Can't access with key even other app can

[Devonshin]

Hi,

I can't connect to my server (ec2-user, aws ec2) with my private key (RSA 2048, generated by aws). It always asks for a password.

So if I send the password as empty, nothing happens.

But other apps works well without password.

Do you have any idea of this ?

Thansk a lot !

[isontheline]

Hi @Devonshin 👋

Could you try to extract the verbose logs about your connection issue? It may help to find the root cause.
You may find logs here : https://webssh.net/documentation/help/howtos/enabling-verbose-logging/

[Devonshin]

Hi ! Thanks for reply.
This is the log from app. I masked out important information.

2024/06/16 10:37:02:700 [INFO] Thank you so much for using WebSSH 26.4.1360 on macOS Version 14.5 (Build 23F79) 🙏
2024/06/16 10:37:02:701 [DEBUG] Launching Data Migration...
2024/06/16 10:37:02:701 [DEBUG] Checking if settings need to be migrated...
2024/06/16 10:37:02:701 [DEBUG] Data Migration Done!
2024/06/16 10:37:02:701 [DEBUG] Launching Vacuum on the local database...
2024/06/16 10:37:02:702 [DEBUG] 0 objects have been vacuumed
2024/06/16 10:37:02:719 [VERBOSE] Will notify when setting 'WEBSSH_HOME_SCREEN_QUICK_ACTIONS_STRATEGY' will change
2024/06/16 10:37:02:720 [VERBOSE] Will notify when setting 'WEBSSH_HOME_SCREEN_QUICK_ACTIONS_MASHREPL' will change
2024/06/16 10:37:02:720 [VERBOSE] Will notify when setting 'WEBSSH_HOME_SCREEN_QUICK_ACTIONS_PING' will change
2024/06/16 10:37:02:720 [VERBOSE] Will notify when setting 'WEBSSH_HOME_SCREEN_QUICK_ACTIONS_WEBBROWSER' will change
2024/06/16 10:37:02:720 [VERBOSE] Will notify when setting 'WEBSSH_HOME_SCREEN_QUICK_ACTIONS_FAVORITE_SERVERS' will change
2024/06/16 10:37:02:806 [DEBUG] Application did become active
2024/06/16 10:37:02:806 [DEBUG] No pin code set. WebSSH won't be locked.
2024/06/16 10:37:02:814 [DEBUG] Device language : en
2024/06/16 10:37:02:814 [DEBUG] Language bundle is not loaded. Will load this bundle : en
2024/06/16 10:37:02:819 [VERBOSE] Adding DNS Resolver Address 192.168.50.1 : IPv4 address
2024/06/16 10:37:02:837 [VERBOSE] SavedConnectionListViewController::viewDidLoad::SERVER
2024/06/16 10:37:02:841 [VERBOSE] Will notify when setting 'WEBSSH_SETTING_CONNECTION_LIST_ROW_DETAILS' will change
2024/06/16 10:37:02:849 [DEBUG] WebSSH should be locked after delay (secs) : 60
2024/06/16 10:37:04:976 [VERBOSE] Saving scenes sessions to database
2024/06/16 10:37:04:976 [VERBOSE] Saving (pushAllowed == 0) object F068BBF7-1B3C-407E-8233-712525E3F116 to local database
2024/06/16 10:37:05:354 [DEBUG] No custom SSH Config File will overwrite this connection settings
2024/06/16 10:37:05:354 [VERBOSE] Want to connect with a Private Key
2024/06/16 10:37:05:355 [DEBUG] Private Key is not encrypted because we can load it without any passphrase.
2024/06/16 10:37:05:355 [DEBUG] Private Key is encrypted : 0
2024/06/16 10:37:05:355 [VERBOSE] Load Private Key in OpenSSH Format
2024/06/16 10:37:05:355 [VERBOSE] Launching connection (SSH)...
2024/06/16 10:37:05:355 [VERBOSE] Resolving '{{masked}}.ap-northeast-2.compute.amazonaws.com'...
2024/06/16 10:37:05:361 [VERBOSE] Resolved address is : {{masked}}
2024/06/16 10:37:05:361 [DEBUG] Connecting to SSH...
2024/06/16 10:37:05:361 [VERBOSE] Launching connection with block...
2024/06/16 10:37:05:361 [VERBOSE] Won't dismiss prompt because no one is displayed.
2024/06/16 10:37:05:370 [DEBUG] IP Strategy is set to 'ipv6'. Does IPv6 is prefered over IPv4? => 1
2024/06/16 10:37:05:371 [DEBUG] No SOCKS Tunnel launched. SSH connection will be established without any SOCKS hostname.
2024/06/16 10:37:07:830 [DEBUG] Connected to : ec2-{{masked}}.ap-northeast-2.compute.amazonaws.com ({{masked}})
2024/06/16 10:37:07:832 [DEBUG] Authentication using login/privatekey
2024/06/16 10:37:09:769 [DEBUG] Authentication has failed
2024/06/16 10:37:09:771 [ERROR] <EngineLog>
  <AuthenticatePk_ssh>
    <EngineVersion>9.5.0.98</EngineVersion>
    <EngineStatus>2</EngineStatus>
    <sshAuthenticatePk2>
      <keyFingerprint>ssh-rsa 2048 {{masked}}</keyFingerprint>
      <requestUserAuthService>
        <sendServiceRequest>
          <svcName>ssh-userauth</svcName>
          <SentServiceReq>ssh-userauth</SentServiceReq>
        </sendServiceRequest>
      </requestUserAuthService>
      <AuthList>publickey,gssapi-keyex,gssapi-with-mic</AuthList>
      <hashSignPkAuth>
        <rsaSigLen>256</rsaSigLen>
      </hashSignPkAuth>
      <hostKeyAlg>4</hostKeyAlg>
      <error>Authentication failed or partial success. (4)</error>
      <PartialSuccess4>0</PartialSuccess4>
      <error>When partial success is 0, it means you are not using the correct private key that corresponds to the public key installed in the SSH user account.</error>
      <error>Also, to force Engine to continue with password authentication even if the public-key authentication fails, set UncommonOptions = "PubkeyOrPassword".</error>
      <AuthList>publickey,gssapi-keyex,gssapi-with-mic</AuthList>
      <error>Publickey authentication failed..</error>
    </sshAuthenticatePk2>
    <error>Failed.</error>
  </AuthenticatePk_ssh>
</EngineLog>
2024/06/16 10:37:09:876 [DEBUG] Dismissing prompt...

[isontheline]

Seems that private key is not used correctly by WebSSH.
Which format are you using for the key?

Have you some time to generate a private key from within WebSSH and put the public part on your server?

[Devonshin]

This access key is self-issued by AWS for connect to EC2 instances. There are no problems when using other ssh programs.
I think that WebSsh will be able to connect normally if I create my own key, but I want to use AWS's access key.
Anyway, I will create and use access keys locally.
Thanks !