From: Charles Oliver Nutter <charles.nutter@...>
Date: 2008-07-30T02:04:35+09:00
Subject: Re: [jRuby] net/ssh unsupported algorithm: DSS1withDSA (OpenSSL::PKey::PKeyError)

Charles Oliver Nutter wrote:
> Une B辿vue wrote:
>> I've migrated from CRuby to jRuby with the same code for ssh connection.
>> However, within jRuby i get this error message :
>> Exception in thread "AWT-EventQueue-0"
>> /opt/jruby/lib/ruby/gems/1.8/gems/net-ssh-2.0.3/lib/net/ssh/transport/ke
>> x/diffie_hellman_group1_sha1.rb:187:in `ssh_do_verify': unsupported
>> algorithm: DSS1withDSA (OpenSSL::PKey::PKeyError)
>>         from
>> /opt/jruby/lib/ruby/gems/1.8/gems/net-ssh-2.0.3/lib/net/ssh/transport/ke
>> x/diffie_hellman_group1_sha1.rb:187:in `verify_signature'
> 
> I assume you've installed JRuby-OpenSSL, so what's probably happening 
> here is that either JRuby-OpenSSL doesn't support that algorithm or the 
> encryption library it ships with doesn't support that algorithm. JOSSL 
> uses BouncyCastle...so I'm checking their docs now.

Disclaimer: I know practically nothing about cryptography.

After a little poking around, it looks like the only references to 
DSS1withDSA on the whole interwebs are the ones associated with this 
thread. So it looks to me like somewhere in JOSSL we're supposed to be 
translating DSS1 to SHA1 (which from most references appear to be 
basically the same) and looking for SHA1withDSA, which BouncyCastle 
*does* support. So it seems to be a translation problem in JOSSL. Can 
you file a bug for it please?

http://jira.codehaus.org/browse/JRUBY

- Charlie