#873019 shellinabox: ssh unsupported option after username input

Package:
shellinabox
Source:
shellinabox
Description:
publish command line shell through AJAX interface
Submitter:
Leonardo Marino-Ramirez
Date:
2023-04-05 06:33:02 UTC
Severity:
normal
#873019#5
Date:
2017-08-23 18:38:58 UTC
From:
To:
Dear Maintainer,

After providing the username I am getting:

command-line line 0: Unsupported option "rhostsrsaauthentication"
command-line line 0: Unsupported option "rsaauthentication"

Then, I am prompted for a password (Password:)

I am able to login and the messages seem to be related to ssh parameters passed at some point.

This is what I see:

login: <USERNAME>
command-line line 0: Unsupported option "rhostsrsaauthentication"
command-line line 0: Unsupported option "rsaauthentication"
Password:

Then the login proceeds and things are fine.
#873019#10
Date:
2017-08-23 20:56:00 UTC
From:
To:
The bug is located in shellinabox/service.c

Removing the flags:
#873019#15
Date:
2020-01-02 18:55:01 UTC
From:
To:
Dear maintainer,

Please remove these outdated ssh options from service.c:
#873019#20
Date:
2021-03-07 21:27:53 UTC
From:
To:
When using the built-in SSH service description, that produces
	command-line line 0: Unsupported option "rhostsrsaauthentication"
	command-line line 0: Unsupported option "rsaauthentication"

this is because SSH is mapped (initService function) to running ssh(1)
with a bunch of options which include
 -oRhostsRSAAuthentication=no -oRSAAuthentication=no

However, these options were removed in OpenSSH 7.4 along SSH 1 support,
as documented by Colin in https://salsa.debian.org/ssh-team/openssh/-/commit/fb87db8aa47d3508be8e5bb1d21897fa1f2eca90
(debian bug #851573)

The attached patch solves it.

Upstream bug: https://github.com/shellinabox/shellinabox/issues/458
#873019#25
Date:
2023-04-05 06:28:57 UTC
From:
To:
-- 
Hello, did you receive my two previous messages?
please check and reply me