• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Resolved Plesk Migration failed encountered RSA key, expected OPENSSH key

lucflash

New Pleskian
Hey guys,

i would like to migrate from a Debian 8 Server with Plesk to a new one with CentOS 7.
i managed the exact task multiple times last year and always used the method using ssh key file.
The error message says:

Code:
Failed to connect to the source server 'source' (XXX.XXX.XXX.XXX) by SSH: encountered RSA key, expected OPENSSH key

in /var/log/auth.log on the source server i can see:
Code:
userauth_pubkey: unsupported public key algorithm: rsa-sha2-512

i know debian 8 is out of date, but is there any chance of make a compatible call?
i tried generating new keyfile on the source server and the destination server


anyway i also tried using the name + password method with no success:

Code:
Failed to fetch basic information about resellers, clients and domains data from source servers
Cause: Command execution failed on the local server with non-zero exit code.
command: rsync -r --chmod=Fu=r,Du=rwx,go= --timeout=30 -e 'ssh -i /usr/local/psa/var/modules/panel-migrator/sessions/20220114163634/ssh-keys/id_rsa.XXX.XXX.XXX.XXX -p 22 -o PasswordAuthentication=no -o StrictHostKeyChecking=no -o GSSAPIAuthentication=no' /usr/local/psa/admin/plib/modules/panel-migrator/backend/lib/python/parallels/plesk/source/legacy/extras/plesk_17_0_pmm_shared/ [email protected]:/root/plesk_migrator/plesk_migrator-r9gop9voxf8bkj3jjc3my4ao24gq6dle/pmm_agent
exit code: 255
stdout:
stderr: Permission denied (publickey,password).
rsync: connection unexpectedly closed (0 bytes received so far) [sender]
rsync error: unexplained error (code 255) at io.c(226) [sender=3.1.2]

That is a critical error, migration was stopped.

i can´t find any solution on the internet.
port.plesk.com/hc/en-us/articles/115000628774-Unable-to-start-Plesk-migration-due-to-invalid-permissions-on-ssh-files-Permission-denied-publickey-gssapi-with-mic- didnt work either

can someone help please?
thanks
 
I figured it out. Just for someone who is dealing with the same problem.

I checked which algorithms the source server supports with: ssh -Q kex
which was:

Code:
diffie-hellman-group1-sha1
diffie-hellman-group14-sha1
diffie-hellman-group-exchange-sha1
diffie-hellman-group-exchange-sha256
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
diffie-hellman-group1-sha1
[email protected]

then i generated new key files with ssh-keygen -t ecdsa -b 521 because ecdsa is supported.
now migration works
 
I had the same problem with CentOS7 and Ubuntu 12.
This indeed was the solution.

Only weird thing is, I never had this problem the last few months with the same version difference.
So what changed?
 
Back
Top