Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

UseRoaming is not available in Mac OSX Sierra #31

Closed
Kjir opened this issue Nov 24, 2016 · 9 comments
Closed

UseRoaming is not available in Mac OSX Sierra #31

Kjir opened this issue Nov 24, 2016 · 9 comments
Assignees
Labels

Comments

@Kjir
Copy link

Kjir commented Nov 24, 2016

When generating a key/configuration using github-keygen on OS X Sierra the SSH connections to github will give the following warning:

$ git pull
/Users/stephanebisinger/.ssh/config: line 41: Bad configuration option: useroaming
/Users/stephanebisinger/.ssh/config: terminating, 1 bad configuration options
@dolmen dolmen added the bug label Nov 26, 2016
@dolmen
Copy link
Owner

dolmen commented Nov 26, 2016

Short time workaround: just comment the option in ~/.ssh/config

github-keygen has builtin detection of the options supported by the local OpenSSH installation: it parses the local ssh_config man page. But UseRoaming is a difficult option to handle automatically as it was undocumented option (so not present in the manpage) but a potential security issue if enabled (if you fear that GitHub may attack you) which is the default in OpenSSH 5.4 to 7.1.
UseRoaming is still recognized (but deprecated, so ignored) in the version I have (7.2p2).

Could you give me the exact version of OpenSSH bundled on Sierra?

@dolmen dolmen self-assigned this Nov 26, 2016
dolmen added a commit that referenced this issue Nov 26, 2016
This option was deprecated in 7.2, is removed in 7.3.
dolmen added a commit that referenced this issue Nov 26, 2016
This option was deprecated in 7.2, is removed in 7.3.
@dolmen
Copy link
Owner

dolmen commented Nov 26, 2016

I've published release 1.301 that removes UseRoaming if OpenSSH 7.3+.

@elyscape
Copy link

elyscape commented Dec 5, 2016

@dolmen macOS Sierra has OpenSSH 7.2p2. That being said, Ubuntu 16.04 LTS has OpenSSH 7.2p2 and does support the UseRoaming option.

One way to check for this might be to shell out to ssh and check the stderr, like so:

removed:~ elyscape$ # macOS Sierra
removed:~ elyscape$ ssh -V
OpenSSH_7.2p2, LibreSSL 2.4.1
removed:~ elyscape$ ssh -o UseRoaming=no
command-line: line 0: Bad configuration option: useroaming
elyscape@removed:~$ # Ubuntu 16.04 LTS
elyscape@removed:~$ ssh -V
OpenSSH_7.2p2 Ubuntu-4ubuntu2.1, OpenSSL 1.0.2g  1 Mar 2016
elyscape@removed:~$ ssh -o UseRoaming=no
usage: ssh [-1246AaCfGgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]
           [-D [bind_address:]port] [-E log_file] [-e escape_char]
           [-F configfile] [-I pkcs11] [-i identity_file] [-L address]
           [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
           [-Q query_option] [-R address] [-S ctl_path] [-W host:port]
           [-w local_tun[:remote_tun]] [user@]hostname [command]

@keith-rollin
Copy link

Thanks, @elyscape. I just ran into this problem, too. I hopped up here to report it and found that you were all over it. So that was great!

@dolmen
Copy link
Owner

dolmen commented Dec 10, 2016

I think I will just add a special case for OpenSSH 7.2 on Sierra.
Could you give me the output of this command on Sierra?

$ perl -E 'say $^O'

@keith-rollin
Copy link

$ perl -E 'say $^O'
darwin

@keith-rollin
Copy link

And for grins:

$ uname -s
Darwin

@keith-rollin
Copy link

And if that's not incompatible enough for you:

$ sw_vers -productName
Mac OS X

dolmen added a commit that referenced this issue Dec 12, 2016
OpenSSH 7.2p2 on Ubuntu 16.04 still has UseRoaming as a noop
OpenSSH 7.2p2 on Sierra rejects UseRoaming

So the high version bound for UseRoaming is now lowered on Darwin.
@dolmen
Copy link
Owner

dolmen commented Dec 12, 2016

Release v1.302 is available.

@dolmen dolmen closed this as completed Dec 12, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants