-rangeslider&quot;: &quot;^2.2.0&quot;,
159    &quot;react-rating&quot;: &quot;^2.0.5&quot;,
160    &quot;react-rating-tooltip&quot;: &quot;^1.1.6&quot;,
161    &quot;react-redux&quot;: &quot;^7.2.1&quot;,
162    &quot;react-responsive-carousel&quot;: &quot;^3.2.11&quot;,
163    &quot;react-router-dom&quot;: &quot;^5.2.0&quot;,
164    &quot;react-script&quot;: &quot;^2.0.5&quot;,
165    &quot;react-scripts&quot;: &quot;3.4.3&quot;,
166    &quot;react-select&quot;: &quot;^4.3.1&quot;,
167    &quot;react-sparklines&quot;: &quot;^1.7.0&quot;,
168    &quot;react-star-ratings&quot;: &quot;^2.3.0&quot;,
169    &quot;react-super-responsive-table&quot;: &quot;^5.2.0&quot;,
170    &quot;react-switch&quot;: &quot;^6.0.0&quot;,
171    &quot;react-table&quot;: &quot;^7.6.3&quot;,
172    &quot;react-toastify&quot;: &quot;^7.0.3&quot;,
173    &quot;react-toastr&quot;: &quot;^3.0.0&quot;,
174    &quot;react-twitter-auth&quot;: &quot;0.0.13&quot;,
175    &quot;reactstrap&quot;: &quot;^8.8.1&quot;,
176    &quot;recharts&quot;: &quot;^2.0.8&quot;,
177    &quot;redux&quot;: &quot;^4.0.5&quot;,
178    &quot;redux-saga&quot;: &quot;^1.1.3&quot;,
179    &quot;reselect&quot;: &quot;^4.0.0&quot;,
180    &quot;sass&quot;: &quot;^1.37.5&quot;,
181    &quot;simplebar-react&quot;: &quot;^2.3.0&quot;,
182    &quot;styled&quot;: &quot;^1.0.0&quot;,
183    &quot;styled-components&quot;: &quot;^5.2.1&quot;,
184    &quot;toastr&quot;: &quot;^2.1.4&quot;,
185    &quot;typescript&quot;: &quot;^4.0.2&quot;,
186    &quot;universal-cookie&quot;: &quot;^4.0.4&quot;
187  },
188  &quot;devDependencies&quot;: {
189    &quot;@typescript-eslint/eslint-plugin&quot;: &quot;^2.27.0&quot;,
190    &quot;@typescript-eslint/parser&quot;: &quot;^2.27.0&quot;,
191    &quot;@typescript-eslint/typescript-estree&quot;: &quot;^4.15.2&quot;,
192    &quot;eslint-config-prettier&quot;: &quot;^6.10.1&quot;,
193    &quot;eslint-plugin-prettier&quot;: &quot;^3.1.2&quot;,
194    &quot;husky&quot;: &quot;^4.2.5&quot;,
195    &quot;lint-staged&quot;: &quot;^10.1.3&quot;,
196    &quot;prettier&quot;: &quot;^1.19.1&quot;,
197    &quot;react-test-renderer&quot;: &quot;^16.13.1&quot;,
198    &quot;redux-devtools-extension&quot;: &quot;^2.13.8&quot;,
199    &quot;redux-mock-store&quot;: &quot;^1.5.4&quot;
200  },
201  &quot;scripts&quot;: {
202    &quot;start&quot;: &quot;react-scripts start&quot;,
203    &quot;build&quot;: &quot;react-scripts build &amp;&amp; mv build ./deploy/build&quot;,
204    &quot;build-local&quot;: &quot;react-scripts build&quot;,
205    &quot;test&quot;: &quot;react-scripts test&quot;,
206    &quot;eject&quot;: &quot;react-scripts eject&quot;
207  },
208  &quot;eslintConfig&quot;: {
209    &quot;extends&quot;: &quot;react-app&quot;
210  },
211  &quot;husky&quot;: {
212    &quot;hooks&quot;: {
213      &quot;pre-commit&quot;: &quot;lint-staged&quot;
214    }
215  },
216  &quot;lint-staged&quot;: {
217    &quot;*.{js,ts,tsx}&quot;: [
218      &quot;eslint --fix&quot;
219    ]
220  },
221  &quot;browserslist&quot;: {
222    &quot;production&quot;: [
223      &quot;&gt;0.2%&quot;,
224      &quot;not dead&quot;,
225      &quot;not op_mini all&quot;
226    ],
227    &quot;development&quot;: [
228      &quot;last 1 chrome version&quot;,
229      &quot;last 1 firefox version&quot;,
230      &quot;last 1 safari version&quot;
231    ]
232  }
233}
234    - name: Fix up git URLs
235      run: echo -e '[url &quot;https://github.com/&quot;]\n  insteadOf = &quot;git://github.com/&quot;' &gt;&gt; ~/.gitconfig
236git config --global url.&quot;https://github.com/&quot;.insteadOf git://github.com/
237git config --global url.&quot;git@github.com:&quot;.insteadOf git://github.com/
238

That will change any git://github.com/ (unencrypted Git protocol) into git@github.com: (SSH URL).

Source https://stackoverflow.com/questions/70663523

QUESTION

Spring Cloud Config Server GitHub SHA-1 error

Asked 2022-Mar-22 at 03:13

Context

This is regarding a Spring Cloud Config Server hobby project (with @EnableConfigServer).

Yesterday, the application could be started.

Today, the application failed to start because of a Git communication error.

From GitHub's official blog post, it is mentioned that SHA-1 is no longer supported starting from 15 March 2022. And that explains the results I'm getting these 2 days.

March 15, 2022

Changes made permanent.

We’ll permanently stop accepting DSA keys. RSA keys uploaded after the cut-off point above will work only with SHA-2 signatures (but again, RSA keys uploaded before this date will continue to work with SHA-1). The deprecated MACs, ciphers, and unencrypted Git protocol will be permanently disabled.

Even if I didn't delete the existing SSH key, it still failed to start today. But anyway, now the only key under the "Deploy keys" section of the repository settings is an SSH key that was added after the March 15, 2022 cut off date.

Dependency versions

Dependency Management:

Dependency	Version
spring-cloud-dependencies	Hoxton.SR12

Dependency:

Dependency	Version
spring-cloud-config-server	(Managed)

Spring application configurations

application.yml:

1spring:
2  cloud:
3    config:
4      server:
5        git:
6          ignore-local-ssh-settings: true
7          uri: git@github.com:xxx/xxx.git
8          private-key: |
9                        -----BEGIN RSA PRIVATE KEY-----
10                        (omitted)
11                        -----END RSA PRIVATE KEY-----
12

Additional information

The involved repo is a GitHub private repo configured with an SSH key under the "Deploy keys" settings section.

I have been generating the SSH key pairs according to the Spring Cloud Config official documentation.

Error

From the console log, I see:

ERROR: You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type. Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.

This comes from JGit as a org.eclipse.jgit.errors.NoRemoteRepositoryException.

Question and my attempt to fix the issue

I tried upgrading the Spring Cloud dependency management version to the latest available in Maven repository, i.e. 2021.0.1, as it uses a newer version of JGit.

However, I'm still facing the same error.

If I just switch to GitLab with the exact same configurations, it just works regardless of the Spring Cloud dependency version and the JGit version.

What else can I do if I want to use GitHub?

ANSWER

Answered 2022-Mar-16 at 14:07

I have a same problem.

See https://github.com/spring-cloud/spring-cloud-config/issues/2061

For right now, I have a dirty workaround: use https uri, username and password(maybe personal secret token).

1spring:
2  cloud:
3    config:
4      server:
5        git:
6          ignore-local-ssh-settings: true
7          uri: git@github.com:xxx/xxx.git
8          private-key: |
9                        -----BEGIN RSA PRIVATE KEY-----
10                        (omitted)
11                        -----END RSA PRIVATE KEY-----
12spring:
13  cloud:
14    config:
15      server:
16        git:
17          uri: https://github.com/org/repo
18          username: ...
19          password: ...
20

Source https://stackoverflow.com/questions/71489256

QUESTION

Eclipse/Git: "You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type."

Asked 2022-Mar-18 at 13:27

I created a public key in Git using ssh-keygen which was successfully created as .ssh/id_rsa.pub.

I then uploaded it to GitHub in my SSH Keys, and "Authorized" its SSO feature. Everything is uploaded now.

When cloning a repository in Eclipse, I get the following message

ANSWER

Answered 2022-Mar-18 at 13:27

I had to generate an ECDSA key, not an RSA key. Not sure why, but none of the RSA options worked for me, including the default.

1ssh-keygen -t ecdsa -b 256 -m PEM
2

I got this from https://stackoverflow.com/a/71502531/1005607

Then I uploaded it to GitHub (after deleting my old key first), updated my Eclipse SSH2 private key to point to id_ecdsa. Now I can clone repositories.

Source https://stackoverflow.com/questions/71500791

QUESTION

Connection reset when using jsch to connect to an sftp server hosted in azure

Asked 2022-Feb-18 at 18:21

we are currently working with a cloud product that uses JSCH internally to connect to external sftp sources. Im investigating an connection reset exception that we are getting when trying to connect to azure sftp.

Using wireshark i determined that the problem occurs after we send the Client: Key Exchange Init. Establishing the same connection with filezilla we dont have this issue.

comparing the packages from jsch and filezilla i didn't see an obivious issue, but im not an expert on the ssh protocol. im gonna post both requests below if somebody could give me any pointers it would be greatly appreciated.

Request with JSCH (not working)

Request with Filezilla (working)

Response with Filezilla (working)

See below for the log output:

1INFO: Connecting to ***** port 22
2INFO: Connection established
3INFO: Remote version string: SSH-2.0-AzureSSH_1.0.0
4INFO: Local version string: SSH-2.0-JSCH-0.1.54
5INFO: CheckCiphers: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-ctr,arcfour,arcfour128,arcfour256
6INFO: CheckKexes: diffie-hellman-group14-sha1,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521
7INFO: CheckSignatures: ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
8INFO: SSH_MSG_KEXINIT sent
9INFO: Disconnecting from **** port 22
10com.jcraft.jsch.JSchException: Session.connect: java.net.SocketException: Connection reset
11

EDIT: following jameses suggestion i got the same result, connection closed but the client request only had the supported algos as payload. So i tried to replicate the FileZilla request by setting the jsch config regardless if jsch actually supports the algo, i just wanted to see if there is any respone.

But for some reason the connection still gets terminated

Modified jsch request

ANSWER

Answered 2022-Feb-03 at 08:09

i wanted to post a quick update for anybody that is having the same issue, i opened a similiar question on the microsoft q&a site and looks like it's an issue on the azure side that they are working on fixing for GA Microsoft Q&A

Source https://stackoverflow.com/questions/70878675

QUESTION

nexus-staging-maven-plugin: maven deploy failed: An API incompatibility was encountered while executing

Asked 2022-Feb-11 at 22:39

This worked fine for me be building under Java 8. Now under Java 17.01 I get this when I do mvn deploy.

mvn install works fine. I tried 3.6.3 and 3.8.4 and updated (I think) all my plugins to the newest versions.

Any ideas?

1[ERROR] Failed to execute goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy (injected-nexus-deploy) on project persism: Execution injected-nexus-deploy of goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:de
2ploy failed: An API incompatibility was encountered while executing org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
3
4
5[ERROR] import: Entry[import  from realm ClassRealm[maven.api, parent: null]]
6[ERROR]
7[ERROR] -----------------------------------------------------
8[ERROR] : Unable to make field private final java.util.Comparator java.util.TreeMap.comparator accessible: module java.base does not &quot;opens java.util&quot; to unnamed module @149f5761
9[ERROR] -&gt; [Help 1]
10org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy (injected-nexus-deploy) on project persism: Execution injected-nexus-deploy of goal org.sona
11type.plugins:nexus-staging-maven-plugin:1.6.8:deploy failed: An API incompatibility was encountered while executing org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
12
13Caused by: org.apache.maven.plugin.PluginExecutionException: Execution injected-nexus-deploy of goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy failed: An API incompatibility was encountered while executing org.son
14atype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
15

POM:

