In attempting to setup SSH certificate authentication I have run into this issue on any host I have tried to setup for SSH cert authentication, running Debian 11 LXC unprivileged. I have checked the backports but no updates for openssh anywhere. Everything is up to date on the Proxmox VE and LXC side.
sshd[...]: error: No matching private key for certificate: /etc/ssh/ssh_host_rsa_key-cert.pub
sshd[...]: Connection closed by 192.168.0.86 port 54856 [preauth]
I do not understand why it is even asking for private key, which, in any case is available under /etc/ssh together with the public key.
I have seen past threads in Ubuntu where exactly the same issue was officially identified as a bug (basically the bug is that the system checks for the private key instead of the public key).
Anyone has an idea if this might also be a bug or something else; possibly you have a workaround or could provide info to help me dive deeper to identify the source of the issue. I am confident the problem is neither correct setup of SSH to support certs, neither the host certificate or the public/private key for the host. The CA has been setup correctly as well. Having enabled debug level 3 does not seem to provide any clues either.
sshd[...]: error: No matching private key for certificate: /etc/ssh/ssh_host_rsa_key-cert.pub
sshd[...]: Connection closed by 192.168.0.86 port 54856 [preauth]
I do not understand why it is even asking for private key, which, in any case is available under /etc/ssh together with the public key.
I have seen past threads in Ubuntu where exactly the same issue was officially identified as a bug (basically the bug is that the system checks for the private key instead of the public key).
Anyone has an idea if this might also be a bug or something else; possibly you have a workaround or could provide info to help me dive deeper to identify the source of the issue. I am confident the problem is neither correct setup of SSH to support certs, neither the host certificate or the public/private key for the host. The CA has been setup correctly as well. Having enabled debug level 3 does not seem to provide any clues either.