SSH for specific host (Network switch) not working anymore "WrongServerSig"

[BPtLNfxZWo]

Dear all, I can't login with Tabby to one specific host via SSH (Key auth):
WrongServerSig and no connection is established. Works with other terminals.

Unfortunately the Debug log is not providing any useful information.

May you have an idea what the issue can be. Connections to other hosts are working.

Thank you

[Steltek]

Same problem here. Specific host from a specific machine. Works on all my other machines, other hosts work from the problem machine.

No prompt for password or anything, just an instant failure with that error message.

Update: Downgrading to v1.0.215 (pre-russh) fixed it.

[Eugeny]

Could you please capture a debug log? https://github.com/Eugeny/tabby/wiki/Capturing-a-debug-log-from-the-SSH-backend

[Steltek]

Could you please capture a debug log? https://github.com/Eugeny/tabby/wiki/Capturing-a-debug-log-from-the-SSH-backend

Sure. Here's the "WrongServerSig" failure:

[2025-01-28T21:14:47Z DEBUG russh_napi] russh-napi connecting to SshTransport(Mutex { data: Some(Socket) })
[2025-01-28T21:14:47Z DEBUG russh::client] beginning re-key
[2025-01-28T21:14:47Z DEBUG russh::sshbuffer] > msg type 20, len 835
[2025-01-28T21:14:47Z DEBUG russh::client] < msg type 20, seqn 1, len 1088
[2025-01-28T21:14:47Z DEBUG russh::client::kex] negotiated algorithms: Names { kex: Name("curve25519-sha256"), key: Rsa { hash: Some(Sha256) }, cipher: Name("aes128-ctr"), client_mac: Name("hmac-sha1"), server_mac: Name("hmac-sha1"), server_compression: None, client_compression: None, ignore_guessed: false, strict_kex: false }
[2025-01-28T21:14:47Z DEBUG russh::sshbuffer] > msg type 30, len 37
[2025-01-28T21:14:47Z DEBUG russh::client] kex impl continues: ClientKex { cause: Initial, state: "waiting for DH response" }
[2025-01-28T21:14:47Z DEBUG russh::client] < msg type 31, seqn 2, len 342
[2025-01-28T21:14:47Z DEBUG russh::client::kex] received server host key: Ok("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwSOE2HqWsRwuMaPzu9FdJhA0lHU4CQnoJ0bGydWGiYZxdWPTWszeNLrW++vfpVLZL0Zl6dIfR+p9+HEqDhyvuJXDdZVBhA9CFa1R+yG9UiRTfiroxHPNo2i0k5xOsmk5hfLQnLkgdO1QFR9lXoA9AOEqhH/VAQp1yULnjfqLSdk=")
[2025-01-28T21:14:47Z DEBUG russh::client::kex] wrong server sig: signature::Error { source: Some(cryptographic error) }
[2025-01-28T21:14:47Z DEBUG russh::client] drop session
[2025-01-28T21:14:47Z DEBUG russh::client] kex_done_signal sender was dropped
[2025-01-28T21:14:47Z DEBUG russh_napi] russh-napi connecting to SshTransport(Mutex { data: Some(Socket) })
[2025-01-28T21:14:47Z DEBUG russh::client] beginning re-key
[2025-01-28T21:14:47Z DEBUG russh::sshbuffer] > msg type 20, len 835
[2025-01-28T21:14:47Z DEBUG russh::client] < msg type 20, seqn 1, len 1088
[2025-01-28T21:14:47Z DEBUG russh::client::kex] negotiated algorithms: Names { kex: Name("curve25519-sha256"), key: Rsa { hash: Some(Sha256) }, cipher: Name("aes128-ctr"), client_mac: Name("hmac-sha1"), server_mac: Name("hmac-sha1"), server_compression: None, client_compression: None, ignore_guessed: false, strict_kex: false }
[2025-01-28T21:14:47Z DEBUG russh::sshbuffer] > msg type 30, len 37
[2025-01-28T21:14:47Z DEBUG russh::client] kex impl continues: ClientKex { cause: Initial, state: "waiting for DH response" }
[2025-01-28T21:14:47Z DEBUG russh::client] < msg type 31, seqn 2, len 342