1[ERROR] Failed to execute goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy (injected-nexus-deploy) on project persism: Execution injected-nexus-deploy of goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:de
2ploy failed: An API incompatibility was encountered while executing org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
3
4
5[ERROR] import: Entry[import  from realm ClassRealm[maven.api, parent: null]]
6[ERROR]
7[ERROR] -----------------------------------------------------
8[ERROR] : Unable to make field private final java.util.Comparator java.util.TreeMap.comparator accessible: module java.base does not &quot;opens java.util&quot; to unnamed module @149f5761
9[ERROR] -&gt; [Help 1]
10org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy (injected-nexus-deploy) on project persism: Execution injected-nexus-deploy of goal org.sona
11type.plugins:nexus-staging-maven-plugin:1.6.8:deploy failed: An API incompatibility was encountered while executing org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
12
13Caused by: org.apache.maven.plugin.PluginExecutionException: Execution injected-nexus-deploy of goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy failed: An API incompatibility was encountered while executing org.son
14atype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
15&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;
16&lt;project xmlns=&quot;http://maven.apache.org/POM/4.0.0&quot;
17         xmlns:xsi=&quot;http://www.w3.org/2001/XMLSchema-instance&quot;
18         xsi:schemaLocation=&quot;http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd&quot;&gt;
19    &lt;modelVersion&gt;4.0.0&lt;/modelVersion&gt;
20
21    &lt;groupId&gt;io.github.sproket&lt;/groupId&gt;
22    &lt;artifactId&gt;persism&lt;/artifactId&gt;
23    &lt;version&gt;2.0.0&lt;/version&gt;
24    &lt;packaging&gt;jar&lt;/packaging&gt;
25
26
27    &lt;build&gt;
28        &lt;sourceDirectory&gt;./src&lt;/sourceDirectory&gt;
29        &lt;testSourceDirectory&gt;./test&lt;/testSourceDirectory&gt;
30        &lt;testResources&gt;
31            &lt;testResource&gt;
32                &lt;directory&gt;./test&lt;/directory&gt;
33                &lt;!--                &lt;includes&gt;--&gt;
34                &lt;!--                    &lt;include&gt;*.*&lt;/include&gt;--&gt;
35                &lt;!--                &lt;/includes&gt;--&gt;
36            &lt;/testResource&gt;
37        &lt;/testResources&gt;
38        &lt;plugins&gt;
39            &lt;plugin&gt;
40                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
41                &lt;artifactId&gt;maven-compiler-plugin&lt;/artifactId&gt;
42                &lt;version&gt;3.8.1&lt;/version&gt;
43                &lt;!-- MSSQL does not seem to able to connect with 16 --&gt;
44                &lt;configuration&gt;
45                    &lt;source&gt;17&lt;/source&gt;
46                    &lt;target&gt;17&lt;/target&gt;
47&lt;!--                    &lt;compilerArgs&gt;--&gt;
48&lt;!--                        &lt;arg&gt;-parameters&lt;/arg&gt;--&gt;
49&lt;!--                    &lt;/compilerArgs&gt;--&gt;
50                &lt;/configuration&gt;
51            &lt;/plugin&gt;
52
53            &lt;plugin&gt;
54                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
55                &lt;artifactId&gt;maven-jar-plugin&lt;/artifactId&gt;
56                &lt;version&gt;3.2.0&lt;/version&gt;
57                &lt;configuration&gt;
58                    &lt;archive&gt;
59                        &lt;manifestEntries&gt;
60                            &lt;Automatic-Module-Name&gt;sproket.github.io.persism&lt;/Automatic-Module-Name&gt;
61                        &lt;/manifestEntries&gt;
62                    &lt;/archive&gt;
63                &lt;/configuration&gt;
64            &lt;/plugin&gt;
65
66            &lt;plugin&gt;
67                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
68                &lt;artifactId&gt;maven-source-plugin&lt;/artifactId&gt;
69                &lt;version&gt;3.2.1&lt;/version&gt;
70                &lt;executions&gt;
71                    &lt;execution&gt;
72                        &lt;id&gt;attach-sources&lt;/id&gt;
73                        &lt;goals&gt;
74                            &lt;goal&gt;jar-no-fork&lt;/goal&gt;
75                        &lt;/goals&gt;
76                    &lt;/execution&gt;
77                &lt;/executions&gt;
78            &lt;/plugin&gt;
79            &lt;plugin&gt;
80                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
81                &lt;artifactId&gt;maven-javadoc-plugin&lt;/artifactId&gt;
82                &lt;version&gt;3.2.0&lt;/version&gt;
83                &lt;configuration&gt;
84                    &lt;excludePackageNames&gt;net.sf.persism.log*;net.sf.persism.logging.*&lt;/excludePackageNames&gt;
85                    &lt;source&gt;17&lt;/source&gt;
86                &lt;/configuration&gt;
87                &lt;executions&gt;
88                    &lt;execution&gt;
89                        &lt;id&gt;attach-javadocs&lt;/id&gt;
90                        &lt;goals&gt;
91                            &lt;goal&gt;jar&lt;/goal&gt;
92                        &lt;/goals&gt;
93                    &lt;/execution&gt;
94                &lt;/executions&gt;
95            &lt;/plugin&gt;
96            &lt;plugin&gt;
97                &lt;artifactId&gt;maven-surefire-plugin&lt;/artifactId&gt;
98                &lt;version&gt;3.0.0-M5&lt;/version&gt;
99                &lt;configuration&gt;
100                    &lt;excludedGroups&gt;net.sf.persism.categories.ExternalDB,net.sf.persism.categories.TestContainerDB
101                    &lt;/excludedGroups&gt;
102                &lt;/configuration&gt;
103            &lt;/plugin&gt;
104            &lt;plugin&gt;
105                &lt;groupId&gt;org.sonatype.plugins&lt;/groupId&gt;
106                &lt;artifactId&gt;nexus-staging-maven-plugin&lt;/artifactId&gt;
107                &lt;version&gt;1.6.8&lt;/version&gt;
108                &lt;extensions&gt;true&lt;/extensions&gt;
109                &lt;configuration&gt;
110                    &lt;serverId&gt;ossrh&lt;/serverId&gt;
111                    &lt;nexusUrl&gt;https://s01.oss.sonatype.org/&lt;/nexusUrl&gt;
112                    &lt;autoReleaseAfterClose&gt;true&lt;/autoReleaseAfterClose&gt;
113                &lt;/configuration&gt;
114            &lt;/plugin&gt;
115
116        &lt;/plugins&gt;
117    &lt;/build&gt;
118
119    &lt;name&gt;persism&lt;/name&gt;
120    &lt;description&gt;A zero ceremony ORM for Java&lt;/description&gt;
121    &lt;url&gt;https://github.com/sproket/Persism&lt;/url&gt;
122
123    &lt;properties&gt;
124        &lt;java.version&gt;17&lt;/java.version&gt;
125        &lt;maven.compiler.release&gt;17&lt;/maven.compiler.release&gt;
126        &lt;project.build.sourceEncoding&gt;UTF-8&lt;/project.build.sourceEncoding&gt;
127    &lt;/properties&gt;
128
129    &lt;licenses&gt;
130        &lt;license&gt;
131            &lt;name&gt;BSD-3-Clause License&lt;/name&gt;
132            &lt;url&gt;https://github.com/sproket/Persism/blob/master/license.txt&lt;/url&gt;
133        &lt;/license&gt;
134    &lt;/licenses&gt;
135
136    &lt;developers&gt;
137        &lt;developer&gt;
138            &lt;name&gt;Dan Howard&lt;/name&gt;
139            &lt;email&gt;--------------------------&lt;/email&gt;
140            &lt;organization&gt;io.github&lt;/organization&gt;
141            &lt;organizationUrl&gt;https://sproket.github.io/Persism/&lt;/organizationUrl&gt;
142        &lt;/developer&gt;
143    &lt;/developers&gt;
144
145    &lt;distributionManagement&gt;
146        &lt;snapshotRepository&gt;
147            &lt;id&gt;ossrh&lt;/id&gt;
148            &lt;url&gt;https://s01.oss.sonatype.org/content/repositories/snapshots&lt;/url&gt;
149        &lt;/snapshotRepository&gt;
150        &lt;repository&gt;
151            &lt;id&gt;ossrh&lt;/id&gt;
152            &lt;url&gt;https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/&lt;/url&gt;
153        &lt;/repository&gt;
154    &lt;/distributionManagement&gt;
155
156    &lt;scm&gt;
157        &lt;connection&gt;scm:git:git://github.com/sproket/Persism.git&lt;/connection&gt;
158        &lt;developerConnection&gt;scm:git:ssh://github.com/sproket/Persism.git&lt;/developerConnection&gt;
159        &lt;url&gt;https://github.com/sproket/Persism&lt;/url&gt;
160    &lt;/scm&gt;
161
162    &lt;profiles&gt;
163        &lt;profile&gt;
164            &lt;id&gt;include-test-containers-db&lt;/id&gt;
165            &lt;activation&gt;
166                &lt;activeByDefault&gt;false&lt;/activeByDefault&gt;
167            &lt;/activation&gt;
168            &lt;build&gt;
169                &lt;plugins&gt;
170                    &lt;plugin&gt;
171                        &lt;artifactId&gt;maven-surefire-plugin&lt;/artifactId&gt;
172                        &lt;version&gt;3.0.0-M5&lt;/version&gt;
173                        &lt;configuration&gt;
174                            &lt;excludedGroups&gt;net.sf.persism.categories.ExternalDB&lt;/excludedGroups&gt;
175                        &lt;/configuration&gt;
176                    &lt;/plugin&gt;
177                &lt;/plugins&gt;
178            &lt;/build&gt;
179        &lt;/profile&gt;
180
181        &lt;profile&gt;
182            &lt;id&gt;exclude-test-containers-db&lt;/id&gt;
183            &lt;activation&gt;
184                &lt;activeByDefault&gt;false&lt;/activeByDefault&gt;
185            &lt;/activation&gt;
186            &lt;build&gt;
187                &lt;plugins&gt;
188                    &lt;plugin&gt;
189                        &lt;artifactId&gt;maven-surefire-plugin&lt;/artifactId&gt;
190                        &lt;version&gt;3.0.0-M5&lt;/version&gt;
191                        &lt;configuration&gt;
192                            &lt;excludedGroups&gt;net.sf.persism.categories.TestContainerDB&lt;/excludedGroups&gt;
193                        &lt;/configuration&gt;
194                    &lt;/plugin&gt;
195                &lt;/plugins&gt;
196            &lt;/build&gt;
197        &lt;/profile&gt;
198
199        &lt;profile&gt;
200            &lt;id&gt;release&lt;/id&gt;
201            &lt;build&gt;
202                &lt;plugins&gt;
203                    &lt;plugin&gt;
204                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
205                        &lt;artifactId&gt;maven-jar-plugin&lt;/artifactId&gt;
206                        &lt;version&gt;3.2.0&lt;/version&gt;
207                        &lt;configuration&gt;
208                            &lt;archive&gt;
209                                &lt;manifestEntries&gt;
210                                    &lt;Automatic-Module-Name&gt;sproket.github.io.persism&lt;/Automatic-Module-Name&gt;
211                                &lt;/manifestEntries&gt;
212                            &lt;/archive&gt;
213                        &lt;/configuration&gt;
214                    &lt;/plugin&gt;
215                    &lt;plugin&gt;
216                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
217                        &lt;artifactId&gt;maven-source-plugin&lt;/artifactId&gt;
218                        &lt;version&gt;3.2.1&lt;/version&gt;
219                        &lt;executions&gt;
220                            &lt;execution&gt;
221                                &lt;id&gt;attach-sources&lt;/id&gt;
222                                &lt;goals&gt;
223                                    &lt;goal&gt;jar-no-fork&lt;/goal&gt;
224                                &lt;/goals&gt;
225                            &lt;/execution&gt;
226                        &lt;/executions&gt;
227                    &lt;/plugin&gt;
228                    &lt;plugin&gt;
229                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
230                        &lt;artifactId&gt;maven-javadoc-plugin&lt;/artifactId&gt;
231                        &lt;version&gt;3.2.0&lt;/version&gt;
232                        &lt;executions&gt;
233                            &lt;execution&gt;
234                                &lt;id&gt;attach-javadocs&lt;/id&gt;
235                                &lt;goals&gt;
236                                    &lt;goal&gt;jar&lt;/goal&gt;
237                                &lt;/goals&gt;
238                                &lt;configuration&gt;
239                                    &lt;release&gt;17&lt;/release&gt;
240                                &lt;/configuration&gt;
241                            &lt;/execution&gt;
242                        &lt;/executions&gt;
243                    &lt;/plugin&gt;
244                    &lt;plugin&gt;
245                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
246                        &lt;artifactId&gt;maven-gpg-plugin&lt;/artifactId&gt;
247                        &lt;version&gt;3.0.1&lt;/version&gt;
248                        &lt;executions&gt;
249                            &lt;execution&gt;
250                                &lt;id&gt;sign-artifacts&lt;/id&gt;
251                                &lt;phase&gt;verify&lt;/phase&gt;
252                                &lt;goals&gt;
253                                    &lt;goal&gt;sign&lt;/goal&gt;
254                                &lt;/goals&gt;
255                            &lt;/execution&gt;
256                        &lt;/executions&gt;
257                    &lt;/plugin&gt;
258                &lt;/plugins&gt;
259            &lt;/build&gt;
260        &lt;/profile&gt;
261    &lt;/profiles&gt;
262
263
264    &lt;dependencies&gt;
265        &lt;dependency&gt;
266            &lt;groupId&gt;junit&lt;/groupId&gt;
267            &lt;artifactId&gt;junit&lt;/artifactId&gt;
268            &lt;version&gt;4.13.2&lt;/version&gt;
269            &lt;scope&gt;test&lt;/scope&gt;
270        &lt;/dependency&gt;
271        &lt;dependency&gt;
272            &lt;groupId&gt;com.carrotsearch&lt;/groupId&gt;
273            &lt;artifactId&gt;junit-benchmarks&lt;/artifactId&gt;
274            &lt;version&gt;0.7.2&lt;/version&gt;
275            &lt;scope&gt;test&lt;/scope&gt;
276        &lt;/dependency&gt;
277        &lt;dependency&gt;
278            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
279            &lt;artifactId&gt;testcontainers&lt;/artifactId&gt;
280            &lt;version&gt;1.15.2&lt;/version&gt;
281            &lt;scope&gt;test&lt;/scope&gt;
282        &lt;/dependency&gt;
283        &lt;dependency&gt;
284            &lt;groupId&gt;ch.qos.logback&lt;/groupId&gt;
285            &lt;artifactId&gt;logback-classic&lt;/artifactId&gt;
286            &lt;version&gt;1.2.7&lt;/version&gt;
287            &lt;scope&gt;provided&lt;/scope&gt;
288        &lt;/dependency&gt;
289
290        &lt;dependency&gt;
291            &lt;groupId&gt;log4j&lt;/groupId&gt;
292            &lt;artifactId&gt;log4j&lt;/artifactId&gt;
293            &lt;version&gt;1.2.17&lt;/version&gt;
294            &lt;scope&gt;provided&lt;/scope&gt;
295        &lt;/dependency&gt;
296
297        &lt;dependency&gt;
298            &lt;groupId&gt;org.apache.logging.log4j&lt;/groupId&gt;
299            &lt;artifactId&gt;log4j-api&lt;/artifactId&gt;
300            &lt;version&gt;2.14.1&lt;/version&gt;
301            &lt;scope&gt;provided&lt;/scope&gt;
302        &lt;/dependency&gt;
303        &lt;dependency&gt;
304            &lt;groupId&gt;org.apache.logging.log4j&lt;/groupId&gt;
305            &lt;artifactId&gt;log4j-core&lt;/artifactId&gt;
306            &lt;version&gt;2.14.1&lt;/version&gt;
307            &lt;scope&gt;provided&lt;/scope&gt;
308        &lt;/dependency&gt;
309
310
311        &lt;dependency&gt;
312            &lt;groupId&gt;commons-dbcp&lt;/groupId&gt;
313            &lt;artifactId&gt;commons-dbcp&lt;/artifactId&gt;
314            &lt;version&gt;1.4&lt;/version&gt;
315            &lt;scope&gt;test&lt;/scope&gt;
316        &lt;/dependency&gt;
317
318        &lt;dependency&gt;
319            &lt;groupId&gt;org.firebirdsql.jdbc&lt;/groupId&gt;
320            &lt;artifactId&gt;jaybird&lt;/artifactId&gt;
321            &lt;version&gt;4.0.2.java8&lt;/version&gt;
322            &lt;scope&gt;test&lt;/scope&gt;
323        &lt;/dependency&gt;
324
325        &lt;dependency&gt;
326            &lt;groupId&gt;org.firebirdsql&lt;/groupId&gt;
327            &lt;artifactId&gt;firebird-testcontainers-java&lt;/artifactId&gt;
328            &lt;version&gt;1.1.0&lt;/version&gt;
329            &lt;scope&gt;test&lt;/scope&gt;
330        &lt;/dependency&gt;
331
332        &lt;dependency&gt;
333            &lt;groupId&gt;com.h2database&lt;/groupId&gt;
334            &lt;artifactId&gt;h2&lt;/artifactId&gt;
335            &lt;version&gt;1.4.200&lt;/version&gt;
336            &lt;scope&gt;test&lt;/scope&gt;
337        &lt;/dependency&gt;
338
339        &lt;dependency&gt;
340            &lt;!-- using older version as 2.5.1 collides with ucanaccess --&gt;
341            &lt;groupId&gt;org.hsqldb&lt;/groupId&gt;
342            &lt;artifactId&gt;hsqldb&lt;/artifactId&gt;
343            &lt;version&gt;2.5.1&lt;/version&gt;
344            &lt;scope&gt;test&lt;/scope&gt;
345            &lt;!--            &lt;classifier&gt;debug&lt;/classifier&gt;--&gt;
346        &lt;/dependency&gt;
347
348        &lt;dependency&gt;
349            &lt;groupId&gt;org.apache.derby&lt;/groupId&gt;
350            &lt;artifactId&gt;derby&lt;/artifactId&gt;
351            &lt;version&gt;10.8.2.2&lt;/version&gt;
352            &lt;scope&gt;test&lt;/scope&gt;
353        &lt;/dependency&gt;
354
355        &lt;!-- OR -Djdk.tls.client.protocols=TLSv1 --&gt;
356        &lt;dependency&gt;
357            &lt;groupId&gt;com.microsoft.sqlserver&lt;/groupId&gt;
358            &lt;artifactId&gt;mssql-jdbc&lt;/artifactId&gt;
359            &lt;version&gt;8.4.1.jre8&lt;/version&gt;
360            &lt;scope&gt;test&lt;/scope&gt;
361        &lt;/dependency&gt;
362
363        &lt;dependency&gt;
364            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
365            &lt;artifactId&gt;mssqlserver&lt;/artifactId&gt;
366            &lt;version&gt;1.15.2&lt;/version&gt;
367            &lt;scope&gt;test&lt;/scope&gt;
368        &lt;/dependency&gt;
369
370        &lt;dependency&gt;
371            &lt;groupId&gt;mysql&lt;/groupId&gt;
372            &lt;artifactId&gt;mysql-connector-java&lt;/artifactId&gt;
373            &lt;version&gt;8.0.23&lt;/version&gt;
374            &lt;scope&gt;test&lt;/scope&gt;
375        &lt;/dependency&gt;
376
377        &lt;dependency&gt;
378            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
379            &lt;artifactId&gt;mysql&lt;/artifactId&gt;
380            &lt;version&gt;1.15.2&lt;/version&gt;
381            &lt;scope&gt;test&lt;/scope&gt;
382        &lt;/dependency&gt;
383
384        &lt;dependency&gt;
385            &lt;groupId&gt;net.sourceforge.jtds&lt;/groupId&gt;
386            &lt;artifactId&gt;jtds&lt;/artifactId&gt;
387            &lt;version&gt;1.3.1&lt;/version&gt;
388            &lt;scope&gt;test&lt;/scope&gt;
389        &lt;/dependency&gt;
390
391        &lt;dependency&gt;
392            &lt;groupId&gt;com.oracle.database.jdbc&lt;/groupId&gt;
393            &lt;artifactId&gt;ojdbc8&lt;/artifactId&gt;
394            &lt;version&gt;21.3.0.0&lt;/version&gt;
395            &lt;scope&gt;test&lt;/scope&gt;
396        &lt;/dependency&gt;
397
398        &lt;!--        &lt;dependency&gt;--&gt;
399        &lt;!--            &lt;groupId&gt;com.oracle&lt;/groupId&gt;--&gt;
400        &lt;!--            &lt;artifactId&gt;ojdbc6&lt;/artifactId&gt;--&gt;
401        &lt;!--            &lt;version&gt;11.2.0.4&lt;/version&gt;--&gt;
402        &lt;!--            &lt;scope&gt;test&lt;/scope&gt;--&gt;
403        &lt;!--        &lt;/dependency&gt;--&gt;
404
405        &lt;dependency&gt;
406            &lt;groupId&gt;org.postgresql&lt;/groupId&gt;
407            &lt;artifactId&gt;postgresql&lt;/artifactId&gt;
408            &lt;version&gt;9.2-1004-jdbc41&lt;/version&gt;
409            &lt;scope&gt;test&lt;/scope&gt;
410        &lt;/dependency&gt;
411        &lt;dependency&gt;
412            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
413            &lt;artifactId&gt;postgresql&lt;/artifactId&gt;
414            &lt;version&gt;1.15.2&lt;/version&gt;
415            &lt;scope&gt;test&lt;/scope&gt;
416        &lt;/dependency&gt;
417
418        &lt;dependency&gt;
419            &lt;groupId&gt;org.xerial&lt;/groupId&gt;
420            &lt;artifactId&gt;sqlite-jdbc&lt;/artifactId&gt;
421            &lt;version&gt;3.34.0&lt;/version&gt;
422            &lt;scope&gt;test&lt;/scope&gt;
423        &lt;/dependency&gt;
424
425        &lt;dependency&gt;
426            &lt;groupId&gt;net.sf.ucanaccess&lt;/groupId&gt;
427            &lt;artifactId&gt;ucanaccess&lt;/artifactId&gt;
428            &lt;version&gt;5.0.1&lt;/version&gt;
429            &lt;scope&gt;test&lt;/scope&gt;
430        &lt;/dependency&gt;
431
432        &lt;dependency&gt;
433            &lt;groupId&gt;com.ibm.informix&lt;/groupId&gt;
434            &lt;artifactId&gt;informix-jdbc-complete&lt;/artifactId&gt;
435            &lt;version&gt;4.50.4.1&lt;/version&gt;
436            &lt;scope&gt;test&lt;/scope&gt;
437        &lt;/dependency&gt;
438
439        &lt;dependency&gt;
440            &lt;groupId&gt;com.toddfast.typeconverter&lt;/groupId&gt;
441            &lt;artifactId&gt;typeconverter&lt;/artifactId&gt;
442            &lt;version&gt;1.0&lt;/version&gt;
443            &lt;scope&gt;test&lt;/scope&gt;
444        &lt;/dependency&gt;
445
446        &lt;dependency&gt;
447            &lt;groupId&gt;org.reflections&lt;/groupId&gt;
448            &lt;artifactId&gt;reflections&lt;/artifactId&gt;
449            &lt;version&gt;0.9.11&lt;/version&gt;
450            &lt;scope&gt;test&lt;/scope&gt;
451        &lt;/dependency&gt;
452
453        &lt;!-- https://mvnrepository.com/artifact/javax.persistence/javax.persistence-api --&gt;
454        &lt;dependency&gt;
455            &lt;groupId&gt;javax.persistence&lt;/groupId&gt;
456            &lt;artifactId&gt;javax.persistence-api&lt;/artifactId&gt;
457            &lt;version&gt;2.2&lt;/version&gt;
458            &lt;scope&gt;test&lt;/scope&gt;
459        &lt;/dependency&gt;
460
461
462        &lt;!-- https://mvnrepository.com/artifact/org.codehaus.mojo/cobertura-maven-plugin --&gt;
463        &lt;!-- DOES NOT WORK with JAVA 8 + --&gt;
464        &lt;!--        &lt;dependency&gt;--&gt;
465        &lt;!--            &lt;groupId&gt;org.codehaus.mojo&lt;/groupId&gt;--&gt;
466        &lt;!--            &lt;artifactId&gt;cobertura-maven-plugin&lt;/artifactId&gt;--&gt;
467        &lt;!--            &lt;version&gt;2.7&lt;/version&gt;--&gt;
468        &lt;!--            &lt;scope&gt;test&lt;/scope&gt;--&gt;
469        &lt;!--            &lt;exclusions&gt;--&gt;
470        &lt;!--                &lt;exclusion&gt;--&gt;
471        &lt;!--                    &lt;groupId&gt;com.sun&lt;/groupId&gt;--&gt;
472        &lt;!--                    &lt;artifactId&gt;tools&lt;/artifactId&gt;--&gt;
473        &lt;!--                &lt;/exclusion&gt;--&gt;
474        &lt;!--            &lt;/exclusions&gt;--&gt;
475        &lt;!--        &lt;/dependency&gt;--&gt;
476
477
478    &lt;/dependencies&gt;
479
480&lt;/project&gt;
481

