Hi,

I installed the latest libssh2 (1.4.3), rebuilt curl 7.35.0 to link to that version:

$ ./curl --version
curl 7.35.0 (x86_64-unknown-linux-gnu) libcurl/7.35.0 OpenSSL/1.0.1e zlib/1.2.3 libidn/1.18 libssh2/1.4.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
Features: IDN IPv6 Largefile NTLM NTLM_WB SSL libz

But it still failed with the following error messages:

[mnguyen_at_minh65vm bin]$ ./curl -v scp://10.10.16.96/home/mnguyen/test
* Hostname was NOT found in DNS cache
* Trying 10.10.16.96...
* Connected to 10.10.16.96 (10.10.16.96) port 22 (#0)
* SSH MD5 fingerprint: 28c9ed920380957018d758608272e6dd
* SSH authentication methods available: publickey,password,keyboard-interactive
* Using ssh public key file /home/mnguyen/.ssh/id_dsa.pub
* Using ssh private key file /home/mnguyen/.ssh/id_dsa
* SSH public key authentication failed: Username/PublicKey combination invalid
* Failure connecting to agent
* Authentication failure
* Closing connection 0
curl: (67) Authentication failure

In addition, even with the "-k" option, it would not work either:

[mnguyen_at_minh65vm bin]$ ./curl -v -k scp://10.10.16.96/home/mnguyen/test
* Hostname was NOT found in DNS cache
* Trying 10.10.16.96...
* Connected to 10.10.16.96 (10.10.16.96) port 22 (#0)
* SSH MD5 fingerprint: 28c9ed920380957018d758608272e6dd
* SSH host check: 0, key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC7uJ8LtpUXcBqng9Xmr6V9tUR8Q0l3tKQ2dz+1wnZznnF6cxUn7U+tbvWNt6oLg94bIJwJbQy8WwD0fNVkk2DSObjiyl0rnFxd6vmvo5YcfNyXO0lnALmGbkyeahZPm0mt6RArN+3cwL8ZZRzmmoWP4uFDEN4vNn4RielOGcWRfOimPws9P8XEwfjRkQKoKsaRiUBBUjj49clAphnr4bFuBu5fDt/hK/oSSRcLWCLuF3CE2Y2pVHKSVXfzDd6JLceke5nSFJXcKbqCcs6WXuiV9cRn61i9WbskzZ8QunUIqcvw2cfvywHv0S8QhbNkwdwCwMvbefCfQDWkq4u/PY4l
* SSH authentication methods available: publickey,password,keyboard-interactive
* Using ssh public key file /home/mnguyen/.ssh/id_dsa.pub
* Using ssh private key file /home/mnguyen/.ssh/id_dsa
* SSH public key authentication failed: Username/PublicKey combination invalid
* Failure connecting to agent
* Authentication failure
* Closing connection 0
curl: (67) Authentication failure
[mnguyen_at_minh65vm bin]$

From: Dan Fandrich [mailto:dfandrich_at_users.sf.net]
Sent: Thursday, February 27, 2014 3:27 PM
To: [curl:bugs]
Subject: [curl:bugs] #1336 Failed to download file from a Windows XP system

The MD5 hash from your known_hosts file matches what curl gives, so that's not the problem. But I see that you're using a 4-year-old version of libssh2. Can you try upgrading it and see if that helps? There have been a number of fixes to the known_hosts parsing since that version.

---
** [bugs:#1336] Failed to download file from a Windows XP system**
**Status:** open
**Created:** Wed Feb 19, 2014 09:45 PM UTC by Minh Nguyen
**Last Updated:** Thu Feb 27, 2014 11:27 PM UTC
**Owner:** Daniel Stenberg
Curl version: 7.35.0
I set up the SSHd service (using Cygwin) on my Windows XP system 10.10.16.96.
1. When I used "scp" to download a file from the Windows box, I did not have any problem:
$ scp mnguyen_at_10.10.16.96:/home/mnguyen/test /tmp
mnguyen_at_10.10.16.96's password:
test                                            100%   16     0.0KB/s   00:00
2. However, when I used "curl" to download the same file, I got errors:
$ ./curl -v -u mnguyen scp://10.10.16.96/home/mnguyen/test
Enter host password for user 'mnguyen':
* Hostname was NOT found in DNS cache
*   Trying 10.10.16.96...
* Connected to 10.10.16.96 (10.10.16.96) port 22 (#0)
* SSH MD5 fingerprint: 28c9ed920380957018d758608272e6dd
* SSH host check: 2, key: <none>
* Closing connection 0
curl: (51) SSL peer certificate or SSH remote key was not OK
Should "curl" use the same key defined in .ssh/known_hosts (as "scp" used)?
Note that I don't have any problem using "curl" to download a file from a Linux system.
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to http://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at http://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.