[2025-01-28T21:14:47Z DEBUG russh::client::kex] received server host key: Ok("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwSOE2HqWsRwuMaPzu9FdJhA0lHU4CQnoJ0bGydWGiYZxdWPTWszeNLrW++vfpVLZL0Zl6dIfR+p9+HEqDhyvuJXDdZVBhA9CFa1R+yG9UiRTfiroxHPNo2i0k5xOsmk5hfLQnLkgdO1QFR9lXoA9AOEqhH/VAQp1yULnjfqLSdk=")
[2025-01-28T21:14:47Z DEBUG russh::client::kex] wrong server sig: signature::Error { source: Some(cryptographic error) }
[2025-01-28T21:14:47Z DEBUG russh::client] drop session
[2025-01-28T21:14:47Z DEBUG russh::client] kex_done_signal sender was dropped
[2025-01-28T21:14:51Z DEBUG russh_napi] russh-napi connecting to SshTransport(Mutex { data: Some(Socket) })
[2025-01-28T21:14:52Z DEBUG russh::client] beginning re-key
[2025-01-28T21:14:52Z DEBUG russh::sshbuffer] > msg type 20, len 835
[2025-01-28T21:14:52Z DEBUG russh::client] < msg type 20, seqn 1, len 1088
[2025-01-28T21:14:52Z DEBUG russh::client::kex] negotiated algorithms: Names { kex: Name("curve25519-sha256"), key: Rsa { hash: Some(Sha256) }, cipher: Name("aes128-ctr"), client_mac: Name("hmac-sha1"), server_mac: Name("hmac-sha1"), server_compression: None, client_compression: None, ignore_guessed: false, strict_kex: false }
[2025-01-28T21:14:52Z DEBUG russh::sshbuffer] > msg type 30, len 37
[2025-01-28T21:14:52Z DEBUG russh::client] kex impl continues: ClientKex { cause: Initial, state: "waiting for DH response" }
[2025-01-28T21:14:52Z DEBUG russh::client] < msg type 31, seqn 2, len 342
[2025-01-28T21:14:52Z DEBUG russh::client::kex] received server host key: Ok("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwSOE2HqWsRwuMaPzu9FdJhA0lHU4CQnoJ0bGydWGiYZxdWPTWszeNLrW++vfpVLZL0Zl6dIfR+p9+HEqDhyvuJXDdZVBhA9CFa1R+yG9UiRTfiroxHPNo2i0k5xOsmk5hfLQnLkgdO1QFR9lXoA9AOEqhH/VAQp1yULnjfqLSdk=")
[2025-01-28T21:14:52Z DEBUG russh::client::kex] wrong server sig: signature::Error { source: Some(cryptographic error) }
[2025-01-28T21:14:52Z DEBUG russh::client] drop session
[2025-01-28T21:14:52Z DEBUG russh::client] kex_done_signal sender was dropped
[2025-01-28T21:14:52Z DEBUG russh_napi] russh-napi connecting to SshTransport(Mutex { data: Some(Socket) })
[2025-01-28T21:14:52Z DEBUG russh::client] beginning re-key
[2025-01-28T21:14:52Z DEBUG russh::sshbuffer] > msg type 20, len 835
[2025-01-28T21:14:52Z DEBUG russh::client] < msg type 20, seqn 1, len 1088
[2025-01-28T21:14:52Z DEBUG russh::client::kex] negotiated algorithms: Names { kex: Name("curve25519-sha256"), key: Rsa { hash: Some(Sha256) }, cipher: Name("aes128-ctr"), client_mac: Name("hmac-sha1"), server_mac: Name("hmac-sha1"), server_compression: None, client_compression: None, ignore_guessed: false, strict_kex: false }
[2025-01-28T21:14:52Z DEBUG russh::sshbuffer] > msg type 30, len 37
[2025-01-28T21:14:52Z DEBUG russh::client] kex impl continues: ClientKex { cause: Initial, state: "waiting for DH response" }
[2025-01-28T21:14:52Z DEBUG russh::client] < msg type 31, seqn 2, len 342
[2025-01-28T21:14:52Z DEBUG russh::client::kex] received server host key: Ok("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwSOE2HqWsRwuMaPzu9FdJhA0lHU4CQnoJ0bGydWGiYZxdWPTWszeNLrW++vfpVLZL0Zl6dIfR+p9+HEqDhyvuJXDdZVBhA9CFa1R+yG9UiRTfiroxHPNo2i0k5xOsmk5hfLQnLkgdO1QFR9lXoA9AOEqhH/VAQp1yULnjfqLSdk=")
[2025-01-28T21:14:52Z DEBUG russh::client::kex] wrong server sig: signature::Error { source: Some(cryptographic error) }
[2025-01-28T21:14:52Z DEBUG russh::client] drop session
[2025-01-28T21:14:52Z DEBUG russh::client] kex_done_signal sender was dropped