ANSWER

Answered 2022-Feb-11 at 22:39

Update: Version 1.6.9 has been released and should fix this issue! 🎉

This is actually a known bug, which is now open for quite a while: OSSRH-66257. There are two known workarounds:

1. Open Modules

As a workaround, use --add-opens to give the library causing the problem access to the required classes:

1[ERROR] Failed to execute goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy (injected-nexus-deploy) on project persism: Execution injected-nexus-deploy of goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:de
2ploy failed: An API incompatibility was encountered while executing org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
3
4
5[ERROR] import: Entry[import  from realm ClassRealm[maven.api, parent: null]]
6[ERROR]
7[ERROR] -----------------------------------------------------
8[ERROR] : Unable to make field private final java.util.Comparator java.util.TreeMap.comparator accessible: module java.base does not &quot;opens java.util&quot; to unnamed module @149f5761
9[ERROR] -&gt; [Help 1]
10org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy (injected-nexus-deploy) on project persism: Execution injected-nexus-deploy of goal org.sona
11type.plugins:nexus-staging-maven-plugin:1.6.8:deploy failed: An API incompatibility was encountered while executing org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
12
13Caused by: org.apache.maven.plugin.PluginExecutionException: Execution injected-nexus-deploy of goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy failed: An API incompatibility was encountered while executing org.son
14atype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
15&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;
16&lt;project xmlns=&quot;http://maven.apache.org/POM/4.0.0&quot;
17         xmlns:xsi=&quot;http://www.w3.org/2001/XMLSchema-instance&quot;
18         xsi:schemaLocation=&quot;http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd&quot;&gt;
19    &lt;modelVersion&gt;4.0.0&lt;/modelVersion&gt;
20
21    &lt;groupId&gt;io.github.sproket&lt;/groupId&gt;
22    &lt;artifactId&gt;persism&lt;/artifactId&gt;
23    &lt;version&gt;2.0.0&lt;/version&gt;
24    &lt;packaging&gt;jar&lt;/packaging&gt;
25
26
27    &lt;build&gt;
28        &lt;sourceDirectory&gt;./src&lt;/sourceDirectory&gt;
29        &lt;testSourceDirectory&gt;./test&lt;/testSourceDirectory&gt;
30        &lt;testResources&gt;
31            &lt;testResource&gt;
32                &lt;directory&gt;./test&lt;/directory&gt;
33                &lt;!--                &lt;includes&gt;--&gt;
34                &lt;!--                    &lt;include&gt;*.*&lt;/include&gt;--&gt;
35                &lt;!--                &lt;/includes&gt;--&gt;
36            &lt;/testResource&gt;
37        &lt;/testResources&gt;
38        &lt;plugins&gt;
39            &lt;plugin&gt;
40                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
41                &lt;artifactId&gt;maven-compiler-plugin&lt;/artifactId&gt;
42                &lt;version&gt;3.8.1&lt;/version&gt;
43                &lt;!-- MSSQL does not seem to able to connect with 16 --&gt;
44                &lt;configuration&gt;
45                    &lt;source&gt;17&lt;/source&gt;
46                    &lt;target&gt;17&lt;/target&gt;
47&lt;!--                    &lt;compilerArgs&gt;--&gt;
48&lt;!--                        &lt;arg&gt;-parameters&lt;/arg&gt;--&gt;
49&lt;!--                    &lt;/compilerArgs&gt;--&gt;
50                &lt;/configuration&gt;
51            &lt;/plugin&gt;
52
53            &lt;plugin&gt;
54                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
55                &lt;artifactId&gt;maven-jar-plugin&lt;/artifactId&gt;
56                &lt;version&gt;3.2.0&lt;/version&gt;
57                &lt;configuration&gt;
58                    &lt;archive&gt;
59                        &lt;manifestEntries&gt;
60                            &lt;Automatic-Module-Name&gt;sproket.github.io.persism&lt;/Automatic-Module-Name&gt;
61                        &lt;/manifestEntries&gt;
62                    &lt;/archive&gt;
63                &lt;/configuration&gt;
64            &lt;/plugin&gt;
65
66            &lt;plugin&gt;
67                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
68                &lt;artifactId&gt;maven-source-plugin&lt;/artifactId&gt;
69                &lt;version&gt;3.2.1&lt;/version&gt;
70                &lt;executions&gt;
71                    &lt;execution&gt;
72                        &lt;id&gt;attach-sources&lt;/id&gt;
73                        &lt;goals&gt;
74                            &lt;goal&gt;jar-no-fork&lt;/goal&gt;
75                        &lt;/goals&gt;
76                    &lt;/execution&gt;
77                &lt;/executions&gt;
78            &lt;/plugin&gt;
79            &lt;plugin&gt;
80                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
81                &lt;artifactId&gt;maven-javadoc-plugin&lt;/artifactId&gt;
82                &lt;version&gt;3.2.0&lt;/version&gt;
83                &lt;configuration&gt;
84                    &lt;excludePackageNames&gt;net.sf.persism.log*;net.sf.persism.logging.*&lt;/excludePackageNames&gt;
85                    &lt;source&gt;17&lt;/source&gt;
86                &lt;/configuration&gt;
87                &lt;executions&gt;
88                    &lt;execution&gt;
89                        &lt;id&gt;attach-javadocs&lt;/id&gt;
90                        &lt;goals&gt;
91                            &lt;goal&gt;jar&lt;/goal&gt;
92                        &lt;/goals&gt;
93                    &lt;/execution&gt;
94                &lt;/executions&gt;
95            &lt;/plugin&gt;
96            &lt;plugin&gt;
97                &lt;artifactId&gt;maven-surefire-plugin&lt;/artifactId&gt;
98                &lt;version&gt;3.0.0-M5&lt;/version&gt;
99                &lt;configuration&gt;
100                    &lt;excludedGroups&gt;net.sf.persism.categories.ExternalDB,net.sf.persism.categories.TestContainerDB
101                    &lt;/excludedGroups&gt;
102                &lt;/configuration&gt;
103            &lt;/plugin&gt;
104            &lt;plugin&gt;
105                &lt;groupId&gt;org.sonatype.plugins&lt;/groupId&gt;
106                &lt;artifactId&gt;nexus-staging-maven-plugin&lt;/artifactId&gt;
107                &lt;version&gt;1.6.8&lt;/version&gt;
108                &lt;extensions&gt;true&lt;/extensions&gt;
109                &lt;configuration&gt;
110                    &lt;serverId&gt;ossrh&lt;/serverId&gt;
111                    &lt;nexusUrl&gt;https://s01.oss.sonatype.org/&lt;/nexusUrl&gt;
112                    &lt;autoReleaseAfterClose&gt;true&lt;/autoReleaseAfterClose&gt;
113                &lt;/configuration&gt;
114            &lt;/plugin&gt;
115
116        &lt;/plugins&gt;
117    &lt;/build&gt;
118
119    &lt;name&gt;persism&lt;/name&gt;
120    &lt;description&gt;A zero ceremony ORM for Java&lt;/description&gt;
121    &lt;url&gt;https://github.com/sproket/Persism&lt;/url&gt;
122
123    &lt;properties&gt;
124        &lt;java.version&gt;17&lt;/java.version&gt;
125        &lt;maven.compiler.release&gt;17&lt;/maven.compiler.release&gt;
126        &lt;project.build.sourceEncoding&gt;UTF-8&lt;/project.build.sourceEncoding&gt;
127    &lt;/properties&gt;
128
129    &lt;licenses&gt;
130        &lt;license&gt;
131            &lt;name&gt;BSD-3-Clause License&lt;/name&gt;
132            &lt;url&gt;https://github.com/sproket/Persism/blob/master/license.txt&lt;/url&gt;
133        &lt;/license&gt;
134    &lt;/licenses&gt;
135
136    &lt;developers&gt;
137        &lt;developer&gt;
138            &lt;name&gt;Dan Howard&lt;/name&gt;
139            &lt;email&gt;--------------------------&lt;/email&gt;
140            &lt;organization&gt;io.github&lt;/organization&gt;
141            &lt;organizationUrl&gt;https://sproket.github.io/Persism/&lt;/organizationUrl&gt;
142        &lt;/developer&gt;
143    &lt;/developers&gt;
144
145    &lt;distributionManagement&gt;
146        &lt;snapshotRepository&gt;
147            &lt;id&gt;ossrh&lt;/id&gt;
148            &lt;url&gt;https://s01.oss.sonatype.org/content/repositories/snapshots&lt;/url&gt;
149        &lt;/snapshotRepository&gt;
150        &lt;repository&gt;
151            &lt;id&gt;ossrh&lt;/id&gt;
152            &lt;url&gt;https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/&lt;/url&gt;
153        &lt;/repository&gt;
154    &lt;/distributionManagement&gt;
155
156    &lt;scm&gt;
157        &lt;connection&gt;scm:git:git://github.com/sproket/Persism.git&lt;/connection&gt;
158        &lt;developerConnection&gt;scm:git:ssh://github.com/sproket/Persism.git&lt;/developerConnection&gt;
159        &lt;url&gt;https://github.com/sproket/Persism&lt;/url&gt;
160    &lt;/scm&gt;
161
162    &lt;profiles&gt;
163        &lt;profile&gt;
164            &lt;id&gt;include-test-containers-db&lt;/id&gt;
165            &lt;activation&gt;
166                &lt;activeByDefault&gt;false&lt;/activeByDefault&gt;
167            &lt;/activation&gt;
168            &lt;build&gt;
169                &lt;plugins&gt;
170                    &lt;plugin&gt;
171                        &lt;artifactId&gt;maven-surefire-plugin&lt;/artifactId&gt;
172                        &lt;version&gt;3.0.0-M5&lt;/version&gt;
173                        &lt;configuration&gt;
174                            &lt;excludedGroups&gt;net.sf.persism.categories.ExternalDB&lt;/excludedGroups&gt;
175                        &lt;/configuration&gt;
176                    &lt;/plugin&gt;
177                &lt;/plugins&gt;
178            &lt;/build&gt;
179        &lt;/profile&gt;
180
181        &lt;profile&gt;
182            &lt;id&gt;exclude-test-containers-db&lt;/id&gt;
183            &lt;activation&gt;
184                &lt;activeByDefault&gt;false&lt;/activeByDefault&gt;
185            &lt;/activation&gt;
186            &lt;build&gt;
187                &lt;plugins&gt;
188                    &lt;plugin&gt;
189                        &lt;artifactId&gt;maven-surefire-plugin&lt;/artifactId&gt;
190                        &lt;version&gt;3.0.0-M5&lt;/version&gt;
191                        &lt;configuration&gt;
192                            &lt;excludedGroups&gt;net.sf.persism.categories.TestContainerDB&lt;/excludedGroups&gt;
193                        &lt;/configuration&gt;
194                    &lt;/plugin&gt;
195                &lt;/plugins&gt;
196            &lt;/build&gt;
197        &lt;/profile&gt;
198
199        &lt;profile&gt;
200            &lt;id&gt;release&lt;/id&gt;
201            &lt;build&gt;
202                &lt;plugins&gt;
203                    &lt;plugin&gt;
204                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
205                        &lt;artifactId&gt;maven-jar-plugin&lt;/artifactId&gt;
206                        &lt;version&gt;3.2.0&lt;/version&gt;
207                        &lt;configuration&gt;
208                            &lt;archive&gt;
209                                &lt;manifestEntries&gt;
210                                    &lt;Automatic-Module-Name&gt;sproket.github.io.persism&lt;/Automatic-Module-Name&gt;
211                                &lt;/manifestEntries&gt;
212                            &lt;/archive&gt;
213                        &lt;/configuration&gt;
214                    &lt;/plugin&gt;
215                    &lt;plugin&gt;
216                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
217                        &lt;artifactId&gt;maven-source-plugin&lt;/artifactId&gt;
218                        &lt;version&gt;3.2.1&lt;/version&gt;
219                        &lt;executions&gt;
220                            &lt;execution&gt;
221                                &lt;id&gt;attach-sources&lt;/id&gt;
222                                &lt;goals&gt;
223                                    &lt;goal&gt;jar-no-fork&lt;/goal&gt;
224                                &lt;/goals&gt;
225                            &lt;/execution&gt;
226                        &lt;/executions&gt;
227                    &lt;/plugin&gt;
228                    &lt;plugin&gt;
229                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
230                        &lt;artifactId&gt;maven-javadoc-plugin&lt;/artifactId&gt;
231                        &lt;version&gt;3.2.0&lt;/version&gt;
232                        &lt;executions&gt;
233                            &lt;execution&gt;
234                                &lt;id&gt;attach-javadocs&lt;/id&gt;
235                                &lt;goals&gt;
236                                    &lt;goal&gt;jar&lt;/goal&gt;
237                                &lt;/goals&gt;
238                                &lt;configuration&gt;
239                                    &lt;release&gt;17&lt;/release&gt;
240                                &lt;/configuration&gt;
241                            &lt;/execution&gt;
242                        &lt;/executions&gt;
243                    &lt;/plugin&gt;
244                    &lt;plugin&gt;
245                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
246                        &lt;artifactId&gt;maven-gpg-plugin&lt;/artifactId&gt;
247                        &lt;version&gt;3.0.1&lt;/version&gt;
248                        &lt;executions&gt;
249                            &lt;execution&gt;
250                                &lt;id&gt;sign-artifacts&lt;/id&gt;
251                                &lt;phase&gt;verify&lt;/phase&gt;
252                                &lt;goals&gt;
253                                    &lt;goal&gt;sign&lt;/goal&gt;
254                                &lt;/goals&gt;
255                            &lt;/execution&gt;
256                        &lt;/executions&gt;
257                    &lt;/plugin&gt;
258                &lt;/plugins&gt;
259            &lt;/build&gt;
260        &lt;/profile&gt;
261    &lt;/profiles&gt;
262
263
264    &lt;dependencies&gt;
265        &lt;dependency&gt;
266            &lt;groupId&gt;junit&lt;/groupId&gt;
267            &lt;artifactId&gt;junit&lt;/artifactId&gt;
268            &lt;version&gt;4.13.2&lt;/version&gt;
269            &lt;scope&gt;test&lt;/scope&gt;
270        &lt;/dependency&gt;
271        &lt;dependency&gt;
272            &lt;groupId&gt;com.carrotsearch&lt;/groupId&gt;
273            &lt;artifactId&gt;junit-benchmarks&lt;/artifactId&gt;
274            &lt;version&gt;0.7.2&lt;/version&gt;
275            &lt;scope&gt;test&lt;/scope&gt;
276        &lt;/dependency&gt;
277        &lt;dependency&gt;
278            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
279            &lt;artifactId&gt;testcontainers&lt;/artifactId&gt;
280            &lt;version&gt;1.15.2&lt;/version&gt;
281            &lt;scope&gt;test&lt;/scope&gt;
282        &lt;/dependency&gt;
283        &lt;dependency&gt;
284            &lt;groupId&gt;ch.qos.logback&lt;/groupId&gt;
285            &lt;artifactId&gt;logback-classic&lt;/artifactId&gt;
286            &lt;version&gt;1.2.7&lt;/version&gt;
287            &lt;scope&gt;provided&lt;/scope&gt;
288        &lt;/dependency&gt;
289
290        &lt;dependency&gt;
291            &lt;groupId&gt;log4j&lt;/groupId&gt;
292            &lt;artifactId&gt;log4j&lt;/artifactId&gt;
293            &lt;version&gt;1.2.17&lt;/version&gt;
294            &lt;scope&gt;provided&lt;/scope&gt;
295        &lt;/dependency&gt;
296
297        &lt;dependency&gt;
298            &lt;groupId&gt;org.apache.logging.log4j&lt;/groupId&gt;
299            &lt;artifactId&gt;log4j-api&lt;/artifactId&gt;
300            &lt;version&gt;2.14.1&lt;/version&gt;
301            &lt;scope&gt;provided&lt;/scope&gt;
302        &lt;/dependency&gt;
303        &lt;dependency&gt;
304            &lt;groupId&gt;org.apache.logging.log4j&lt;/groupId&gt;
305            &lt;artifactId&gt;log4j-core&lt;/artifactId&gt;
306            &lt;version&gt;2.14.1&lt;/version&gt;
307            &lt;scope&gt;provided&lt;/scope&gt;
308        &lt;/dependency&gt;
309
310
311        &lt;dependency&gt;
312            &lt;groupId&gt;commons-dbcp&lt;/groupId&gt;
313            &lt;artifactId&gt;commons-dbcp&lt;/artifactId&gt;
314            &lt;version&gt;1.4&lt;/version&gt;
315            &lt;scope&gt;test&lt;/scope&gt;
316        &lt;/dependency&gt;
317
318        &lt;dependency&gt;
319            &lt;groupId&gt;org.firebirdsql.jdbc&lt;/groupId&gt;
320            &lt;artifactId&gt;jaybird&lt;/artifactId&gt;
321            &lt;version&gt;4.0.2.java8&lt;/version&gt;
322            &lt;scope&gt;test&lt;/scope&gt;
323        &lt;/dependency&gt;
324
325        &lt;dependency&gt;
326            &lt;groupId&gt;org.firebirdsql&lt;/groupId&gt;
327            &lt;artifactId&gt;firebird-testcontainers-java&lt;/artifactId&gt;
328            &lt;version&gt;1.1.0&lt;/version&gt;
329            &lt;scope&gt;test&lt;/scope&gt;
330        &lt;/dependency&gt;
331
332        &lt;dependency&gt;
333            &lt;groupId&gt;com.h2database&lt;/groupId&gt;
334            &lt;artifactId&gt;h2&lt;/artifactId&gt;
335            &lt;version&gt;1.4.200&lt;/version&gt;
336            &lt;scope&gt;test&lt;/scope&gt;
337        &lt;/dependency&gt;
338
339        &lt;dependency&gt;
340            &lt;!-- using older version as 2.5.1 collides with ucanaccess --&gt;
341            &lt;groupId&gt;org.hsqldb&lt;/groupId&gt;
342            &lt;artifactId&gt;hsqldb&lt;/artifactId&gt;
343            &lt;version&gt;2.5.1&lt;/version&gt;
344            &lt;scope&gt;test&lt;/scope&gt;
345            &lt;!--            &lt;classifier&gt;debug&lt;/classifier&gt;--&gt;
346        &lt;/dependency&gt;
347
348        &lt;dependency&gt;
349            &lt;groupId&gt;org.apache.derby&lt;/groupId&gt;
350            &lt;artifactId&gt;derby&lt;/artifactId&gt;
351            &lt;version&gt;10.8.2.2&lt;/version&gt;
352            &lt;scope&gt;test&lt;/scope&gt;
353        &lt;/dependency&gt;
354
355        &lt;!-- OR -Djdk.tls.client.protocols=TLSv1 --&gt;
356        &lt;dependency&gt;
357            &lt;groupId&gt;com.microsoft.sqlserver&lt;/groupId&gt;
358            &lt;artifactId&gt;mssql-jdbc&lt;/artifactId&gt;
359            &lt;version&gt;8.4.1.jre8&lt;/version&gt;
360            &lt;scope&gt;test&lt;/scope&gt;
361        &lt;/dependency&gt;
362
363        &lt;dependency&gt;
364            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
365            &lt;artifactId&gt;mssqlserver&lt;/artifactId&gt;
366            &lt;version&gt;1.15.2&lt;/version&gt;
367            &lt;scope&gt;test&lt;/scope&gt;
368        &lt;/dependency&gt;
369
370        &lt;dependency&gt;
371            &lt;groupId&gt;mysql&lt;/groupId&gt;
372            &lt;artifactId&gt;mysql-connector-java&lt;/artifactId&gt;
373            &lt;version&gt;8.0.23&lt;/version&gt;
374            &lt;scope&gt;test&lt;/scope&gt;
375        &lt;/dependency&gt;
376
377        &lt;dependency&gt;
378            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
379            &lt;artifactId&gt;mysql&lt;/artifactId&gt;
380            &lt;version&gt;1.15.2&lt;/version&gt;
381            &lt;scope&gt;test&lt;/scope&gt;
382        &lt;/dependency&gt;
383
384        &lt;dependency&gt;
385            &lt;groupId&gt;net.sourceforge.jtds&lt;/groupId&gt;
386            &lt;artifactId&gt;jtds&lt;/artifactId&gt;
387            &lt;version&gt;1.3.1&lt;/version&gt;
388            &lt;scope&gt;test&lt;/scope&gt;
389        &lt;/dependency&gt;
390
391        &lt;dependency&gt;
392            &lt;groupId&gt;com.oracle.database.jdbc&lt;/groupId&gt;
393            &lt;artifactId&gt;ojdbc8&lt;/artifactId&gt;
394            &lt;version&gt;21.3.0.0&lt;/version&gt;
395            &lt;scope&gt;test&lt;/scope&gt;
396        &lt;/dependency&gt;
397
398        &lt;!--        &lt;dependency&gt;--&gt;
399        &lt;!--            &lt;groupId&gt;com.oracle&lt;/groupId&gt;--&gt;
400        &lt;!--            &lt;artifactId&gt;ojdbc6&lt;/artifactId&gt;--&gt;
401        &lt;!--            &lt;version&gt;11.2.0.4&lt;/version&gt;--&gt;
402        &lt;!--            &lt;scope&gt;test&lt;/scope&gt;--&gt;
403        &lt;!--        &lt;/dependency&gt;--&gt;
404
405        &lt;dependency&gt;
406            &lt;groupId&gt;org.postgresql&lt;/groupId&gt;
407            &lt;artifactId&gt;postgresql&lt;/artifactId&gt;
408            &lt;version&gt;9.2-1004-jdbc41&lt;/version&gt;
409            &lt;scope&gt;test&lt;/scope&gt;
410        &lt;/dependency&gt;
411        &lt;dependency&gt;
412            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
413            &lt;artifactId&gt;postgresql&lt;/artifactId&gt;
414            &lt;version&gt;1.15.2&lt;/version&gt;
415            &lt;scope&gt;test&lt;/scope&gt;
416        &lt;/dependency&gt;
417
418        &lt;dependency&gt;
419            &lt;groupId&gt;org.xerial&lt;/groupId&gt;
420            &lt;artifactId&gt;sqlite-jdbc&lt;/artifactId&gt;
421            &lt;version&gt;3.34.0&lt;/version&gt;
422            &lt;scope&gt;test&lt;/scope&gt;
423        &lt;/dependency&gt;
424
425        &lt;dependency&gt;
426            &lt;groupId&gt;net.sf.ucanaccess&lt;/groupId&gt;
427            &lt;artifactId&gt;ucanaccess&lt;/artifactId&gt;
428            &lt;version&gt;5.0.1&lt;/version&gt;
429            &lt;scope&gt;test&lt;/scope&gt;
430        &lt;/dependency&gt;
431
432        &lt;dependency&gt;
433            &lt;groupId&gt;com.ibm.informix&lt;/groupId&gt;
434            &lt;artifactId&gt;informix-jdbc-complete&lt;/artifactId&gt;
435            &lt;version&gt;4.50.4.1&lt;/version&gt;
436            &lt;scope&gt;test&lt;/scope&gt;
437        &lt;/dependency&gt;
438
439        &lt;dependency&gt;
440            &lt;groupId&gt;com.toddfast.typeconverter&lt;/groupId&gt;
441            &lt;artifactId&gt;typeconverter&lt;/artifactId&gt;
442            &lt;version&gt;1.0&lt;/version&gt;
443            &lt;scope&gt;test&lt;/scope&gt;
444        &lt;/dependency&gt;
445
446        &lt;dependency&gt;
447            &lt;groupId&gt;org.reflections&lt;/groupId&gt;
448            &lt;artifactId&gt;reflections&lt;/artifactId&gt;
449            &lt;version&gt;0.9.11&lt;/version&gt;
450            &lt;scope&gt;test&lt;/scope&gt;
451        &lt;/dependency&gt;
452
453        &lt;!-- https://mvnrepository.com/artifact/javax.persistence/javax.persistence-api --&gt;
454        &lt;dependency&gt;
455            &lt;groupId&gt;javax.persistence&lt;/groupId&gt;
456            &lt;artifactId&gt;javax.persistence-api&lt;/artifactId&gt;
457            &lt;version&gt;2.2&lt;/version&gt;
458            &lt;scope&gt;test&lt;/scope&gt;
459        &lt;/dependency&gt;
460
461
462        &lt;!-- https://mvnrepository.com/artifact/org.codehaus.mojo/cobertura-maven-plugin --&gt;
463        &lt;!-- DOES NOT WORK with JAVA 8 + --&gt;
464        &lt;!--        &lt;dependency&gt;--&gt;
465        &lt;!--            &lt;groupId&gt;org.codehaus.mojo&lt;/groupId&gt;--&gt;
466        &lt;!--            &lt;artifactId&gt;cobertura-maven-plugin&lt;/artifactId&gt;--&gt;
467        &lt;!--            &lt;version&gt;2.7&lt;/version&gt;--&gt;
468        &lt;!--            &lt;scope&gt;test&lt;/scope&gt;--&gt;
469        &lt;!--            &lt;exclusions&gt;--&gt;
470        &lt;!--                &lt;exclusion&gt;--&gt;
471        &lt;!--                    &lt;groupId&gt;com.sun&lt;/groupId&gt;--&gt;
472        &lt;!--                    &lt;artifactId&gt;tools&lt;/artifactId&gt;--&gt;
473        &lt;!--                &lt;/exclusion&gt;--&gt;
474        &lt;!--            &lt;/exclusions&gt;--&gt;
475        &lt;!--        &lt;/dependency&gt;--&gt;
476
477
478    &lt;/dependencies&gt;
479
480&lt;/project&gt;
481export MAVEN_OPTS=&quot;--add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED&quot;
482mvn deploy
483

