Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Aruba platform integration doesn't work after upgrade ssh-rsa algorithm is deprecated #120492

Open
quackelduck opened this issue Jun 26, 2024 · 2 comments

Comments

@quackelduck
Copy link

The problem

Apparently since I updated my Aruba 305 IAP access points they have closed the ability to use ssh-rsa as HostKeyAlgorithms which makes it impossible for me to track devices as HA can't connect any more and returns an unexpected response.

When trying to connect via Terminal/SSH manually ("ssh {user}@192.168.0.xxx, -o HostKeyAlgotiythms=ssh-rsa") the response is "Unable to negotiate with 192.168.0.xxx port 22: no matching host key type found. Their offer: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519"

When I simply change the HostKEyAlgorithm in the query to rsa-sha2-512 it returns the fingerprint, asks for password and I can manually request the client list.

Firmware of Aruba IAP is "8.12.0.1_89864 SSR (Digitally Signed - Production Build)"

What version of Home Assistant Core has the issue?

core-2024.6.4

What was the last working version of Home Assistant Core?

No response

What type of installation are you running?

Home Assistant OS

Integration causing the issue

Aruba

Link to integration documentation on our website

https://www.home-assistant.io/integrations/aruba/

Diagnostics information

Line 92 in the device_tracker.py is not working for me any more due to the update by Aruba. The HostKeyAlgorithms=ssha-rsa is not supported any more and this code should be changed to HostKeyAlgorithms=rsa-sha2-512

Example YAML snippet

No response

Anything in the logs that might be useful for us?

No response

Additional information

No response

@home-assistant
Copy link

@quackelduck
Copy link
Author

quackelduck commented Jun 26, 2024

Just contacted an Aruba expert and apparently ssh-rsa has been deprecated as it is deemed insecure (he couldn't tell me when exactly, though).

Therefore, the issue could only be fixed on the Aruba side by downgrading the Aruba IAPs which should not be a solution.

@quackelduck quackelduck changed the title Aruba platform integration Aruba platform integration doesn't work after upgrade ssh-rsa algorithm is depricated Jun 26, 2024
@quackelduck quackelduck changed the title Aruba platform integration doesn't work after upgrade ssh-rsa algorithm is depricated Aruba platform integration doesn't work after upgrade ssh-rsa algorithm is deprecated Jun 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant