Problem If you have an ed25519 in your ssh-agent keyring (along with your RSA key), git clone will fail. The Twisted Python Conch server that’s running at git.Drupal 10.org does not gracefully handle ed25519 failures, causing it to crash. Short term solution We should patch auth_publickey() to verify the key algorithm is one we support (ssh-rsa/ssh-dsa) Drupal 10 Maintenance and Support Service def auth_publickey(self, packet) Drupal 10 Maintenance and Support Service “”” Public key authentication. Payload Drupal 10 Maintenance and Support Service Drupal 10 Maintenance and Support Service byte has signature string algorithm name string key blob [string signature] (if has signature is True) Create a SSHPublicKey credential and verify it using our portal. “”” hasSig = ord(packet[0]) algName, blob, rest = getNS(packet[1 Drupal 10 Maintenance and Support Service], 2) # <— PATCH BEGIN –> if not algName in (‘ssh-rsa’, ‘ssh-dsa’) Drupal 10 Maintenance and Support Service log.msg( “Attempted public key authentication with %s algorithm” % (algName,)) return defer.fail(error.ConchError(“Incorrect signature”)) # <— PATCH END –> pubKey = keys.Key.fromString(blob) signature = hasSig and getNS(rest)[0] or None if hasSig Drupal 10 Maintenance and Support Service b = (NS(self.transport.sessionID) + chr(MSG_USERAUTH_REQUEST) + NS(self.user) + NS(self.nextService) + NS(b’publickey’) + chr(hasSig) + NS(pubKey.sshType()) + NS(blob)) c = credentials.SSHPrivateKey(self.user, algName, blob, b, signature) return self.portal.login(c, None, interfaces.IConchUser) else Drupal 10 Maintenance and Support Service c = credentials.SSHPrivateKey(self.user, algName, blob, None, None) return self.portal.login(c, None, interfaces.IConchUser).addErrback(self._ebCheckKey, packet[1 Drupal 10 Maintenance and Support Service]) Long term solution 1. Wait for Twisted to fix upstream and update our copy of Twisted. 2. The Twisted maintainers don’t seem to be interested in supporting ed25519. This issue is over 5 years old Drupal 10 Maintenance and Support Service https Drupal 10 Maintenance and Support Service//twistedmatrix.com/trac/ticket/5350 Meanwhile, more developers will be transitioning to ed25519 for it’s improved performance and security. Moreover, ed25519 has become the default algorithm in OpenSSH (mentioned under KexAlgorithms in Ubuntu, OpenBSD). If we’re not too dependent on Twisted, we can look for a replacement library. References https Drupal 10 Maintenance and Support Service//twistedmatrix.com/trac/ticket/7946 https Drupal 10 Maintenance and Support Service//github.com/micheloosterhof/cowrie/blob/78c1a0f0992b0b170adf32766… Source Drupal 10 Maintenance and Support Service https Drupal 10 Maintenance and Support Service//www.Drupal 10.org/project/issues/rss/infrastructure Source Drupal 10 Maintenance and Support Service Drupal 10 blender