2. Manage Upstream Dependencies

Or you can update the library that causes the problem:

1[ERROR] Failed to execute goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy (injected-nexus-deploy) on project persism: Execution injected-nexus-deploy of goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:de
2ploy failed: An API incompatibility was encountered while executing org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
3
4
5[ERROR] import: Entry[import  from realm ClassRealm[maven.api, parent: null]]
6[ERROR]
7[ERROR] -----------------------------------------------------
8[ERROR] : Unable to make field private final java.util.Comparator java.util.TreeMap.comparator accessible: module java.base does not &quot;opens java.util&quot; to unnamed module @149f5761
9[ERROR] -&gt; [Help 1]
10org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy (injected-nexus-deploy) on project persism: Execution injected-nexus-deploy of goal org.sona
11type.plugins:nexus-staging-maven-plugin:1.6.8:deploy failed: An API incompatibility was encountered while executing org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
12
13Caused by: org.apache.maven.plugin.PluginExecutionException: Execution injected-nexus-deploy of goal org.sonatype.plugins:nexus-staging-maven-plugin:1.6.8:deploy failed: An API incompatibility was encountered while executing org.son
14atype.plugins:nexus-staging-maven-plugin:1.6.8:deploy: java.lang.ExceptionInInitializerError: null
15&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;
16&lt;project xmlns=&quot;http://maven.apache.org/POM/4.0.0&quot;
17         xmlns:xsi=&quot;http://www.w3.org/2001/XMLSchema-instance&quot;
18         xsi:schemaLocation=&quot;http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd&quot;&gt;
19    &lt;modelVersion&gt;4.0.0&lt;/modelVersion&gt;
20
21    &lt;groupId&gt;io.github.sproket&lt;/groupId&gt;
22    &lt;artifactId&gt;persism&lt;/artifactId&gt;
23    &lt;version&gt;2.0.0&lt;/version&gt;
24    &lt;packaging&gt;jar&lt;/packaging&gt;
25
26
27    &lt;build&gt;
28        &lt;sourceDirectory&gt;./src&lt;/sourceDirectory&gt;
29        &lt;testSourceDirectory&gt;./test&lt;/testSourceDirectory&gt;
30        &lt;testResources&gt;
31            &lt;testResource&gt;
32                &lt;directory&gt;./test&lt;/directory&gt;
33                &lt;!--                &lt;includes&gt;--&gt;
34                &lt;!--                    &lt;include&gt;*.*&lt;/include&gt;--&gt;
35                &lt;!--                &lt;/includes&gt;--&gt;
36            &lt;/testResource&gt;
37        &lt;/testResources&gt;
38        &lt;plugins&gt;
39            &lt;plugin&gt;
40                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
41                &lt;artifactId&gt;maven-compiler-plugin&lt;/artifactId&gt;
42                &lt;version&gt;3.8.1&lt;/version&gt;
43                &lt;!-- MSSQL does not seem to able to connect with 16 --&gt;
44                &lt;configuration&gt;
45                    &lt;source&gt;17&lt;/source&gt;
46                    &lt;target&gt;17&lt;/target&gt;
47&lt;!--                    &lt;compilerArgs&gt;--&gt;
48&lt;!--                        &lt;arg&gt;-parameters&lt;/arg&gt;--&gt;
49&lt;!--                    &lt;/compilerArgs&gt;--&gt;
50                &lt;/configuration&gt;
51            &lt;/plugin&gt;
52
53            &lt;plugin&gt;
54                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
55                &lt;artifactId&gt;maven-jar-plugin&lt;/artifactId&gt;
56                &lt;version&gt;3.2.0&lt;/version&gt;
57                &lt;configuration&gt;
58                    &lt;archive&gt;
59                        &lt;manifestEntries&gt;
60                            &lt;Automatic-Module-Name&gt;sproket.github.io.persism&lt;/Automatic-Module-Name&gt;
61                        &lt;/manifestEntries&gt;
62                    &lt;/archive&gt;
63                &lt;/configuration&gt;
64            &lt;/plugin&gt;
65
66            &lt;plugin&gt;
67                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
68                &lt;artifactId&gt;maven-source-plugin&lt;/artifactId&gt;
69                &lt;version&gt;3.2.1&lt;/version&gt;
70                &lt;executions&gt;
71                    &lt;execution&gt;
72                        &lt;id&gt;attach-sources&lt;/id&gt;
73                        &lt;goals&gt;
74                            &lt;goal&gt;jar-no-fork&lt;/goal&gt;
75                        &lt;/goals&gt;
76                    &lt;/execution&gt;
77                &lt;/executions&gt;
78            &lt;/plugin&gt;
79            &lt;plugin&gt;
80                &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
81                &lt;artifactId&gt;maven-javadoc-plugin&lt;/artifactId&gt;
82                &lt;version&gt;3.2.0&lt;/version&gt;
83                &lt;configuration&gt;
84                    &lt;excludePackageNames&gt;net.sf.persism.log*;net.sf.persism.logging.*&lt;/excludePackageNames&gt;
85                    &lt;source&gt;17&lt;/source&gt;
86                &lt;/configuration&gt;
87                &lt;executions&gt;
88                    &lt;execution&gt;
89                        &lt;id&gt;attach-javadocs&lt;/id&gt;
90                        &lt;goals&gt;
91                            &lt;goal&gt;jar&lt;/goal&gt;
92                        &lt;/goals&gt;
93                    &lt;/execution&gt;
94                &lt;/executions&gt;
95            &lt;/plugin&gt;
96            &lt;plugin&gt;
97                &lt;artifactId&gt;maven-surefire-plugin&lt;/artifactId&gt;
98                &lt;version&gt;3.0.0-M5&lt;/version&gt;
99                &lt;configuration&gt;
100                    &lt;excludedGroups&gt;net.sf.persism.categories.ExternalDB,net.sf.persism.categories.TestContainerDB
101                    &lt;/excludedGroups&gt;
102                &lt;/configuration&gt;
103            &lt;/plugin&gt;
104            &lt;plugin&gt;
105                &lt;groupId&gt;org.sonatype.plugins&lt;/groupId&gt;
106                &lt;artifactId&gt;nexus-staging-maven-plugin&lt;/artifactId&gt;
107                &lt;version&gt;1.6.8&lt;/version&gt;
108                &lt;extensions&gt;true&lt;/extensions&gt;
109                &lt;configuration&gt;
110                    &lt;serverId&gt;ossrh&lt;/serverId&gt;
111                    &lt;nexusUrl&gt;https://s01.oss.sonatype.org/&lt;/nexusUrl&gt;
112                    &lt;autoReleaseAfterClose&gt;true&lt;/autoReleaseAfterClose&gt;
113                &lt;/configuration&gt;
114            &lt;/plugin&gt;
115
116        &lt;/plugins&gt;
117    &lt;/build&gt;
118
119    &lt;name&gt;persism&lt;/name&gt;
120    &lt;description&gt;A zero ceremony ORM for Java&lt;/description&gt;
121    &lt;url&gt;https://github.com/sproket/Persism&lt;/url&gt;
122
123    &lt;properties&gt;
124        &lt;java.version&gt;17&lt;/java.version&gt;
125        &lt;maven.compiler.release&gt;17&lt;/maven.compiler.release&gt;
126        &lt;project.build.sourceEncoding&gt;UTF-8&lt;/project.build.sourceEncoding&gt;
127    &lt;/properties&gt;
128
129    &lt;licenses&gt;
130        &lt;license&gt;
131            &lt;name&gt;BSD-3-Clause License&lt;/name&gt;
132            &lt;url&gt;https://github.com/sproket/Persism/blob/master/license.txt&lt;/url&gt;
133        &lt;/license&gt;
134    &lt;/licenses&gt;
135
136    &lt;developers&gt;
137        &lt;developer&gt;
138            &lt;name&gt;Dan Howard&lt;/name&gt;
139            &lt;email&gt;--------------------------&lt;/email&gt;
140            &lt;organization&gt;io.github&lt;/organization&gt;
141            &lt;organizationUrl&gt;https://sproket.github.io/Persism/&lt;/organizationUrl&gt;
142        &lt;/developer&gt;
143    &lt;/developers&gt;
144
145    &lt;distributionManagement&gt;
146        &lt;snapshotRepository&gt;
147            &lt;id&gt;ossrh&lt;/id&gt;
148            &lt;url&gt;https://s01.oss.sonatype.org/content/repositories/snapshots&lt;/url&gt;
149        &lt;/snapshotRepository&gt;
150        &lt;repository&gt;
151            &lt;id&gt;ossrh&lt;/id&gt;
152            &lt;url&gt;https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/&lt;/url&gt;
153        &lt;/repository&gt;
154    &lt;/distributionManagement&gt;
155
156    &lt;scm&gt;
157        &lt;connection&gt;scm:git:git://github.com/sproket/Persism.git&lt;/connection&gt;
158        &lt;developerConnection&gt;scm:git:ssh://github.com/sproket/Persism.git&lt;/developerConnection&gt;
159        &lt;url&gt;https://github.com/sproket/Persism&lt;/url&gt;
160    &lt;/scm&gt;
161
162    &lt;profiles&gt;
163        &lt;profile&gt;
164            &lt;id&gt;include-test-containers-db&lt;/id&gt;
165            &lt;activation&gt;
166                &lt;activeByDefault&gt;false&lt;/activeByDefault&gt;
167            &lt;/activation&gt;
168            &lt;build&gt;
169                &lt;plugins&gt;
170                    &lt;plugin&gt;
171                        &lt;artifactId&gt;maven-surefire-plugin&lt;/artifactId&gt;
172                        &lt;version&gt;3.0.0-M5&lt;/version&gt;
173                        &lt;configuration&gt;
174                            &lt;excludedGroups&gt;net.sf.persism.categories.ExternalDB&lt;/excludedGroups&gt;
175                        &lt;/configuration&gt;
176                    &lt;/plugin&gt;
177                &lt;/plugins&gt;
178            &lt;/build&gt;
179        &lt;/profile&gt;
180
181        &lt;profile&gt;
182            &lt;id&gt;exclude-test-containers-db&lt;/id&gt;
183            &lt;activation&gt;
184                &lt;activeByDefault&gt;false&lt;/activeByDefault&gt;
185            &lt;/activation&gt;
186            &lt;build&gt;
187                &lt;plugins&gt;
188                    &lt;plugin&gt;
189                        &lt;artifactId&gt;maven-surefire-plugin&lt;/artifactId&gt;
190                        &lt;version&gt;3.0.0-M5&lt;/version&gt;
191                        &lt;configuration&gt;
192                            &lt;excludedGroups&gt;net.sf.persism.categories.TestContainerDB&lt;/excludedGroups&gt;
193                        &lt;/configuration&gt;
194                    &lt;/plugin&gt;
195                &lt;/plugins&gt;
196            &lt;/build&gt;
197        &lt;/profile&gt;
198
199        &lt;profile&gt;
200            &lt;id&gt;release&lt;/id&gt;
201            &lt;build&gt;
202                &lt;plugins&gt;
203                    &lt;plugin&gt;
204                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
205                        &lt;artifactId&gt;maven-jar-plugin&lt;/artifactId&gt;
206                        &lt;version&gt;3.2.0&lt;/version&gt;
207                        &lt;configuration&gt;
208                            &lt;archive&gt;
209                                &lt;manifestEntries&gt;
210                                    &lt;Automatic-Module-Name&gt;sproket.github.io.persism&lt;/Automatic-Module-Name&gt;
211                                &lt;/manifestEntries&gt;
212                            &lt;/archive&gt;
213                        &lt;/configuration&gt;
214                    &lt;/plugin&gt;
215                    &lt;plugin&gt;
216                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
217                        &lt;artifactId&gt;maven-source-plugin&lt;/artifactId&gt;
218                        &lt;version&gt;3.2.1&lt;/version&gt;
219                        &lt;executions&gt;
220                            &lt;execution&gt;
221                                &lt;id&gt;attach-sources&lt;/id&gt;
222                                &lt;goals&gt;
223                                    &lt;goal&gt;jar-no-fork&lt;/goal&gt;
224                                &lt;/goals&gt;
225                            &lt;/execution&gt;
226                        &lt;/executions&gt;
227                    &lt;/plugin&gt;
228                    &lt;plugin&gt;
229                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
230                        &lt;artifactId&gt;maven-javadoc-plugin&lt;/artifactId&gt;
231                        &lt;version&gt;3.2.0&lt;/version&gt;
232                        &lt;executions&gt;
