From unknown Sat Apr 18 07:53:25 2026
X-Loop: owner@bugs.x2go.org
Subject: Bug#1380: x2goclient shows wrong fingerprint
Reply-To: Christian Krause <christian.krause@idiv.de>, 1380@bugs.x2go.org
Resent-From: Christian Krause <christian.krause@idiv.de>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: X2Go Developers <x2go-dev@lists.x2go.org>
X-Loop: owner@bugs.x2go.org
Resent-Date: Mon, 01 Apr 2019 15:15:02 +0000
Resent-Message-ID: <handler.1380.B.15541315219923@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: report 1380
X-X2Go-PR-Package: x2goclient
X-X2Go-PR-Keywords: 
Received: via spool by submit@bugs.x2go.org id=B.15541315219923
          (code B); Mon, 01 Apr 2019 15:15:02 +0000
Received: (at submit) by bugs.x2go.org; 1 Apr 2019 15:12:01 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=3.0 tests=BAYES_50,URIBL_BLOCKED
	autolearn=ham autolearn_force=no version=3.4.2
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 7A7565DAEF
	for <submit@bugs.x2go.org>; Mon,  1 Apr 2019 17:11:57 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id yIhPOl6UMMOT for <submit@bugs.x2go.org>;
	Mon,  1 Apr 2019 17:11:48 +0200 (CEST)
X-Greylist: delayed 324 seconds by postgrey-1.35 at ymir.das-netzwerkteam.de; Mon, 01 Apr 2019 17:11:48 CEST
Received: from v4.rz.uni-leipzig.de (v4.rz.uni-leipzig.de [139.18.1.30])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id BE97F5DA96
	for <submit@bugs.x2go.org>; Mon,  1 Apr 2019 17:11:48 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by v4.rz.uni-leipzig.de (Postfix) with ESMTP id A1130780E0
	for <submit@bugs.x2go.org>; Mon,  1 Apr 2019 17:06:24 +0200 (CEST)
X-Virus-Scanned: by amavisd-new at v4-ul
Received: from v4.rz.uni-leipzig.de ([127.0.0.1])
	by localhost (v4.rz.uni-leipzig.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id AkVbt1x8mYEW for <submit@bugs.x2go.org>;
	Mon,  1 Apr 2019 17:06:24 +0200 (CEST)
Received: from v2.rz.uni-leipzig.de (v2.rz.uni-leipzig.de [139.18.1.27])
	by v4.rz.uni-leipzig.de (Postfix) with ESMTPS id 716FB780AC
	for <submit@bugs.x2go.org>; Mon,  1 Apr 2019 17:06:24 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by v2.rz.uni-leipzig.de (Postfix) with ESMTP id EE6C464066
	for <submit@bugs.x2go.org>; Mon,  1 Apr 2019 17:06:23 +0200 (CEST)
X-Virus-Scanned: by amavisd-new at v2-ul
Received: from v2.rz.uni-leipzig.de ([127.0.0.1])
	by localhost (v2.rz.uni-leipzig.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id VYFjthLEiiKO for <submit@bugs.x2go.org>;
	Mon,  1 Apr 2019 17:06:23 +0200 (CEST)
Received: from exchange.dom.uni-leipzig.de (urzdommbx02.dom.intern.uni-leipzig.de [172.18.88.111])
	by v2.rz.uni-leipzig.de (Postfix) with ESMTPS id D12F364063
	for <submit@bugs.x2go.org>; Mon,  1 Apr 2019 17:06:23 +0200 (CEST)
Received: from [172.18.115.44] (172.18.89.129) by
 urzdommbx02.dom.uni-leipzig.de (172.18.88.111) with Microsoft SMTP Server
 (TLS) id 15.0.1395.4; Mon, 1 Apr 2019 17:06:23 +0200
To: <submit@bugs.x2go.org>
From: Christian Krause <christian.krause@idiv.de>
Message-ID: <0eba51f6-7fb1-fc4c-e660-11e2d7869caf@idiv.de>
Date: Mon, 1 Apr 2019 17:06:23 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101
 Thunderbird/60.5.3
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Language: en-IE
Content-Transfer-Encoding: 8bit
X-ClientProxiedBy: urzdomcas02.dom.uni-leipzig.de (172.18.88.110) To
 urzdommbx02.dom.uni-leipzig.de (172.18.88.111)

