RSA key format is not supported (Windows 11)

[cwa...@gmail.com]

Hello.

I have a problem with salt-minion on Windows 11.

The server is :
"Ubuntu 24.04.2 LTS"

ii salt-api 3007.1 amd64 Generic,
modular network access system
ii salt-common 3007.1 amd64 shared
libraries that salt requires for all packages
ii salt-master 3007.1 amd64 remote
manager to administer servers via salt
ii salt-minion 3007.1 amd64 client
package for salt, the distributed remote execution system


The minion is :
Salt-Minion-3007.1-Py3-AMD64-Setup.exe


On Windows 10, no problem, the minion connects to the server, everything
works fine.

On Windows 11, it fails, no connection. The error is :

2025-06-12 09:47:51,523 [salt.minion :1177][CRITICAL][7164]
Unexpected error while connecting to salt
Traceback (most recent call last):
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\minion.py", line 1146, in
_connect_minion
await minion.connect_master(failed=failed)
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\tornado\gen.py", line 780, in run
yielded = self.gen.throw(exc)
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\minion.py", line 1389, in connect_master
master, self.pub_channel = yield self.eval_master(
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\tornado\gen.py", line 767, in run
value = future.result()
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\tornado\gen.py", line 234, in wrapper
yielded = ctx_run(next, result)
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\minion.py", line 818, in eval_master
pub_channel = salt.channel.client.AsyncPubChannel.factory(
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\channel\client.py", line 413, in factory
auth = salt.crypt.AsyncAuth(opts, io_loop=io_loop)
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\crypt.py", line 695, in __new__
auth.__singleton_init__(opts, io_loop=io_loop)
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\crypt.py", line 731, in
__singleton_init__
self.get_keys()
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\crypt.py", line 1081, in get_keys
key = get_rsa_key(self.rsa_path, None)
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\crypt.py", line 307, in get_rsa_key
return _get_key_with_evict(path, str(os.path.getmtime(path)),
passphrase)
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\utils\decorators\__init__.py", line
296, in _memoize
cache[args_] = func(*args, **kwargs)
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\salt\crypt.py", line 291, in
_get_key_with_evict
key = RSA.importKey(f.read(), passphrase)
File "C:\Program Files\Salt
Project\Salt\Lib\site-packages\Cryptodome\PublicKey\RSA.py", line 829,
in import_key
raise ValueError("RSA key format is not supported")
ValueError: RSA key format is not supported
2025-06-12 09:48:51,380 [salt.minion :1103][ERROR ][7164] Minion
unable to successfully connect to a Salt Master.


Regards.

[Daniel Dehennin]

Hello

"cwa...@gmail.com" <cwa...@gmail.com> writes:


[...]

> ValueError: RSA key format is not supported
> 2025-06-12 09:48:51,380 [salt.minion :1103][ERROR ][7164]
> Minion unable to successfully connect to a Salt Master.

Looks like the same as 3 years old issue.[1]

Footnotes:
[1] https://github.com/saltstack/salt/issues/62141

--
Daniel Dehennin
Récupérer ma clef GPG: gpg --recv-keys 0xCC1E9E5B7A6FE2DF
Fingerprint: 3E69 014E 5C23 50E8 9ED6 2AAD CC1E 9E5B 7A6F E2DF

[Daniel Dehennin]

Daniel Dehennin <daniel....@baby-gnu.org> writes:

>> ValueError: RSA key format is not supported
>> 2025-06-12 09:48:51,380 [salt.minion :1103][ERROR ][7164]
>> Minion unable to successfully connect to a Salt Master.

It looks like the error is a badly generated minion.pem key[1].

Footnotes:
[1] https://github.com/saltstack/salt/issues/62141#issuecomment-2980020721