233                            &lt;execution&gt;
234                                &lt;id&gt;attach-javadocs&lt;/id&gt;
235                                &lt;goals&gt;
236                                    &lt;goal&gt;jar&lt;/goal&gt;
237                                &lt;/goals&gt;
238                                &lt;configuration&gt;
239                                    &lt;release&gt;17&lt;/release&gt;
240                                &lt;/configuration&gt;
241                            &lt;/execution&gt;
242                        &lt;/executions&gt;
243                    &lt;/plugin&gt;
244                    &lt;plugin&gt;
245                        &lt;groupId&gt;org.apache.maven.plugins&lt;/groupId&gt;
246                        &lt;artifactId&gt;maven-gpg-plugin&lt;/artifactId&gt;
247                        &lt;version&gt;3.0.1&lt;/version&gt;
248                        &lt;executions&gt;
249                            &lt;execution&gt;
250                                &lt;id&gt;sign-artifacts&lt;/id&gt;
251                                &lt;phase&gt;verify&lt;/phase&gt;
252                                &lt;goals&gt;
253                                    &lt;goal&gt;sign&lt;/goal&gt;
254                                &lt;/goals&gt;
255                            &lt;/execution&gt;
256                        &lt;/executions&gt;
257                    &lt;/plugin&gt;
258                &lt;/plugins&gt;
259            &lt;/build&gt;
260        &lt;/profile&gt;
261    &lt;/profiles&gt;
262
263
264    &lt;dependencies&gt;
265        &lt;dependency&gt;
266            &lt;groupId&gt;junit&lt;/groupId&gt;
267            &lt;artifactId&gt;junit&lt;/artifactId&gt;
268            &lt;version&gt;4.13.2&lt;/version&gt;
269            &lt;scope&gt;test&lt;/scope&gt;
270        &lt;/dependency&gt;
271        &lt;dependency&gt;
272            &lt;groupId&gt;com.carrotsearch&lt;/groupId&gt;
273            &lt;artifactId&gt;junit-benchmarks&lt;/artifactId&gt;
274            &lt;version&gt;0.7.2&lt;/version&gt;
275            &lt;scope&gt;test&lt;/scope&gt;
276        &lt;/dependency&gt;
277        &lt;dependency&gt;
278            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
279            &lt;artifactId&gt;testcontainers&lt;/artifactId&gt;
280            &lt;version&gt;1.15.2&lt;/version&gt;
281            &lt;scope&gt;test&lt;/scope&gt;
282        &lt;/dependency&gt;
283        &lt;dependency&gt;
284            &lt;groupId&gt;ch.qos.logback&lt;/groupId&gt;
285            &lt;artifactId&gt;logback-classic&lt;/artifactId&gt;
286            &lt;version&gt;1.2.7&lt;/version&gt;
287            &lt;scope&gt;provided&lt;/scope&gt;
288        &lt;/dependency&gt;
289
290        &lt;dependency&gt;
291            &lt;groupId&gt;log4j&lt;/groupId&gt;
292            &lt;artifactId&gt;log4j&lt;/artifactId&gt;
293            &lt;version&gt;1.2.17&lt;/version&gt;
294            &lt;scope&gt;provided&lt;/scope&gt;
295        &lt;/dependency&gt;
296
297        &lt;dependency&gt;
298            &lt;groupId&gt;org.apache.logging.log4j&lt;/groupId&gt;
299            &lt;artifactId&gt;log4j-api&lt;/artifactId&gt;
300            &lt;version&gt;2.14.1&lt;/version&gt;
301            &lt;scope&gt;provided&lt;/scope&gt;
302        &lt;/dependency&gt;
303        &lt;dependency&gt;
304            &lt;groupId&gt;org.apache.logging.log4j&lt;/groupId&gt;
305            &lt;artifactId&gt;log4j-core&lt;/artifactId&gt;
306            &lt;version&gt;2.14.1&lt;/version&gt;
307            &lt;scope&gt;provided&lt;/scope&gt;
308        &lt;/dependency&gt;
309
310
311        &lt;dependency&gt;
312            &lt;groupId&gt;commons-dbcp&lt;/groupId&gt;
313            &lt;artifactId&gt;commons-dbcp&lt;/artifactId&gt;
314            &lt;version&gt;1.4&lt;/version&gt;
315            &lt;scope&gt;test&lt;/scope&gt;
316        &lt;/dependency&gt;
317
318        &lt;dependency&gt;
319            &lt;groupId&gt;org.firebirdsql.jdbc&lt;/groupId&gt;
320            &lt;artifactId&gt;jaybird&lt;/artifactId&gt;
321            &lt;version&gt;4.0.2.java8&lt;/version&gt;
322            &lt;scope&gt;test&lt;/scope&gt;
323        &lt;/dependency&gt;
324
325        &lt;dependency&gt;
326            &lt;groupId&gt;org.firebirdsql&lt;/groupId&gt;
327            &lt;artifactId&gt;firebird-testcontainers-java&lt;/artifactId&gt;
328            &lt;version&gt;1.1.0&lt;/version&gt;
329            &lt;scope&gt;test&lt;/scope&gt;
330        &lt;/dependency&gt;
331
332        &lt;dependency&gt;
333            &lt;groupId&gt;com.h2database&lt;/groupId&gt;
334            &lt;artifactId&gt;h2&lt;/artifactId&gt;
335            &lt;version&gt;1.4.200&lt;/version&gt;
336            &lt;scope&gt;test&lt;/scope&gt;
337        &lt;/dependency&gt;
338
339        &lt;dependency&gt;
340            &lt;!-- using older version as 2.5.1 collides with ucanaccess --&gt;
341            &lt;groupId&gt;org.hsqldb&lt;/groupId&gt;
342            &lt;artifactId&gt;hsqldb&lt;/artifactId&gt;
343            &lt;version&gt;2.5.1&lt;/version&gt;
344            &lt;scope&gt;test&lt;/scope&gt;
345            &lt;!--            &lt;classifier&gt;debug&lt;/classifier&gt;--&gt;
346        &lt;/dependency&gt;
347
348        &lt;dependency&gt;
349            &lt;groupId&gt;org.apache.derby&lt;/groupId&gt;
350            &lt;artifactId&gt;derby&lt;/artifactId&gt;
351            &lt;version&gt;10.8.2.2&lt;/version&gt;
352            &lt;scope&gt;test&lt;/scope&gt;
353        &lt;/dependency&gt;
354
355        &lt;!-- OR -Djdk.tls.client.protocols=TLSv1 --&gt;
356        &lt;dependency&gt;
357            &lt;groupId&gt;com.microsoft.sqlserver&lt;/groupId&gt;
358            &lt;artifactId&gt;mssql-jdbc&lt;/artifactId&gt;
359            &lt;version&gt;8.4.1.jre8&lt;/version&gt;
360            &lt;scope&gt;test&lt;/scope&gt;
361        &lt;/dependency&gt;
362
363        &lt;dependency&gt;
364            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
365            &lt;artifactId&gt;mssqlserver&lt;/artifactId&gt;
366            &lt;version&gt;1.15.2&lt;/version&gt;
367            &lt;scope&gt;test&lt;/scope&gt;
368        &lt;/dependency&gt;
369
370        &lt;dependency&gt;
371            &lt;groupId&gt;mysql&lt;/groupId&gt;
372            &lt;artifactId&gt;mysql-connector-java&lt;/artifactId&gt;
373            &lt;version&gt;8.0.23&lt;/version&gt;
374            &lt;scope&gt;test&lt;/scope&gt;
375        &lt;/dependency&gt;
376
377        &lt;dependency&gt;
378            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
379            &lt;artifactId&gt;mysql&lt;/artifactId&gt;
380            &lt;version&gt;1.15.2&lt;/version&gt;
381            &lt;scope&gt;test&lt;/scope&gt;
382        &lt;/dependency&gt;
383
384        &lt;dependency&gt;
385            &lt;groupId&gt;net.sourceforge.jtds&lt;/groupId&gt;
386            &lt;artifactId&gt;jtds&lt;/artifactId&gt;
387            &lt;version&gt;1.3.1&lt;/version&gt;
388            &lt;scope&gt;test&lt;/scope&gt;
389        &lt;/dependency&gt;
390
391        &lt;dependency&gt;
392            &lt;groupId&gt;com.oracle.database.jdbc&lt;/groupId&gt;
393            &lt;artifactId&gt;ojdbc8&lt;/artifactId&gt;
394            &lt;version&gt;21.3.0.0&lt;/version&gt;
395            &lt;scope&gt;test&lt;/scope&gt;
396        &lt;/dependency&gt;
397
398        &lt;!--        &lt;dependency&gt;--&gt;
399        &lt;!--            &lt;groupId&gt;com.oracle&lt;/groupId&gt;--&gt;
400        &lt;!--            &lt;artifactId&gt;ojdbc6&lt;/artifactId&gt;--&gt;
401        &lt;!--            &lt;version&gt;11.2.0.4&lt;/version&gt;--&gt;
402        &lt;!--            &lt;scope&gt;test&lt;/scope&gt;--&gt;
403        &lt;!--        &lt;/dependency&gt;--&gt;
404
405        &lt;dependency&gt;
406            &lt;groupId&gt;org.postgresql&lt;/groupId&gt;
407            &lt;artifactId&gt;postgresql&lt;/artifactId&gt;
408            &lt;version&gt;9.2-1004-jdbc41&lt;/version&gt;
409            &lt;scope&gt;test&lt;/scope&gt;
410        &lt;/dependency&gt;
411        &lt;dependency&gt;
412            &lt;groupId&gt;org.testcontainers&lt;/groupId&gt;
413            &lt;artifactId&gt;postgresql&lt;/artifactId&gt;
414            &lt;version&gt;1.15.2&lt;/version&gt;
415            &lt;scope&gt;test&lt;/scope&gt;
416        &lt;/dependency&gt;
417
418        &lt;dependency&gt;
419            &lt;groupId&gt;org.xerial&lt;/groupId&gt;
420            &lt;artifactId&gt;sqlite-jdbc&lt;/artifactId&gt;
421            &lt;version&gt;3.34.0&lt;/version&gt;
422            &lt;scope&gt;test&lt;/scope&gt;
423        &lt;/dependency&gt;
424
425        &lt;dependency&gt;
426            &lt;groupId&gt;net.sf.ucanaccess&lt;/groupId&gt;
427            &lt;artifactId&gt;ucanaccess&lt;/artifactId&gt;
428            &lt;version&gt;5.0.1&lt;/version&gt;
429            &lt;scope&gt;test&lt;/scope&gt;
430        &lt;/dependency&gt;
431
432        &lt;dependency&gt;
433            &lt;groupId&gt;com.ibm.informix&lt;/groupId&gt;
434            &lt;artifactId&gt;informix-jdbc-complete&lt;/artifactId&gt;
435            &lt;version&gt;4.50.4.1&lt;/version&gt;
436            &lt;scope&gt;test&lt;/scope&gt;
437        &lt;/dependency&gt;
438
439        &lt;dependency&gt;
440            &lt;groupId&gt;com.toddfast.typeconverter&lt;/groupId&gt;
441            &lt;artifactId&gt;typeconverter&lt;/artifactId&gt;
442            &lt;version&gt;1.0&lt;/version&gt;
443            &lt;scope&gt;test&lt;/scope&gt;
444        &lt;/dependency&gt;
445
446        &lt;dependency&gt;
447            &lt;groupId&gt;org.reflections&lt;/groupId&gt;
448            &lt;artifactId&gt;reflections&lt;/artifactId&gt;
449            &lt;version&gt;0.9.11&lt;/version&gt;
450            &lt;scope&gt;test&lt;/scope&gt;
451        &lt;/dependency&gt;
452
453        &lt;!-- https://mvnrepository.com/artifact/javax.persistence/javax.persistence-api --&gt;
454        &lt;dependency&gt;
455            &lt;groupId&gt;javax.persistence&lt;/groupId&gt;
456            &lt;artifactId&gt;javax.persistence-api&lt;/artifactId&gt;
457            &lt;version&gt;2.2&lt;/version&gt;
458            &lt;scope&gt;test&lt;/scope&gt;
459        &lt;/dependency&gt;
460
461
462        &lt;!-- https://mvnrepository.com/artifact/org.codehaus.mojo/cobertura-maven-plugin --&gt;
463        &lt;!-- DOES NOT WORK with JAVA 8 + --&gt;
464        &lt;!--        &lt;dependency&gt;--&gt;
465        &lt;!--            &lt;groupId&gt;org.codehaus.mojo&lt;/groupId&gt;--&gt;
466        &lt;!--            &lt;artifactId&gt;cobertura-maven-plugin&lt;/artifactId&gt;--&gt;
467        &lt;!--            &lt;version&gt;2.7&lt;/version&gt;--&gt;
468        &lt;!--            &lt;scope&gt;test&lt;/scope&gt;--&gt;
469        &lt;!--            &lt;exclusions&gt;--&gt;
470        &lt;!--                &lt;exclusion&gt;--&gt;
471        &lt;!--                    &lt;groupId&gt;com.sun&lt;/groupId&gt;--&gt;
472        &lt;!--                    &lt;artifactId&gt;tools&lt;/artifactId&gt;--&gt;
473        &lt;!--                &lt;/exclusion&gt;--&gt;
474        &lt;!--            &lt;/exclusions&gt;--&gt;
475        &lt;!--        &lt;/dependency&gt;--&gt;
476
477
478    &lt;/dependencies&gt;
479
480&lt;/project&gt;
481export MAVEN_OPTS=&quot;--add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED&quot;
482mvn deploy
483&lt;plugin&gt;
484  &lt;groupId&gt;org.sonatype.plugins&lt;/groupId&gt;
485  &lt;artifactId&gt;nexus-staging-maven-plugin&lt;/artifactId&gt;
486  &lt;version&gt;1.6.8&lt;/version&gt;
487  &lt;extensions&gt;true&lt;/extensions&gt;
488  &lt;configuration&gt;
489    &lt;serverId&gt;ossrh&lt;/serverId&gt;
490    &lt;nexusUrl&gt;https://s01.oss.sonatype.org/&lt;/nexusUrl&gt;
491    &lt;autoReleaseAfterClose&gt;true&lt;/autoReleaseAfterClose&gt;
492  &lt;/configuration&gt;
493  &lt;dependencies&gt;
494    &lt;dependency&gt;
495      &lt;groupId&gt;com.thoughtworks.xstream&lt;/groupId&gt;
496      &lt;artifactId&gt;xstream&lt;/artifactId&gt;
497      &lt;version&gt;1.4.15&lt;/version&gt; &lt;!-- apparently this needs to be exactly this version --&gt;
498    &lt;/dependency&gt;
499  &lt;/dependencies&gt;
500&lt;/plugin&gt;
501

