comments on testUpload script

[ssagerian]

Comments:

so Im working on getting my unit to scp files to a remote server. I have it working from the command line (both scp and sftp). I cant get the WebGUI to accept the inputs I have provided so ran the testUpload.sh script and got the response shown in Output1. The script seems to be saying that a public key file (public, as in shared to the whole world) needs to be restricted to only user access. I would agree that the private key should have those permissions, but why the public key? Actually the script seems confused about what is the private key (id_rsa) and what is the public key (id_rsa.pub). Anyway, the current permissions for my .ssh folder and the files in it are shown in SSH Folder Permissions.

Action

I will change the permissions to this publicly shared file to user read only and retry..

Output1

pi@allsky:~/allsky/tmp $ cat testUpload.sh-REMOTEWEBSITE.txt
upload.sh: Copying /tmp/testUpload.sh.txt to pi@homeat.homesky.us:allsky/testUpload.sh.txt
Upload output from '/tmp/testUpload.sh.txt':
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/home/pi/.ssh/id_rsa.pub' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/home/pi/.ssh/id_rsa.pub": bad permissions
pi@homeat.homesky.us: Permission denied (publickey).
scp: Connection closed

SSH Folder Permissions

pi@allsky:~/allsky/tmp $ ls -l ~/.ssh
total 24
-rw------- 1 pi pi 399 Feb 13 14:55 id_ed25519
-rw-r--r-- 1 pi pi 91 Feb 13 14:55 id_ed25519.pub
-rw------- 1 pi pi 2590 Feb 15 17:28 id_rsa
-rw-r--r-- 1 pi pi 563 Feb 15 17:28 id_rsa.pub
-rw------- 1 pi pi 1012 Feb 16 11:15 known_hosts
-rw-r--r-- 1 pi pi 142 Feb 13 14:24 known_hosts.old
p

[EricClaeys]

Steve,
Which key did you enter into the SSH Public Key File field in the WebUI?

The code does a scp -i key_file ... with whatever you put in that field. The man page for scp says it should be the PRIVATE key. That field used to be called SSH Key File but a user recently said we should add Public. That may be wrong.