• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Resolved Plesk Migration failed encountered RSA key, expected OPENSSH key

lucflash

New Pleskian
Hey guys,

i would like to migrate from a Debian 8 Server with Plesk to a new one with CentOS 7.
i managed the exact task multiple times last year and always used the method using ssh key file.
The error message says:

Code:
Failed to connect to the source server 'source' (XXX.XXX.XXX.XXX) by SSH: encountered RSA key, expected OPENSSH key

in /var/log/auth.log on the source server i can see:
Code:
userauth_pubkey: unsupported public key algorithm: rsa-sha2-512

i know debian 8 is out of date, but is there any chance of make a compatible call?
i tried generating new keyfile on the source server and the destination server


anyway i also tried using the name + password method with no success:

Code:
Failed to fetch basic information about resellers, clients and domains data from source servers
Cause: Command execution failed on the local server with non-zero exit code.
command: rsync -r --chmod=Fu=r,Du=rwx,go= --timeout=30 -e 'ssh -i /usr/local/psa/var/modules/panel-migrator/sessions/20220114163634/ssh-keys/id_rsa.XXX.XXX.XXX.XXX -p 22 -o PasswordAuthentication=no -o StrictHostKeyChecking=no -o GSSAPIAuthentication=no' /usr/local/psa/admin/plib/modules/panel-migrator/backend/lib/python/parallels/plesk/source/legacy/extras/plesk_17_0_pmm_shared/ [email protected]:/root/plesk_migrator/plesk_migrator-r9gop9voxf8bkj3jjc3my4ao24gq6dle/pmm_agent
exit code: 255
stdout:
stderr: Permission denied (publickey,password).
rsync: connection unexpectedly closed (0 bytes received so far) [sender]
rsync error: unexplained error (code 255) at io.c(226) [sender=3.1.2]

That is a critical error, migration was stopped.

i can´t find any solution on the internet.
port.plesk.com/hc/en-us/articles/115000628774-Unable-to-start-Plesk-migration-due-to-invalid-permissions-on-ssh-files-Permission-denied-publickey-gssapi-with-mic- didnt work either

can someone help please?
thanks
 
I figured it out. Just for someone who is dealing with the same problem.

I checked which algorithms the source server supports with: ssh -Q kex
which was:

Code:
diffie-hellman-group1-sha1
diffie-hellman-group14-sha1
diffie-hellman-group-exchange-sha1
diffie-hellman-group-exchange-sha256
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
diffie-hellman-group1-sha1
[email protected]

then i generated new key files with ssh-keygen -t ecdsa -b 521 because ecdsa is supported.
now migration works
 
I had the same problem with CentOS7 and Ubuntu 12.
This indeed was the solution.

Only weird thing is, I never had this problem the last few months with the same version difference.
So what changed?
 
Back
Top