Bug#964953: lftp: set sftp:auto-confirm yes doesn't work

[Martin Ždila]

Package: lftp
Version: 4.8.4-2+b1
Severity: normal

Dear Maintainer,

In Debian Testing (Bullseye) lftp option "set sftp:auto-confirm yes" stopped
working. The problem is that ssh doesn't output the prompt "Are you sure you
want to continue connecting (yes/no)?" and so lftp can't answer it.

lftp :~> set sftp:auto-confirm yes
lftp :~> set log:enabled true
lftp :~> open sftp://example.com -u someuser,somepassword
lftp some...@example.com:~> ls
---- Running connect program (ssh -a -x -s -l someuser example.com sftp)
---> sending a packet, length=5, type=1(INIT), id=0
The authenticity of host 'example.com (1.2.3.4)' can't be established.
<--- ECDSA key fingerprint is
SHA256:bugmuoMea8sptvHgg8uyo2dQN857geiLloXWRj3sC4g.
`ls' at 0 [Connecting...]

(hangs forever)

There is no problem on Debian Stable (Buster).

Workaround is to run "ssh -a -x -s -l someuser example.com sftp" (which shows
the prompt) and to accept the key manually.




-- System Information:
Debian Release: bullseye/sid
APT prefers testing
APT policy: (990, 'testing'), (300, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.7.0-1-amd64 (SMP w/24 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lftp depends on:
ii libc6 2.30-8
ii libgcc-s1 [libgcc1] 10.1.0-4
ii libgnutls30 3.6.14-2
ii libidn2-0 2.3.0-1
ii libreadline8 8.0-4
ii libstdc++6 10.1.0-4
ii libtinfo6 6.2-1
ii netbase 6.1
ii zlib1g 1:1.2.11.dfsg-2

Versions of packages lftp recommends:
ii openssh-client [ssh-client] 1:8.3p1-1

lftp suggests no packages.

-- debconf-show failed

[Philip Mott]

Hi there,

It’s been over two years since this bug was reported in Bullseye - is there any update on a fix?

Thanks

[Philip Mott]

One workaround is to set this in /etc/ssh/ssh_config:

StrictHostKeyChecking accept-new