x/crypto/ssh/test: tests fail on RHEL9 ppc64le and x86

[laboger]

Go version

go version devel go1.23-f19f31f2e7 Fri Jan 19 22:38:49 2024 +0000 linux/ppc64le

Output of go env in your module/workspace:

go version
go version devel go1.23-f19f31f2e7 Fri Jan 19 22:38:49 2024 +0000 linux/ppc64le
[boger@ltcd97-lp6 test]$ go env
GO111MODULE=''
GOARCH='ppc64le'
GOBIN=''
GOCACHE='/home/boger/.cache/go-build'
GOENV='/home/boger/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='ppc64le'

What did you do?

When running tests in golang.org/x/crypto, I saw failures in ssh/test testcases as shown below. The failures happen on ppc64le and x86 when running on RHEL 9.3. They pass with the -short option on RHEL 9.3. They pass on RHEL8 and Ubuntu with or without the -short option.

What did you see happen?

--- FAIL: TestCertLogin (0.04s)
cert_test.go:70: TryDialWithAddr: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none publickey], no supported methods remain
test_unix_test.go:254: sshd: /tmp/sshtest993198346/sshd_config line 10: Deprecated option KeyRegenerationInterval
/tmp/sshtest993198346/sshd_config line 11: Deprecated option ServerKeyBits
/tmp/sshtest993198346/sshd_config line 17: Deprecated option RSAAuthentication
/tmp/sshtest993198346/sshd_config line 22: Deprecated option RhostsRSAAuthentication
main: sshd: ssh-dss is disabled, skipping key file /tmp/sshtest993198346/id_dsa
..... lots of output

--- FAIL: TestClientAuthAlgorithms (0.15s)
--- FAIL: TestClientAuthAlgorithms/rsa (0.04s)
session_test.go:443: failed for key "rsa"
test_unix_test.go:254: sshd: /tmp/sshtest216017125/sshd_config line 10: Deprecated option KeyRegenerationInterval
/tmp/sshtest216017125/sshd_config line 11: Deprecated option ServerKeyBits
/tmp/sshtest216017125/sshd_config line 17: Deprecated option RSAAuthentication
/tmp/sshtest216017125/sshd_config line 22: Deprecated option RhostsRSAAuthentication
main: sshd: ssh-dss is disabled, skipping key file /tmp/sshtest216017125/id_dsa
... lots of output

--- FAIL: TestClientAuthAlgorithms/dsa (0.04s)
    session_test.go:443: failed for key "dsa"
    test_unix_test.go:254: sshd: /tmp/sshtest1585037056/sshd_config line 10: Deprecated option KeyRegenerationInterval
        /tmp/sshtest1585037056/sshd_config line 11: Deprecated option ServerKeyBits
        /tmp/sshtest1585037056/sshd_config line 17: Deprecated option RSAAuthentication
        /tmp/sshtest1585037056/sshd_config line 22: Deprecated option RhostsRSAAuthentication
        main: sshd: ssh-dss is disabled, skipping key file /tmp/sshtest1585037056/id_dsa

... lots of output

This is mainly for your awareness. This is not necessarily a high priority issue for us.
I tried it on earlier Go versions and saw failures back to Go 1.20. I did not try anything earlier.

What did you expect to see?

PASS

[ianlancetaylor]

@golang/security

[rolandshoemaker]

cc @drakkan

[gopherbot]

Change https://go.dev/cl/562755 mentions this issue: ssh/test: don't use DSA keys in integrations tests, update the test RSA key