Package: x2goclient
Version: 4.1.2.0

The Windows version of x2goclient shows "a" wrong server key fingerprint. Both
the Linux client and PuTTY on Windows show the correct fingerprint.

x2goclient on Windows:

> The server is unknown. Do you trust the host key?
> Public key hash: SSH proxy connection error: (address omitted):22 -
> 57:a8:d5:ae:c6:9d:6a:a2:d1:4e:a4:c4:cd:51:7e:c8:72:75:51:5d

PuTTY on Windows:

> The server's host key is not cached in the registry. You have no guarantee
> that the server is the computer you think it is.
> The server's rsa2 key fingerprint is:
> ssh-rsa 2048 f3:27:28:1a:16:92:7e:a0:74:26:2f:ce:2e:54:f7:62
> If you trust this host, hit Yes to ...

On the host I'm trying to connect to:

```console
$ for i in /etc/ssh/*.pub ; do ssh-keygen -lf $i ; done
1024 27:6d:55:b1:f0:60:b6:06:ea:49:a1:c7:d5:4f:60:e9
/etc/ssh/ssh_host_dsa_key.pub (DSA)
2048 0e:68:68:d6:ed:be:d2:11:2f:11:60:41:97:b4:15:33 /etc/ssh/ssh_host_key.pub
(RSA1)
2048 f3:27:28:1a:16:92:7e:a0:74:26:2f:ce:2e:54:f7:62
/etc/ssh/ssh_host_rsa_key.pub (RSA)
```

Note: It's also really hard to figure out for which key x2go is trying to show
me the fingerprint. Both PuTTY and OpenSSH show the key type, so it's really
obvious. With x2go, I have to guess. (That's worth a different bug report, I know.)

-- 
Christian Krause

Scientific Computing Administration and Support

-------------------------------------------------------------------------------

Email: christian.krause@idiv.de

Office: BioCity Leipzig 5e, Room 3.201.3

Phone: +49 341 97 33144

-------------------------------------------------------------------------------

German Centre for Integrative Biodiversity Research (iDiv) Halle-Jena-Leipzig

Deutscher Platz 5e

04103 Leipzig

Germany

-------------------------------------------------------------------------------

iDiv is a research centre of the DFG – Deutsche Forschungsgemeinschaft

iDiv ist eine zentrale Einrichtung der Universität Leipzig im Sinne des § 92
Abs. 1 SächsHSFG und wird zusammen mit der Martin-Luther-Universität
Halle-Wittenberg und der Friedrich-Schiller-Universität Jena betrieben sowie in
Kooperation mit dem Helmholtz-Zentrum für Umweltforschung GmbH – UFZ.
Beteiligte Kooperationspartner sind die folgenden außeruniversitären
Forschungseinrichtungen: das Helmholtz-Zentrum für Umweltforschung GmbH - UFZ,
das Max-Planck-Institut für Biogeochemie (MPI BGC), das Max-Planck-Institut für
chemische Ökologie (MPI CE), das Max-Planck-Institut für evolutionäre
Anthropologie (MPI EVA), das Leibniz-Institut Deutsche Sammlung von
Mikroorganismen und Zellkulturen (DSMZ), das Leibniz-Institut für
Pflanzenbiochemie (IPB), das Leibniz-Institut für Pflanzengenetik und
Kulturpflanzenforschung (IPK) und das Leibniz-Institut Senckenberg Museum für
Naturkunde Görlitz (SMNG). USt-IdNr. DE 141510383
