Planning Analytics

 View Only
  • 1.  Git integration error - ssh-rsa deprecated

    Posted Thu May 09, 2024 11:34 AM
    Edited by João Caparroz Thu May 09, 2024 11:35 AM

    Hello, great day!

    I'm trying to make new Git requests within the TM1 REST and I'm receiving an error warning me of the depreciation of my SSH. However, this deprecation is not true, as my ssh was updated to the latest possible, as indicated by Microsoft itself (https://devblogs.microsoft.com/devops/ssh-rsa-deprecation/comment-page-2/#comments). Anyone suffering from the same problem? Any solution? Or can we accept that this is just an update bug?

    Thanks!

    Error message:
    "TM1 Git failed to connect to remote. Reason: remote: Command git-upload-pack: You’re using ssh-rsa that is about to be deprecated and your request has been blocked intentionally. Any SSH session using SSH-RSA is subject to brown out (failure during random time periods). Please use rsa-sha2-256 or rsa-sha2-512 instead. For more details see https://aka.ms/ado-ssh-rsa-deprecation. remote: ERROR_SSH_UNSUPPORTED_CIPHER (7)."



    ------------------------------
    João Caparroz
    ------------------------------



  • 2.  RE: Git integration error - ssh-rsa deprecated

    Posted Thu May 09, 2024 12:18 PM

    Hi João,

    We're aware of that problem (especially with Git Azure) and producing the fixes quickly.

    The PA on-premises v 11 is going to receive the fix shortly this month, following with fixes for v12.

    Best regards,



    ------------------------------
    Svetlana Pestsova
    IBM Planning Analytics Product Manager
    ------------------------------



  • 3.  RE: Git integration error - ssh-rsa deprecated

    Posted Fri May 10, 2024 08:14 AM

    Hello Svetlana, thank you for your response.

    Can you tell me if, because of this problem, it has been affecting some ENDPOINTS of the REST itself?
    Whenever I try to create a new push plan using ENDPOINT: GitPush, REST does not create a push plan ID, making it impossible to upload objects to git.
    Can you tell me if there is any relationship?

    Thanks!



    ------------------------------
    João Caparroz
    ------------------------------



  • 4.  RE: Git integration error - ssh-rsa deprecated

    Posted Fri May 10, 2024 09:28 AM

    Hello João,

    Unfortunately this is a critical issue for Azure repository and you need to deploy our fix asap. It affects all the Git endpoint to tm1, even if you're not using Workbench, for Azure repos.

    However, you should be able to use ecdsa and ed25519 instead - not supported by Azure but good with GitHub.

    Best regards,



    ------------------------------
    Svetlana Pestsova
    IBM Planning Analytics Product Manager
    ------------------------------



  • 5.  RE: Git integration error - ssh-rsa deprecated

    Posted Fri May 10, 2024 11:36 AM

    Now I understand. Perfect, thanks for the help/attention!

    I will wait for the bug fix.

    Thanks,
    Regards



    ------------------------------
    João Caparroz
    ------------------------------



  • 6.  RE: Git integration error - ssh-rsa deprecated

    Posted 23 days ago

    Hi Svetlana,

    I'm using PAW on PA Cloud (or whatever the current term is, the one with the PAW URL like <customer>.planning-analytics.ibmcloud.com) and using the PAW Git integration to connect to Azure DevOps. Since a while ago, I have gotten this deprecation error. Is the fix already available and I need to request an upgrade of the TM1 server or do I just need to wait?

    Azure DevOps only accepts keys that start with ssh-rsa and PAW expects one that starts with sss-ed25519 (or ecdsa-sha2).

    BR,

    Anssi



    ------------------------------
    Anssi Lehtinen
    ------------------------------



  • 7.  RE: Git integration error - ssh-rsa deprecated

    Posted 23 days ago

    Hi Anssi,

    Yes, we had the fix for this issue.

    Please, make sure you're on 11.8.26 version or up for the server.

    Best regards,



    ------------------------------
    Svetlana Pestsova
    IBM Planning Analytics Product Manager
    ------------------------------



  • 8.  RE: Git integration error - ssh-rsa deprecated

    Posted 22 days ago

    Cheers, Svetlana. I'll ask support to upgrade the server.

    Anssi



    ------------------------------
    Anssi Lehtinen
    ------------------------------



  • 9.  RE: Git integration error - ssh-rsa deprecated

    Posted 2 days ago

    Hello Svetlana,

    What version of PA server should be install to fix this problem? I suppose that PA 11.8.26 it ois the same as PA 2.1.4 version but PA 2.1.4 is not released yet



    ------------------------------
    Justyna Dąbrowska
    ------------------------------



  • 10.  RE: Git integration error - ssh-rsa deprecated

    Posted 2 days ago

    Hi Justyna,

    The tm1 version that contains the fix is 11.8.26 or later.

    PA 2.0 version stream.

    The fix was in 2.0.91IF  kit.

    Best regards,



    ------------------------------
    Svetlana Pestsova
    IBM Planning Analytics Product Manager
    ------------------------------