And here it is failing to access gpg-agent:

[Glasstron/DWM] Trying to load the native module...
[Glasstron/DWM] Native module loaded
[2025-01-28T21:13:41Z DEBUG russh_napi] russh-napi initialized
(node:18180) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.
(Use Tabby --trace-deprecation ... to show where the warning was created)
Checking for update
[2025-01-28T21:13:43Z DEBUG russh_napi] russh-napi connecting to SshTransport(Mutex { data: Some(Socket) })
[2025-01-28T21:13:43Z DEBUG russh::client] beginning re-key
[2025-01-28T21:13:43Z DEBUG russh::sshbuffer] > msg type 20, len 721
[2025-01-28T21:13:43Z DEBUG russh::client] < msg type 20, seqn 1, len 1120
[2025-01-28T21:13:43Z DEBUG russh::client::kex] negotiated algorithms: Names { kex: Name("curve25519-sha256"), key: Ecdsa { curve: NistP256 }, cipher: Name("aes128-ctr"), client_mac: Name("hmac-sha1"), server_mac: Name("hmac-sha1"), server_compression: None, client_compression: None, ignore_guessed: false, strict_kex: false }
[2025-01-28T21:13:43Z DEBUG russh::sshbuffer] > msg type 30, len 37
[2025-01-28T21:13:43Z DEBUG russh::client] kex impl continues: ClientKex { cause: Initial, state: "waiting for DH response" }
[2025-01-28T21:13:43Z DEBUG russh::client] < msg type 31, seqn 2, len 250
[2025-01-28T21:13:43Z DEBUG russh::client::kex] received server host key: Ok("ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBMvW7NpiCK9u6f5ogybynUQeVSgHEzu7EIUchkxmPGJ+rnbH7agwZzRjQNW9D9080LMmfcCYu8UtqJQNt2Y1O90=")
[2025-01-28T21:13:43Z DEBUG russh::sshbuffer] > msg type 21, len 1
[2025-01-28T21:13:43Z DEBUG russh::client] kex impl continues: ClientKex { cause: Initial, state: "waiting for NEWKEYS" }
[2025-01-28T21:13:43Z DEBUG russh::client] < msg type 21, seqn 3, len 1
[2025-01-28T21:13:43Z DEBUG russh::client] kex impl has completed
[2025-01-28T21:13:43Z DEBUG russh::client] kex done
[2025-01-28T21:13:43Z DEBUG russh::client::encrypted] sending ssh-userauth service requset
[2025-01-28T21:13:43Z DEBUG russh::sshbuffer] > msg type 5, len 17
[2025-01-28T21:13:43Z DEBUG russh::client::encrypted] write_auth_request_if_needed: is_waiting = false
[2025-01-28T21:13:43Z DEBUG russh::client] < msg type 6, seqn 4, len 17
[2025-01-28T21:13:43Z DEBUG russh::client::encrypted] waiting service request, Some(6) 6
[2025-01-28T21:13:43Z DEBUG russh::client::encrypted] enc: [0, 0, 0, 35, 50, 0, 0, 0, 4, 114, 111, 111, 116, 0, 0, 0, 14, 115, 115, 104, 45, 99, 111, 110, 110, 101, 99, 116, 105, 111, 110, 0, 0, 0, 4, 110, 111, 110, 101]
[2025-01-28T21:13:43Z DEBUG russh::sshbuffer] > msg type 50, len 35
[2025-01-28T21:13:43Z DEBUG russh::client] < msg type 51, seqn 5, len 24
[2025-01-28T21:13:43Z DEBUG russh::client::encrypted] userauth_failure
[2025-01-28T21:13:43Z DEBUG russh::client::encrypted] remaining methods MethodSet([PublicKey, Password])
[2025-01-28T21:13:43Z DEBUG pageant::pageant_impl] Pageant query failed: WindowsError(Error { code: HRESULT(0x800703E6), message: "Invalid access to memory location." })
Update for version 1.0.221 is not available (latest version: 1.0.221, downgrade is disallowed).
[2025-01-28T21:13:48Z DEBUG russh::sshbuffer] > msg type 80, len 27
[2025-01-28T21:13:48Z DEBUG russh::client] < msg type 3, seqn 6, len 5
[2025-01-28T21:13:54Z DEBUG russh::sshbuffer] > msg type 80, len 27
