Re: help? ssh connect w/ DSA pubkey auth keeps asking for passphrase; w/ RSA pubkey auth, all is OK

OpenMacNews <OpenMacNews@speakeasy.net> writes:

> ssh-keygen -b 2048 -t rsa -f /usr/local/etc/ssh/rsakeys/ssh.devbox.rsa
> -N "" -C
> "root@devbox"
> ssh-keygen -b 2048 -t dsa -f /usr/local/etc/ssh/dsakeys/ssh.devbox.dsa
> -N "" -C
> "root@devbox"
>
> after propagating both pubkeys to another box ('myserver'), if i 'ssh'
> to 'myserver' using the RSA key as an identity file:
>
>       IdentityFile  /usr/local/etc/ssh/rsakeys/ssh.devbox.rsa.pub
>
> all is OK.  i can immediately connect via pubkey auth with no error ...
>
>
>
> however, if i try the exact same thing but, with the DSA ident file:
>
>       IdentityFile  /usr/local/etc/ssh/dsakeys/ssh.devbox.dsa.pub
>
>
> on connection attempt, i get an error:
>
>       PEM_read_PrivateKey failed
>
> and a request for a passphrase:

It looks OK for me. Your private DSA key was not found. Why? I have no idea.

>       debug1: PEM_read_PrivateKey failed
>       debug1: read PEM private key done: type <unknown>
>       Enter passphrase for key 
> '/usr/local/etc/ssh/dsakeys/ssh.devbox.dsa.pub':
>
>
> i've googled, and all i'm finding (so far) is advice to create the DSA
> keys without passphrase ...

The ssh did not find any  private key (with/without passphrase).

> suggestions?

Use default locations of pub/pri keys and I sure they'll work.

HTH,
-- 
= Alexey G. Khramkov (agkhram) @ Infotech <agkhram{at}mercdev{dot}com> =
= GPG fingerprint : 944D 0C8B 343B 6C8D 50A1  061A E2DA 3E11 7765 6B47 =