@dkocher commented

Can you confirm this bug when running version 2.8?

d6a76bc commented

I do have the same problem: login via ssh works perfectly, via cyberduck I get an "publickey authentication failed" error (I even tried copy-pasting password to be sure that I use the same as with ssh). my passphrase has blanks in it, maybe thats the problem? but if I store the key in the keychain and go there to have a look at the password I can see the correct passphrase stored there (by cyberduck) so whats the problem?

@dkocher commented

I have tested against the latest nightly build also using a password with whitespace.

d6a76bc commented

I am sorry, I still get the error. I am pretty sure that it is a Cyberduck error because with Fetch, ssh and other tools it works perfectly. Check the error screenshot here

@dkocher commented

This may be related to the issue with corrupted Keychain passwords (see #1354). Try deleting any passwords in the Keychain of the server you are trying to connect to. To modify saved passwords in the Keychain, open /Applications/Utilities/Keychain Access.app.

@dkocher commented

Addendum: For private key passwords, these are stored as SSHKeychain for the Name of the application password in the Keychain.

d6a76bc commented

I am very sorry to post again. Should I just shut up and stop using Cyberduck? It does not work for me. In every other Application it works but not with Cyberduck. I tried the latest nightly build again from January 3rd.

In the Screenshot I posted there is the command line and error issued. I tried the command and got the following:

sftp root@www.olat.org:22
Connecting to www.olat.org...
Couldn't stat remote file: No such file or directory
File "/root/22" not found.

So I tried it again without the port:

sftp root@www.olat.org
Connecting to www.olat.org...
sftp> exit

Might the port be a problem? Then I thought the problem might be the domain mapping... (who knows, anything possible). So i tried directly with the hostname "idlnx46.uzh.ch". Didnt work either. Also I was not sure why Cyberduck wants a Name for the key. All you usually enter is the passphrase. Of course there is the username to login on the sftp server but this information I enter in my Bookmark (Lesezeichen). I use "root". After that I shoud just be asked about the passphrase. This is a bit confusing...

I will add two screenshots to illustrate what I mean. Just let me know when I should shut up and stop testing :-)

d6a76bc commented

I cannot upload the screenshots, I sent them to dkocher.

By the way: It has nothing to do with the keychain because I am not storing the password there.

@dkocher commented

Have you tried deleting all passwords with the name SSHKeychain from the Keychain?

DukBerCy commented

I wonder if scp functionality will be added soon.
Cannot find a comfortable way to scp files to remote machines on Mac.
SFTP with Public Key will not work due to the following error:

" I/O Error: Connection failed
Invalid PEM structure, '-----BEGIN...' missing"

Does not work even if the SFTP Setting is set to: "SCP (Secure Copy)" instead of "SFTP (SSH Connection)"

Thank you.

DukBerCy commented

In FileZilla and WinSCP you are able to point to a Private Key, which is used instead of a password for SCP filetransfer.
FileZilla 3.2.4.1 on Mac will work, CyberDuck 3.2 cannot connect due to:
" I/O Error: Connection failed Invalid PEM structure, '-----BEGIN...' missing"

@dkocher commented

Replying to [comment:13 DukBerCy]:

In FileZilla and WinSCP you are able to point to a Private Key, which is used instead of a password for SCP filetransfer.
FileZilla 3.2.4.1 on Mac will work, CyberDuck 3.2 cannot connect due to:
" I/O Error: Connection failed Invalid PEM structure, '-----BEGIN...' missing"

Try to create a key using the ssh-keygen program from the OpenSSH distribution. The one you are using is not a supported format.

@dkocher commented

Replying to [comment:14 dkocher]:

Replying to [comment:13 DukBerCy]:

In FileZilla and WinSCP you are able to point to a Private Key, which is used instead of a password for SCP filetransfer.
FileZilla 3.2.4.1 on Mac will work, CyberDuck 3.2 cannot connect due to:
" I/O Error: Connection failed Invalid PEM structure, '-----BEGIN...' missing"

Try to create a key using the ssh-keygen program from the OpenSSH distribution. The one you are using is not a supported format.

Also refer to https://trac.cyberduck.io/wiki/help/en/howto/ssh#Howtoconfigurepublickeyauthentication.

anonymous commented

I can confirm this. rsa pubkeys don't seem to work with cyberduck. Same error message as on the attached image. Perhaps this is an java issue don't work mit muCommander either.

sidd commented

after updating to cyberduck 3.3 (5552) i cannot login via sftp and id_rsa key anymore (same symptom on 4 different servers). i recently changed my key, but via ssh and sftp in terminal everything works fine on all servers. i tried to get rid of the error by reselecting my ir_rsa key from ~/.ssh, but no luck: cyberduck still echoing "publickey authorization failed". what am i missing? any hints?

sidd commented

Replying to [comment:17 sidd]:

i recently changed my key, but via ssh and sftp in terminal everything works fine on all servers. i tried to get rid of the error by reselecting my ir_rsa key from ~/.ssh, but no luck: cyberduck still echoing "publickey authorization failed".

can answer the question myself. needed to setup new SSHKeychain in keychain.app since my pw changed because of new rs_ida key. wasnt aware that cyberduck isn't echoing that and just grabs the wrong, "old" pw from keychain.

should have investigated one step further before posting here. keep up the good work!

@dkocher commented

Replying to [comment:18 sidd]:

Replying to [comment:17 sidd]:

i recently changed my key, but via ssh and sftp in terminal everything works fine on all servers. i tried to get rid of the error by reselecting my ir_rsa key from ~/.ssh, but no luck: cyberduck still echoing "publickey authorization failed".

can answer the question myself. needed to setup new SSHKeychain in keychain.app since my pw changed because of new rs_ida key. wasnt aware that cyberduck isn't echoing that and just grabs the wrong, "old" pw from keychain.

should have investigated one step further before posting here. keep up the good work!

Thanks for sharing that information here.

ce6ccf1 commented

ATTENTION: This is how you can fix it

Make sure you have the following component:

1. Community sources.
2. BSD Subsystem
3. Open SSH (very important that you this on your phone, if not, then dl it on cydia/installer/etc.)

Then try the steps again.

d492a58 commented

Hi,
I do have the same problem, connect via ssh or sftp on the command line works. but in cyberduck i get "Publickey authentication failed". I have tested this on the newest nightly build.

cheers daniel

64ff214 commented

This problem has been present for years.
If a passphrase is present, the connection works
once, and never again.
Instead of using the credentials which the system
already has (through ssh-add -K), cyberduck decodes
without passphrase later on and complains about
wrong PEM structure.

This made me finally switch over to forklift, where
such problems do not exist.

cheers - chris

@dkocher commented

Replying to [comment:22 tismer@…]:

This problem has been present for years.
If a passphrase is present, the connection works
once, and never again.
Instead of using the credentials which the system
already has (through ssh-add -K), cyberduck decodes
without passphrase later on and complains about
wrong PEM structure.

This made me finally switch over to forklift, where
such problems do not exist.

cheers - chris

This should be fixed as of 9726969.

cfc646c commented

Using RSA keys with Passphrase does not work on CyberDuck 4.0.2 (8610)! Regression bug? I'm moving to another program...