[2025-01-28T21:13:54Z DEBUG russh::client] < msg type 3, seqn 7, len 5
[2025-01-28T21:13:54Z DEBUG russh::sshbuffer] > msg type 1, len 13
[2025-01-28T21:13:54Z DEBUG russh::client] disconnected Russh(Disconnect)
[2025-01-28T21:13:54Z DEBUG russh::client] drop session
[2025-01-28T21:13:54Z DEBUG russh_napi] russh-napi connecting to SshTransport(Mutex { data: Some(Socket) })
[2025-01-28T21:13:54Z DEBUG russh::client] beginning re-key
[2025-01-28T21:13:54Z DEBUG russh::sshbuffer] > msg type 20, len 721
[2025-01-28T21:13:54Z DEBUG russh::client] < msg type 20, seqn 1, len 1120
[2025-01-28T21:13:54Z DEBUG russh::client::kex] negotiated algorithms: Names { kex: Name("curve25519-sha256"), key: Ecdsa { curve: NistP256 }, cipher: Name("aes128-ctr"), client_mac: Name("hmac-sha1"), server_mac: Name("hmac-sha1"), server_compression: None, client_compression: None, ignore_guessed: false, strict_kex: false }
[2025-01-28T21:13:54Z DEBUG russh::sshbuffer] > msg type 30, len 37
[2025-01-28T21:13:54Z DEBUG russh::client] kex impl continues: ClientKex { cause: Initial, state: "waiting for DH response" }
[2025-01-28T21:13:54Z DEBUG russh::client] < msg type 31, seqn 2, len 249
[2025-01-28T21:13:54Z DEBUG russh::client::kex] received server host key: Ok("ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBMvW7NpiCK9u6f5ogybynUQeVSgHEzu7EIUchkxmPGJ+rnbH7agwZzRjQNW9D9080LMmfcCYu8UtqJQNt2Y1O90=")
[2025-01-28T21:13:54Z DEBUG russh::sshbuffer] > msg type 21, len 1
[2025-01-28T21:13:54Z DEBUG russh::client] kex impl continues: ClientKex { cause: Initial, state: "waiting for NEWKEYS" }
[2025-01-28T21:13:54Z DEBUG russh::client] < msg type 21, seqn 3, len 1
[2025-01-28T21:13:54Z DEBUG russh::client] kex impl has completed
[2025-01-28T21:13:54Z DEBUG russh::client] kex done
[2025-01-28T21:13:54Z DEBUG russh::client::encrypted] sending ssh-userauth service requset
[2025-01-28T21:13:54Z DEBUG russh::sshbuffer] > msg type 5, len 17
[2025-01-28T21:13:54Z DEBUG russh::client::encrypted] write_auth_request_if_needed: is_waiting = false
[2025-01-28T21:13:54Z DEBUG russh::client] < msg type 6, seqn 4, len 17
[2025-01-28T21:13:54Z DEBUG russh::client::encrypted] waiting service request, Some(6) 6
[2025-01-28T21:13:54Z DEBUG russh::client::encrypted] enc: [0, 0, 0, 35, 50, 0, 0, 0, 4, 114, 111, 111, 116, 0, 0, 0, 14, 115, 115, 104, 45, 99, 111, 110, 110, 101, 99, 116, 105, 111, 110, 0, 0, 0, 4, 110, 111, 110, 101]
[2025-01-28T21:13:54Z DEBUG russh::sshbuffer] > msg type 50, len 35
[2025-01-28T21:13:54Z DEBUG russh::client] < msg type 51, seqn 5, len 24
[2025-01-28T21:13:54Z DEBUG russh::client::encrypted] userauth_failure
[2025-01-28T21:13:54Z DEBUG russh::client::encrypted] remaining methods MethodSet([PublicKey, Password])
[2025-01-28T21:13:54Z DEBUG pageant::pageant_impl] Pageant query failed: WindowsError(Error { code: HRESULT(0x800703E6), message: "Invalid access to memory location." })
[2025-01-28T21:13:55Z DEBUG russh::sshbuffer] > msg type 1, len 13
[2025-01-28T21:13:55Z DEBUG russh::client] disconnected Russh(Disconnect)
[2025-01-28T21:13:55Z DEBUG russh::client] drop session

OS is Windows 11 24H2. gpg-agent is v2.4.7.

[hosser]

I have the same issue. Also fixed by downgrading to 1.0.215 (thank you for posting that, I was at my wit's end).