Source https://stackoverflow.com/questions/70153962

QUESTION

Having difficulty to get SSH with a Yubikey working with macOS monterey

Asked 2022-Feb-06 at 01:52

I'm following the FIDO U2F instructions on https://developers.yubico.com/SSH/ on macOS Monterey with openSSH 8.6 and run into the following issue:

1~ ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk
2Generating public/private ecdsa-sk key pair.
3You may need to touch your authenticator to authorize key generation.
4Key enrollment failed: unknown or unsupported key type
5

Anyone know what I'm missing here?

ANSWER

Answered 2022-Feb-06 at 01:52

Use Homebrew's OpenSSH

1~ ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk
2Generating public/private ecdsa-sk key pair.
3You may need to touch your authenticator to authorize key generation.
4Key enrollment failed: unknown or unsupported key type
5$ brew install openssh
6

Once installed, you have to override the one in your PATH by putting the openssh folder at the beginning of your PATH in your rc file like this

1~ ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk
2Generating public/private ecdsa-sk key pair.
3You may need to touch your authenticator to authorize key generation.
4Key enrollment failed: unknown or unsupported key type
5$ brew install openssh
6$ export PATH=$(brew --prefix openssh)/bin:$PATH
7

Once you've done that and you've sourced your rc file you should be able to generate your key

Tested on macOS Monterey and OpenSSH_8.8p1, OpenSSL 1.1.1l

Source https://stackoverflow.com/questions/68573454

QUESTION

Git Bash - ssh connection issue

Asked 2022-Jan-25 at 07:13

Environment:

1OS: Windows-10
2Git Bash Version: 2.33.1
3OpenSSH_8.8p1, OpenSSL 1.1.1l  24 Aug 2021
4$ which ssh
5 /usr/bin/ssh
6

SSH connection to Gerrit Error:-

1OS: Windows-10
2Git Bash Version: 2.33.1
3OpenSSH_8.8p1, OpenSSL 1.1.1l  24 Aug 2021
4$ which ssh
5 /usr/bin/ssh
6$ ssh -p 29418 user@gerrit.example.com
7
8Unable to negotiate with gerrit.example.com port 29418: no matching host key type found. Their offer: ssh-rsa,ssh-dss
9

In Git-2.32.0 ssh connection to gerrit works. Is there any restriction enabled in latest git version?

ANSWER

Answered 2022-Jan-25 at 07:13

Git For Windows 2.33.1 comes with OpenSSH 8.8 which disables RSA signatures using the SHA-1 hash algorithm by default.

For most users, this change should be invisible and there is no need to replace ssh-rsa keys.
OpenSSH has supported RFC8332 RSA/SHA-256/512 signatures since release 7.2 and existing ssh-rsa keys will automatically use the stronger algorithm where possible.

Incompatibility is more likely when connecting to older SSH implementations that have not been upgraded or have not closely tracked improvements in the SSH protocol.

For these cases, it may be necessary to selectively re-enable RSA/SHA1 to allow connection and/or user authentication via the HostkeyAlgorithms and PubkeyAcceptedAlgorithms options.
For example, the following stanza in ~/.ssh/config will enable RSA/SHA1 for host and user authentication for a single destination host:

1OS: Windows-10
2Git Bash Version: 2.33.1
3OpenSSH_8.8p1, OpenSSL 1.1.1l  24 Aug 2021
4$ which ssh
5 /usr/bin/ssh
6$ ssh -p 29418 user@gerrit.example.com
7
8Unable to negotiate with gerrit.example.com port 29418: no matching host key type found. Their offer: ssh-rsa,ssh-dss
9Host old-host
10   HostkeyAlgorithms +ssh-rsa
11   PubkeyAcceptedAlgorithms +ssh-rsa
12

Note: Git for Windows 2.34.0 does not bring any new element/evolution on the SSH front.

Stefan Prodan (DX @weaveworks, creator of http://flagger.app and maintainer of http://fluxcd.io) mentions in this tweet:

GitHub has changed its host keys 💥

If you're using @fluxcd please see here how to update the known hosts keys on your Kubernetes clusters.

Stefan refers to fluxcd/flux2 discussion 2097:

GitHub has changed its SSH host keys from RSA to ECDSA!

To fix the key mismatch error, you have two options:

Update the known_hosts in the flux-system secret with the ecdsa-sha2-nistp25 value:

github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg=

Or rotate the SSH keys with flux boostrap like so:

delete the deploy key secret from your cluster kubectl -n flux-system delete secret flux-system

rerun flux bootstrap github with the same arguments as before

Flux will generate the secret with ecdsa-sha2 SSH key and Host key

More details on fluxcd/source-controller#490

Note: since Jan. 2022, the GitHub SSH Host key are available through a metadata endpoint api.github.com/meta.
That includes the github.com ecdsa-sha2-nistp256 value.

Source https://stackoverflow.com/questions/69656858

QUESTION

Paramiko authentication fails with "Agreed upon 'rsa-sha2-512' pubkey algorithm" (and "unsupported public key algorithm: rsa-sha2-512" in sshd log)

Asked 2022-Jan-13 at 14:49

I have a Python 3 application running on CentOS Linux 7.7 executing SSH commands against remote hosts. It works properly but today I encountered an odd error executing a command against a "new" remote server (server based on RHEL 6.10):

encountered RSA key, expected OPENSSH key

Executing the same command from the system shell (using the same private key of course) works perfectly fine.

On the remote server I discovered in /var/log/secure that when SSH connection and commands are issued from the source server with Python (using Paramiko) sshd complains about unsupported public key algorithm:

userauth_pubkey: unsupported public key algorithm: rsa-sha2-512

Note that target servers with higher RHEL/CentOS like 7.x don't encounter the issue.

It seems like Paramiko picks/offers the wrong algorithm when negotiating with the remote server when on the contrary SSH shell performs the negotiation properly in the context of this "old" target server. How to get the Python program to work as expected?

Python code

1import paramiko
2import logging
3
4ssh_user = &quot;my_user&quot;
5ssh_keypath = &quot;/path/to/.ssh/my_key.rsa&quot;
6server = &quot;server.tld&quot;
7
8ssh_client = paramiko.SSHClient()
9ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy()) 
10ssh_client.connect(server,port=22,username=ssh_user, key_filename=ssh_keypath)  
11
12# SSH command
13cmd = &quot;echo TEST : $(hostname)&quot;
14
15stdin, stdout, stderr = ssh_client.exec_command(cmd, get_pty=True)
16exit_code = stdout.channel.recv_exit_status() 
17
18cmd_raw_output = stdout.readlines()
19out = &quot;&quot;.join(cmd_raw_output)
20out_msg = out.strip()  
21
22# Ouput (logger code omitted)
23logger.debug(out_msg)
24
25if ssh_client is not None:
26    ssh_client.close()
27

Shell command equivalent

1import paramiko
2import logging
3
4ssh_user = &quot;my_user&quot;
5ssh_keypath = &quot;/path/to/.ssh/my_key.rsa&quot;
6server = &quot;server.tld&quot;
7
8ssh_client = paramiko.SSHClient()
9ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy()) 
10ssh_client.connect(server,port=22,username=ssh_user, key_filename=ssh_keypath)  
11
12# SSH command
13cmd = &quot;echo TEST : $(hostname)&quot;
14
15stdin, stdout, stderr = ssh_client.exec_command(cmd, get_pty=True)
16exit_code = stdout.channel.recv_exit_status() 
17
18cmd_raw_output = stdout.readlines()
19out = &quot;&quot;.join(cmd_raw_output)
20out_msg = out.strip()  
21
22# Ouput (logger code omitted)
23logger.debug(out_msg)
24
25if ssh_client is not None:
26    ssh_client.close()
27ssh -i /path/to/.ssh/my_key.rsa my_user@server.tld &quot;echo TEST : $(hostname)&quot;   
28

Paramiko logs (DEBUG)

1import paramiko
2import logging
3
4ssh_user = &quot;my_user&quot;
5ssh_keypath = &quot;/path/to/.ssh/my_key.rsa&quot;
6server = &quot;server.tld&quot;
7
8ssh_client = paramiko.SSHClient()
9ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy()) 
10ssh_client.connect(server,port=22,username=ssh_user, key_filename=ssh_keypath)  
11
12# SSH command
13cmd = &quot;echo TEST : $(hostname)&quot;
14
15stdin, stdout, stderr = ssh_client.exec_command(cmd, get_pty=True)
16exit_code = stdout.channel.recv_exit_status() 
17
18cmd_raw_output = stdout.readlines()
19out = &quot;&quot;.join(cmd_raw_output)
20out_msg = out.strip()  
21
22# Ouput (logger code omitted)
23logger.debug(out_msg)
24
25if ssh_client is not None:
26    ssh_client.close()
27ssh -i /path/to/.ssh/my_key.rsa my_user@server.tld &quot;echo TEST : $(hostname)&quot;   
28DEB [YYYYmmdd-HH:MM:30.475] thr=1   paramiko.transport: starting thread (client mode): 0xf6054ac8
29DEB [YYYYmmdd-HH:MM:30.476] thr=1   paramiko.transport: Local version/idstring: SSH-2.0-paramiko_2.9.1
30DEB [YYYYmmdd-HH:MM:30.490] thr=1   paramiko.transport: Remote version/idstring: SSH-2.0-OpenSSH_5.3
31INF [YYYYmmdd-HH:MM:30.490] thr=1   paramiko.transport: Connected (version 2.0, client OpenSSH_5.3)
32DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: === Key exchange possibilities ===
33DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: kex algos: diffie-hellman-group-exchange-sha256, diffie-hellman-group-exchange-sha1, diffie-hellman-group14-sha1, diffie-hellman-group1-sha1
34DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: server key: ssh-rsa, ssh-dss
35DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: client encrypt: aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se
36DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: server encrypt: aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se
37DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: client mac: hmac-md5, hmac-sha1, umac-64@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-sha1-96, hmac-md5-96
38DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: server mac: hmac-md5, hmac-sha1, umac-64@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-sha1-96, hmac-md5-96
39DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: client compress: none, zlib@openssh.com
40DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: server compress: none, zlib@openssh.com
41DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: client lang: &lt;none&gt;
42DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: server lang: &lt;none&gt;.
43DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: kex follows: False
44DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: === Key exchange agreements ===
45DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: Kex: diffie-hellman-group-exchange-sha256
46DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: HostKey: ssh-rsa
47DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: Cipher: aes128-ctr
48DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: MAC: hmac-sha2-256
49DEB [YYYYmmdd-HH:MM:30.501] thr=1   paramiko.transport: Compression: none
50DEB [YYYYmmdd-HH:MM:30.501] thr=1   paramiko.transport: === End of kex handshake ===
51DEB [YYYYmmdd-HH:MM:30.548] thr=1   paramiko.transport: Got server p (2048 bits)
52DEB [YYYYmmdd-HH:MM:30.666] thr=1   paramiko.transport: kex engine KexGexSHA256 specified hash_algo &lt;built-in function openssl_sha256&gt;
53DEB [YYYYmmdd-HH:MM:30.667] thr=1   paramiko.transport: Switch to new keys ...
54DEB [YYYYmmdd-HH:MM:30.669] thr=2   paramiko.transport: Adding ssh-rsa host key for server.tld: b'caea********************.'
55DEB [YYYYmmdd-HH:MM:30.674] thr=2   paramiko.transport: Trying discovered key b'b49c********************' in /path/to/.ssh/my_key.rsa
56DEB [YYYYmmdd-HH:MM:30.722] thr=1   paramiko.transport: userauth is OK
57DEB [YYYYmmdd-HH:MM:30.722] thr=1   paramiko.transport: Finalizing pubkey algorithm for key of type 'ssh-rsa'
58DEB [YYYYmmdd-HH:MM:30.722] thr=1   paramiko.transport: Our pubkey algorithm list: ['rsa-sha2-512', 'rsa-sha2-256', 'ssh-rsa']
59DEB [YYYYmmdd-HH:MM:30.723] thr=1   paramiko.transport: Server-side algorithm list: ['']
60DEB [YYYYmmdd-HH:MM:30.723] thr=1   paramiko.transport: Agreed upon 'rsa-sha2-512' pubkey algorithm
61INF [YYYYmmdd-HH:MM:30.735] thr=1   paramiko.transport: Authentication (publickey) failed.
62DEB [YYYYmmdd-HH:MM:30.739] thr=2   paramiko.transport: Trying SSH agent key b'9d37********************'
63DEB [YYYYmmdd-HH:MM:30.747] thr=1   paramiko.transport: userauth is OK.
64DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Finalizing pubkey algorithm for key of type 'ssh-rsa'
65DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Our pubkey algorithm list: ['rsa-sha2-512', 'rsa-sha2-256', 'ssh-rsa']
66DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Server-side algorithm list: ['']
67DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Agreed upon 'rsa-sha2-512' pubkey algorithm
68INF [YYYYmmdd-HH:MM:30.868] thr=1   paramiko.transport: Authentication (publickey) failed...
69

Shell command logs

1import paramiko
2import logging
3
4ssh_user = &quot;my_user&quot;
5ssh_keypath = &quot;/path/to/.ssh/my_key.rsa&quot;
6server = &quot;server.tld&quot;
7
8ssh_client = paramiko.SSHClient()
9ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy()) 
10ssh_client.connect(server,port=22,username=ssh_user, key_filename=ssh_keypath)  
11
12# SSH command
13cmd = &quot;echo TEST : $(hostname)&quot;
14
15stdin, stdout, stderr = ssh_client.exec_command(cmd, get_pty=True)
16exit_code = stdout.channel.recv_exit_status() 
17
18cmd_raw_output = stdout.readlines()
19out = &quot;&quot;.join(cmd_raw_output)
20out_msg = out.strip()  
21
22# Ouput (logger code omitted)
23logger.debug(out_msg)
24
25if ssh_client is not None:
26    ssh_client.close()
27ssh -i /path/to/.ssh/my_key.rsa my_user@server.tld &quot;echo TEST : $(hostname)&quot;   
28DEB [YYYYmmdd-HH:MM:30.475] thr=1   paramiko.transport: starting thread (client mode): 0xf6054ac8
29DEB [YYYYmmdd-HH:MM:30.476] thr=1   paramiko.transport: Local version/idstring: SSH-2.0-paramiko_2.9.1
30DEB [YYYYmmdd-HH:MM:30.490] thr=1   paramiko.transport: Remote version/idstring: SSH-2.0-OpenSSH_5.3
31INF [YYYYmmdd-HH:MM:30.490] thr=1   paramiko.transport: Connected (version 2.0, client OpenSSH_5.3)
32DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: === Key exchange possibilities ===
33DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: kex algos: diffie-hellman-group-exchange-sha256, diffie-hellman-group-exchange-sha1, diffie-hellman-group14-sha1, diffie-hellman-group1-sha1
34DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: server key: ssh-rsa, ssh-dss
35DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: client encrypt: aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se
36DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: server encrypt: aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se
37DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: client mac: hmac-md5, hmac-sha1, umac-64@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-sha1-96, hmac-md5-96
38DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: server mac: hmac-md5, hmac-sha1, umac-64@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-sha1-96, hmac-md5-96
39DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: client compress: none, zlib@openssh.com
40DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: server compress: none, zlib@openssh.com
41DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: client lang: &lt;none&gt;
42DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: server lang: &lt;none&gt;.
43DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: kex follows: False
44DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: === Key exchange agreements ===
45DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: Kex: diffie-hellman-group-exchange-sha256
46DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: HostKey: ssh-rsa
47DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: Cipher: aes128-ctr
48DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: MAC: hmac-sha2-256
49DEB [YYYYmmdd-HH:MM:30.501] thr=1   paramiko.transport: Compression: none
50DEB [YYYYmmdd-HH:MM:30.501] thr=1   paramiko.transport: === End of kex handshake ===
51DEB [YYYYmmdd-HH:MM:30.548] thr=1   paramiko.transport: Got server p (2048 bits)
52DEB [YYYYmmdd-HH:MM:30.666] thr=1   paramiko.transport: kex engine KexGexSHA256 specified hash_algo &lt;built-in function openssl_sha256&gt;
53DEB [YYYYmmdd-HH:MM:30.667] thr=1   paramiko.transport: Switch to new keys ...
54DEB [YYYYmmdd-HH:MM:30.669] thr=2   paramiko.transport: Adding ssh-rsa host key for server.tld: b'caea********************.'
55DEB [YYYYmmdd-HH:MM:30.674] thr=2   paramiko.transport: Trying discovered key b'b49c********************' in /path/to/.ssh/my_key.rsa
56DEB [YYYYmmdd-HH:MM:30.722] thr=1   paramiko.transport: userauth is OK
57DEB [YYYYmmdd-HH:MM:30.722] thr=1   paramiko.transport: Finalizing pubkey algorithm for key of type 'ssh-rsa'
58DEB [YYYYmmdd-HH:MM:30.722] thr=1   paramiko.transport: Our pubkey algorithm list: ['rsa-sha2-512', 'rsa-sha2-256', 'ssh-rsa']
59DEB [YYYYmmdd-HH:MM:30.723] thr=1   paramiko.transport: Server-side algorithm list: ['']
60DEB [YYYYmmdd-HH:MM:30.723] thr=1   paramiko.transport: Agreed upon 'rsa-sha2-512' pubkey algorithm
61INF [YYYYmmdd-HH:MM:30.735] thr=1   paramiko.transport: Authentication (publickey) failed.
62DEB [YYYYmmdd-HH:MM:30.739] thr=2   paramiko.transport: Trying SSH agent key b'9d37********************'
63DEB [YYYYmmdd-HH:MM:30.747] thr=1   paramiko.transport: userauth is OK.
64DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Finalizing pubkey algorithm for key of type 'ssh-rsa'
65DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Our pubkey algorithm list: ['rsa-sha2-512', 'rsa-sha2-256', 'ssh-rsa']
66DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Server-side algorithm list: ['']
67DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Agreed upon 'rsa-sha2-512' pubkey algorithm
68INF [YYYYmmdd-HH:MM:30.868] thr=1   paramiko.transport: Authentication (publickey) failed...
69OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017
70debug1: Reading configuration data /etc/ssh/ssh_config
71debug1: /etc/ssh/ssh_config line 58: Applying options for *
72debug2: resolving &quot;server.tld&quot; port 22
73debug2: ssh_connect_direct: needpriv 0
74debug1: Connecting to server.tld [server.tld] port 22.
75debug1: Connection established.
76debug1: permanently_set_uid: 0/0
77debug1: key_load_public: No such file or directory
78debug1: identity file /path/to/.ssh/my_key.rsa type -1
79debug1: key_load_public: No such file or directory
80debug1: identity file /path/to/.ssh/my_key.rsa-cert type -1
81debug1: Enabling compatibility mode for protocol 2.0
82debug1: Local version string SSH-2.0-OpenSSH_7.4
83debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
84debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c000000
85debug2: fd 3 setting O_NONBLOCK
86debug1: Authenticating to server.tld:22 as 'my_user'
87debug3: hostkeys_foreach: reading file &quot;/path/to/.ssh/known_hosts&quot;
88debug3: record_hostkey: found key type RSA in file /path/to/.ssh/known_hosts:82
89debug3: load_hostkeys: loaded 1 keys from server.tld
90debug3: order_hostkeyalgs: prefer hostkeyalgs: ssh-rsa-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa
91debug3: send packet: type 20
92debug1: SSH2_MSG_KEXINIT sent
93debug3: receive packet: type 20
94debug1: SSH2_MSG_KEXINIT received
95debug2: local client KEXINIT proposal
96debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c
97debug2: host key algorithms: ssh-rsa-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-dss
98debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc
99debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc
100debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
101debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
102debug2: compression ctos: none,zlib@openssh.com,zlib
103debug2: compression stoc: none,zlib@openssh.com,zlib
104debug2: languages ctos:
105debug2: languages stoc:
106debug2: first_kex_follows 0
107debug2: reserved 0
108debug2: peer server KEXINIT proposal
109debug2: KEX algorithms: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
110debug2: host key algorithms: ssh-rsa,ssh-dss
111debug2: ciphers ctos: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
112debug2: ciphers stoc: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
113debug2: MACs ctos: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
114debug2: MACs stoc: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
115debug2: compression ctos: none,zlib@openssh.com
116debug2: compression stoc: none,zlib@openssh.com
117debug2: languages ctos:
118debug2: languages stoc:
119debug2: first_kex_follows 0
120debug2: reserved 0
121debug1: kex: algorithm: diffie-hellman-group-exchange-sha256
122debug1: kex: host key algorithm: ssh-rsa
123debug1: kex: server-&gt;client cipher: aes128-ctr MAC: umac-64@openssh.com compression: none
124debug1: kex: client-&gt;server cipher: aes128-ctr MAC: umac-64@openssh.com compression: none
125debug1: kex: diffie-hellman-group-exchange-sha256 need=16 dh_need=16
126debug1: kex: diffie-hellman-group-exchange-sha256 need=16 dh_need=16
127debug3: send packet: type 34
128debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024&lt;3072&lt;8192) sent
129debug3: receive packet: type 31
130debug1: got SSH2_MSG_KEX_DH_GEX_GROUP
131debug2: bits set: 1502/3072
132debug3: send packet: type 32
133debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
134debug3: receive packet: type 33
135debug1: got SSH2_MSG_KEX_DH_GEX_REPLY
136debug1: Server host key: ssh-.:**************************************************
137debug3: hostkeys_foreach: reading file &quot;/path/to/.ssh/known_hosts&quot;
138debug3: record_hostkey: found key type RSA in file /path/to/.ssh/known_hosts:8..2
139debug3: load_hostkeys: loaded 1 keys from server.tld
140debug1: Host 'server.tld' is known and matches the RSA host key.
141debug1: Found key in /path/to/.ssh/known_hosts:82
142debug2: bits set: 1562/3072
143debug3: send packet: type 21
144debug2: set_newkeys: mode 1
145debug1: rekey after 4294967296 blocks
146debug1: SSH2_MSG_NEWKEYS sent
147debug1: expecting SSH2_MSG_NEWKEYS
148debug3: receive packet: type 21
149debug1: SSH2_MSG_NEWKEYS received
150debug2: set_newkeys: mode 0
151debug1: rekey after 4294967296 blocks
152debug2: key: &lt;foo&gt; (0x55bcf6d1d320), agent
153debug2: key: /path/to/.ssh/my_key.rsa ((nil)), explicit
154debug3: send packet: type 5
155debug3: receive packet: type 6
156debug2: service_accept: ssh-userauth
157debug1: SSH2_MSG_SERVICE_ACCEPT received
158debug3: send packet: type 50
159debug3: receive packet: type 51
160debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
161debug3: start over, passed a different list publickey,gssapi-keyex,gssapi-with-mic,password
162debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
163debug3: authmethod_lookup gssapi-keyex
164debug3: remaining preferred: gssapi-with-mic,publickey,keyboard-interactive,password
165debug3: authmethod_is_enabled gssapi-keyex
166debug1: Next authentication method: gssapi-keyex
167debug1: No valid Key exchange context
168debug2: we did not send a packet, disable method
169debug3: authmethod_lookup gssapi-with-mic
170debug3: remaining preferred: publickey,keyboard-interactive,password
171debug3: authmethod_is_enabled gssapi-with-mic
172debug1: Next authentication method: gssapi-with-mic
173debug1: Unspecified GSS failure.  Minor code may provide more information
174No Kerberos credentials available (default cache: KEYRING:persistent:0)
175
176debug1: Unspecified GSS failure.  Minor code may provide more information
177No Kerberos credentials available (default cache: KEYRING:persistent:0)
178
179debug2: we did not send a packet, disable method
180debug3: authmethod_lookup publickey
181debug3: remaining preferred: keyboard-interactive,password
182debug3: authmethod_is_enabled publickey
183debug1: Next authentication method: publickey
184debug1: Offering RSA public key: &lt;foo&gt;
185debug3: send_pubkey_test
186debug3: send packet: type 50
187debug2: we sent a publickey packet, wait for reply
188debug3: receive packet: type 51
189debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
190debug1: Trying private key: /path/to/.ssh/my_key.rsa
191debug3: sign_and_send_pubkey: RSA SHA256:**********************************
192debug3: send packet: type 50
193debug2: we sent a publickey packet, wait for reply
194debug3: receive packet: type 52
195debug1: Authentication succeeded (publickey).
196Authenticated to server.tld ([server.tld]:22).
197debug1: channel 0: new [client-session]
198debug3: ssh_session2_open: channel_new: 0
199debug2: channel 0: send open
200debug3: send packet: type 90
201debug1: Requesting no-more-sessions@openssh.com
202debug3: send packet: type 80
203debug1: Entering interactive session.
204debug1: pledge: network
205debug3: receive packet: type 91
206debug2: callback start
207debug2: fd 3 setting TCP_NODELAY
208debug3: ssh_packet_set_tos: set IP_TOS 0x08
209debug2: client_session2_setup: id 0
210debug1: Sending environment.
211debug3: Ignored env XDG_SESSION_ID
212debug3: Ignored env HOSTNAME
213debug3: Ignored env SELINUX_ROLE_REQUESTED
214debug3: Ignored env TERM
215debug3: Ignored env SHELL
216debug3: Ignored env HISTSIZE
217debug3: Ignored env SSH_CLIENT
218debug3: Ignored env SELINUX_USE_CURRENT_RANGE
219debug3: Ignored env SSH_TTY
220debug3: Ignored env CDPATH
221debug3: Ignored env USER
222debug3: Ignored env LS_COLORS
223debug3: Ignored env SSH_AUTH_SOCK
224debug3: Ignored env MAIL
225debug3: Ignored env PATH
226debug3: Ignored env PWD
227debug1: Sending env LANG = xx_XX.UTF-8
228debug2: channel 0: request env confirm 0
229debug3: send packet: type 98
230debug3: Ignored env SELINUX_LEVEL_REQUESTED
231debug3: Ignored env HISTCONTROL
232debug3: Ignored env SHLVL
233debug3: Ignored env HOME
234debug3: Ignored env LOGNAME
235debug3: Ignored env SSH_CONNECTION
236debug3: Ignored env LESSOPEN
237debug3: Ignored env XDG_RUNTIME_DIR
238debug3: Ignored env _
239debug1: Sending command: echo TEST : $(hostname)
240debug2: channel 0: request exec confirm 1
241debug3: send packet: type 98
242debug2: callback done
243debug2: channel 0: open confirm rwindow 0 rmax 32768
244debug2: channel 0: rcvd adjust 2097152
245debug3: receive packet: type 99
246debug2: channel_input_status_confirm: type 99 id 0
247debug2: exec request accepted on channel 0
248TEST : server.tld
249debug3: receive packet: type 96
250debug2: channel 0: rcvd eof
251debug2: channel 0: output open -&gt; drain
252debug2: channel 0: obuf empty
253debug2: channel 0: close_write
254debug2: channel 0: output drain -&gt; closed
255debug3: receive packet: type 98
256debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
257debug3: receive packet: type 98
258debug1: client_input_channel_req: channel 0 rtype eow@openssh.com reply 0
259debug2: channel 0: rcvd eow
260debug2: channel 0: close_read
261debug2: channel 0: input open -&gt; closed
262debug3: receive packet: type 97
263debug2: channel 0: rcvd close
264debug3: channel 0: will not send data after close
265debug2: channel 0: almost dead
266debug2: channel 0: gc: notify user
267debug2: channel 0: gc: user detached
268debug2: channel 0: send close
269debug3: send packet: type 97
270debug2: channel 0: is dead
271debug2: channel 0: garbage collecting
272debug1: channel 0: free: client-session, nchannels 1
273debug3: channel 0: status: The following connections are open:
274  #0 client-session (t4 r0 i3/0 o3/0 fd -1/-1 cc -1)
275
276debug3: send packet: type 1
277Transferred: sent 3264, received 2656 bytes, in 0.0 seconds.
278Bytes per second: sent 92349.8, received 75147.4
279debug1: Exit status 0
280.
281

ANSWER

Answered 2022-Jan-13 at 14:49

Imo, it's a bug in Paramiko. It does not handle correctly absence of server-sig-algs extension on the server side.

Try disabling rsa-sha2-* on Paramiko side altogether:

1import paramiko
2import logging
3
4ssh_user = &quot;my_user&quot;
5ssh_keypath = &quot;/path/to/.ssh/my_key.rsa&quot;
6server = &quot;server.tld&quot;
7
8ssh_client = paramiko.SSHClient()
9ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy()) 
10ssh_client.connect(server,port=22,username=ssh_user, key_filename=ssh_keypath)  
11
12# SSH command
13cmd = &quot;echo TEST : $(hostname)&quot;
14
15stdin, stdout, stderr = ssh_client.exec_command(cmd, get_pty=True)
16exit_code = stdout.channel.recv_exit_status() 
17
18cmd_raw_output = stdout.readlines()
19out = &quot;&quot;.join(cmd_raw_output)
20out_msg = out.strip()  
21
22# Ouput (logger code omitted)
23logger.debug(out_msg)
24
25if ssh_client is not None:
26    ssh_client.close()
27ssh -i /path/to/.ssh/my_key.rsa my_user@server.tld &quot;echo TEST : $(hostname)&quot;   
28DEB [YYYYmmdd-HH:MM:30.475] thr=1   paramiko.transport: starting thread (client mode): 0xf6054ac8
29DEB [YYYYmmdd-HH:MM:30.476] thr=1   paramiko.transport: Local version/idstring: SSH-2.0-paramiko_2.9.1
30DEB [YYYYmmdd-HH:MM:30.490] thr=1   paramiko.transport: Remote version/idstring: SSH-2.0-OpenSSH_5.3
31INF [YYYYmmdd-HH:MM:30.490] thr=1   paramiko.transport: Connected (version 2.0, client OpenSSH_5.3)
32DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: === Key exchange possibilities ===
33DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: kex algos: diffie-hellman-group-exchange-sha256, diffie-hellman-group-exchange-sha1, diffie-hellman-group14-sha1, diffie-hellman-group1-sha1
34DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: server key: ssh-rsa, ssh-dss
35DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: client encrypt: aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se
36DEB [YYYYmmdd-HH:MM:30.498] thr=1   paramiko.transport: server encrypt: aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se
37DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: client mac: hmac-md5, hmac-sha1, umac-64@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-sha1-96, hmac-md5-96
38DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: server mac: hmac-md5, hmac-sha1, umac-64@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-sha1-96, hmac-md5-96
39DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: client compress: none, zlib@openssh.com
40DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: server compress: none, zlib@openssh.com
41DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: client lang: &lt;none&gt;
42DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: server lang: &lt;none&gt;.
43DEB [YYYYmmdd-HH:MM:30.499] thr=1   paramiko.transport: kex follows: False
44DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: === Key exchange agreements ===
45DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: Kex: diffie-hellman-group-exchange-sha256
46DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: HostKey: ssh-rsa
47DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: Cipher: aes128-ctr
48DEB [YYYYmmdd-HH:MM:30.500] thr=1   paramiko.transport: MAC: hmac-sha2-256
49DEB [YYYYmmdd-HH:MM:30.501] thr=1   paramiko.transport: Compression: none
50DEB [YYYYmmdd-HH:MM:30.501] thr=1   paramiko.transport: === End of kex handshake ===
51DEB [YYYYmmdd-HH:MM:30.548] thr=1   paramiko.transport: Got server p (2048 bits)
52DEB [YYYYmmdd-HH:MM:30.666] thr=1   paramiko.transport: kex engine KexGexSHA256 specified hash_algo &lt;built-in function openssl_sha256&gt;
53DEB [YYYYmmdd-HH:MM:30.667] thr=1   paramiko.transport: Switch to new keys ...
54DEB [YYYYmmdd-HH:MM:30.669] thr=2   paramiko.transport: Adding ssh-rsa host key for server.tld: b'caea********************.'
55DEB [YYYYmmdd-HH:MM:30.674] thr=2   paramiko.transport: Trying discovered key b'b49c********************' in /path/to/.ssh/my_key.rsa
56DEB [YYYYmmdd-HH:MM:30.722] thr=1   paramiko.transport: userauth is OK
57DEB [YYYYmmdd-HH:MM:30.722] thr=1   paramiko.transport: Finalizing pubkey algorithm for key of type 'ssh-rsa'
58DEB [YYYYmmdd-HH:MM:30.722] thr=1   paramiko.transport: Our pubkey algorithm list: ['rsa-sha2-512', 'rsa-sha2-256', 'ssh-rsa']
59DEB [YYYYmmdd-HH:MM:30.723] thr=1   paramiko.transport: Server-side algorithm list: ['']
60DEB [YYYYmmdd-HH:MM:30.723] thr=1   paramiko.transport: Agreed upon 'rsa-sha2-512' pubkey algorithm
61INF [YYYYmmdd-HH:MM:30.735] thr=1   paramiko.transport: Authentication (publickey) failed.
62DEB [YYYYmmdd-HH:MM:30.739] thr=2   paramiko.transport: Trying SSH agent key b'9d37********************'
63DEB [YYYYmmdd-HH:MM:30.747] thr=1   paramiko.transport: userauth is OK.
64DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Finalizing pubkey algorithm for key of type 'ssh-rsa'
65DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Our pubkey algorithm list: ['rsa-sha2-512', 'rsa-sha2-256', 'ssh-rsa']
66DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Server-side algorithm list: ['']
67DEB [YYYYmmdd-HH:MM:30.748] thr=1   paramiko.transport: Agreed upon 'rsa-sha2-512' pubkey algorithm
68INF [YYYYmmdd-HH:MM:30.868] thr=1   paramiko.transport: Authentication (publickey) failed...
69OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017
70debug1: Reading configuration data /etc/ssh/ssh_config
71debug1: /etc/ssh/ssh_config line 58: Applying options for *
72debug2: resolving &quot;server.tld&quot; port 22
73debug2: ssh_connect_direct: needpriv 0
74debug1: Connecting to server.tld [server.tld] port 22.
75debug1: Connection established.
76debug1: permanently_set_uid: 0/0
77debug1: key_load_public: No such file or directory
78debug1: identity file /path/to/.ssh/my_key.rsa type -1
79debug1: key_load_public: No such file or directory
80debug1: identity file /path/to/.ssh/my_key.rsa-cert type -1
81debug1: Enabling compatibility mode for protocol 2.0
82debug1: Local version string SSH-2.0-OpenSSH_7.4
83debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
84debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c000000
85debug2: fd 3 setting O_NONBLOCK
86debug1: Authenticating to server.tld:22 as 'my_user'
87debug3: hostkeys_foreach: reading file &quot;/path/to/.ssh/known_hosts&quot;
88debug3: record_hostkey: found key type RSA in file /path/to/.ssh/known_hosts:82
89debug3: load_hostkeys: loaded 1 keys from server.tld
90debug3: order_hostkeyalgs: prefer hostkeyalgs: ssh-rsa-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa
91debug3: send packet: type 20
92debug1: SSH2_MSG_KEXINIT sent
93debug3: receive packet: type 20
94debug1: SSH2_MSG_KEXINIT received
95debug2: local client KEXINIT proposal
96debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c
97debug2: host key algorithms: ssh-rsa-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-dss
98debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc
99debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc
100debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
101debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
102debug2: compression ctos: none,zlib@openssh.com,zlib
103debug2: compression stoc: none,zlib@openssh.com,zlib
104debug2: languages ctos:
105debug2: languages stoc:
106debug2: first_kex_follows 0
107debug2: reserved 0
108debug2: peer server KEXINIT proposal
109debug2: KEX algorithms: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
110debug2: host key algorithms: ssh-rsa,ssh-dss
111debug2: ciphers ctos: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
112debug2: ciphers stoc: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
113debug2: MACs ctos: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
114debug2: MACs stoc: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
115debug2: compression ctos: none,zlib@openssh.com
116debug2: compression stoc: none,zlib@openssh.com
117debug2: languages ctos:
118debug2: languages stoc:
119debug2: first_kex_follows 0
120debug2: reserved 0
121debug1: kex: algorithm: diffie-hellman-group-exchange-sha256
122debug1: kex: host key algorithm: ssh-rsa
123debug1: kex: server-&gt;client cipher: aes128-ctr MAC: umac-64@openssh.com compression: none
124debug1: kex: client-&gt;server cipher: aes128-ctr MAC: umac-64@openssh.com compression: none
125debug1: kex: diffie-hellman-group-exchange-sha256 need=16 dh_need=16
126debug1: kex: diffie-hellman-group-exchange-sha256 need=16 dh_need=16
127debug3: send packet: type 34
128debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024&lt;3072&lt;8192) sent
129debug3: receive packet: type 31
130debug1: got SSH2_MSG_KEX_DH_GEX_GROUP
131debug2: bits set: 1502/3072
132debug3: send packet: type 32
133debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
134debug3: receive packet: type 33
135debug1: got SSH2_MSG_KEX_DH_GEX_REPLY
136debug1: Server host key: ssh-.:**************************************************
137debug3: hostkeys_foreach: reading file &quot;/path/to/.ssh/known_hosts&quot;
138debug3: record_hostkey: found key type RSA in file /path/to/.ssh/known_hosts:8..2
139debug3: load_hostkeys: loaded 1 keys from server.tld
140debug1: Host 'server.tld' is known and matches the RSA host key.
141debug1: Found key in /path/to/.ssh/known_hosts:82
142debug2: bits set: 1562/3072
143debug3: send packet: type 21
144debug2: set_newkeys: mode 1
145debug1: rekey after 4294967296 blocks
146debug1: SSH2_MSG_NEWKEYS sent
147debug1: expecting SSH2_MSG_NEWKEYS
148debug3: receive packet: type 21
149debug1: SSH2_MSG_NEWKEYS received
150debug2: set_newkeys: mode 0
151debug1: rekey after 4294967296 blocks
152debug2: key: &lt;foo&gt; (0x55bcf6d1d320), agent
153debug2: key: /path/to/.ssh/my_key.rsa ((nil)), explicit
154debug3: send packet: type 5
155debug3: receive packet: type 6
156debug2: service_accept: ssh-userauth
157debug1: SSH2_MSG_SERVICE_ACCEPT received
158debug3: send packet: type 50
159debug3: receive packet: type 51
160debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
161debug3: start over, passed a different list publickey,gssapi-keyex,gssapi-with-mic,password
162debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
163debug3: authmethod_lookup gssapi-keyex
164debug3: remaining preferred: gssapi-with-mic,publickey,keyboard-interactive,password
165debug3: authmethod_is_enabled gssapi-keyex
166debug1: Next authentication method: gssapi-keyex
167debug1: No valid Key exchange context
168debug2: we did not send a packet, disable method
169debug3: authmethod_lookup gssapi-with-mic
170debug3: remaining preferred: publickey,keyboard-interactive,password
171debug3: authmethod_is_enabled gssapi-with-mic
172debug1: Next authentication method: gssapi-with-mic
173debug1: Unspecified GSS failure.  Minor code may provide more information
174No Kerberos credentials available (default cache: KEYRING:persistent:0)
175
176debug1: Unspecified GSS failure.  Minor code may provide more information
177No Kerberos credentials available (default cache: KEYRING:persistent:0)
178
179debug2: we did not send a packet, disable method
180debug3: authmethod_lookup publickey
181debug3: remaining preferred: keyboard-interactive,password
182debug3: authmethod_is_enabled publickey
183debug1: Next authentication method: publickey
184debug1: Offering RSA public key: &lt;foo&gt;
185debug3: send_pubkey_test
186debug3: send packet: type 50
187debug2: we sent a publickey packet, wait for reply
188debug3: receive packet: type 51
189debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
190debug1: Trying private key: /path/to/.ssh/my_key.rsa
191debug3: sign_and_send_pubkey: RSA SHA256:**********************************
192debug3: send packet: type 50
193debug2: we sent a publickey packet, wait for reply
194debug3: receive packet: type 52
195debug1: Authentication succeeded (publickey).
196Authenticated to server.tld ([server.tld]:22).
197debug1: channel 0: new [client-session]
198debug3: ssh_session2_open: channel_new: 0
199debug2: channel 0: send open
200debug3: send packet: type 90
201debug1: Requesting no-more-sessions@openssh.com
202debug3: send packet: type 80
203debug1: Entering interactive session.
204debug1: pledge: network
205debug3: receive packet: type 91
206debug2: callback start
207debug2: fd 3 setting TCP_NODELAY
208debug3: ssh_packet_set_tos: set IP_TOS 0x08
209debug2: client_session2_setup: id 0
210debug1: Sending environment.
211debug3: Ignored env XDG_SESSION_ID
212debug3: Ignored env HOSTNAME
213debug3: Ignored env SELINUX_ROLE_REQUESTED
214debug3: Ignored env TERM
215debug3: Ignored env SHELL
216debug3: Ignored env HISTSIZE
217debug3: Ignored env SSH_CLIENT
218debug3: Ignored env SELINUX_USE_CURRENT_RANGE
219debug3: Ignored env SSH_TTY
220debug3: Ignored env CDPATH
221debug3: Ignored env USER
222debug3: Ignored env LS_COLORS
223debug3: Ignored env SSH_AUTH_SOCK
224debug3: Ignored env MAIL
225debug3: Ignored env PATH
226debug3: Ignored env PWD
227debug1: Sending env LANG = xx_XX.UTF-8
228debug2: channel 0: request env confirm 0
229debug3: send packet: type 98
230debug3: Ignored env SELINUX_LEVEL_REQUESTED
231debug3: Ignored env HISTCONTROL
232debug3: Ignored env SHLVL
233debug3: Ignored env HOME
234debug3: Ignored env LOGNAME
235debug3: Ignored env SSH_CONNECTION
236debug3: Ignored env LESSOPEN
237debug3: Ignored env XDG_RUNTIME_DIR
238debug3: Ignored env _
239debug1: Sending command: echo TEST : $(hostname)
240debug2: channel 0: request exec confirm 1
241debug3: send packet: type 98
242debug2: callback done
243debug2: channel 0: open confirm rwindow 0 rmax 32768
244debug2: channel 0: rcvd adjust 2097152
245debug3: receive packet: type 99
246debug2: channel_input_status_confirm: type 99 id 0
247debug2: exec request accepted on channel 0
248TEST : server.tld
249debug3: receive packet: type 96
250debug2: channel 0: rcvd eof
251debug2: channel 0: output open -&gt; drain
252debug2: channel 0: obuf empty
253debug2: channel 0: close_write
254debug2: channel 0: output drain -&gt; closed
255debug3: receive packet: type 98
256debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
257debug3: receive packet: type 98
258debug1: client_input_channel_req: channel 0 rtype eow@openssh.com reply 0
259debug2: channel 0: rcvd eow
260debug2: channel 0: close_read
261debug2: channel 0: input open -&gt; closed
262debug3: receive packet: type 97
263debug2: channel 0: rcvd close
264debug3: channel 0: will not send data after close
265debug2: channel 0: almost dead
266debug2: channel 0: gc: notify user
267debug2: channel 0: gc: user detached
268debug2: channel 0: send close
269debug3: send packet: type 97
270debug2: channel 0: is dead
271debug2: channel 0: garbage collecting
272debug1: channel 0: free: client-session, nchannels 1
273debug3: channel 0: status: The following connections are open:
274  #0 client-session (t4 r0 i3/0 o3/0 fd -1/-1 cc -1)
275
276debug3: send packet: type 1
277Transferred: sent 3264, received 2656 bytes, in 0.0 seconds.
278Bytes per second: sent 92349.8, received 75147.4
279debug1: Exit status 0
280.
281ssh_client.connect(
282  server, username=ssh_user, key_filename=ssh_keypath,
283  disabled_algorithms=dict(pubkeys=[&quot;rsa-sha2-512&quot;, &quot;rsa-sha2-256&quot;]))
284

(note that there's no need to specify port=22, as that's the default)

I've found related Paramiko issue:
RSA key auth failing from paramiko 2.9.x client to dropbear server

Though it refers to Paramiko 2.9.0 change log, which seems to imply that the behavior is deliberate:

When the server does not send server-sig-algs, Paramiko will attempt the first algorithm in the above list. Clients connecting to legacy servers should thus use disabled_algorithms to turn off SHA2.

Since 2.9.2, Paramiko will say:

DEB [20220113-14:46:13.882] thr=1 paramiko.transport: Server did not send a server-sig-algs list; defaulting to our first preferred algo ('rsa-sha2-512')
DEB [20220113-14:46:13.882] thr=1 paramiko.transport: NOTE: you may use the 'disabled_algorithms' SSHClient/Transport init kwarg to disable that or other algorithms if your server does not support them!

Obligatory warning: Do not use AutoAddPolicy – You are losing a protection against MITM attacks by doing so. For a correct solution, see Paramiko "Unknown Server".

Your code for waiting for command to complete and reading its output is flawed too. See Wait to finish command executed with Python Paramiko. And for most purposes, the get_pty=True is not a good idea either.

Source https://stackoverflow.com/questions/70565357

Community Discussions contain sources that include Stack Exchange Network