Unsupported key type (ssh-ed25519) after updating to 7.2.0

[JanecekPetr]

Version

7.2.0

Operating System

MacOS

Bug description

Not sure if this is JGit or Apache Mina SSHD. I'm on Mac OS Sequoia 15.3.1, using Java Temurin 21 and a id_ed25519 keypair that has worked well for me in the past.

After updating to eclipse 2025-03 (4.35.0), with JGit 7.2.0 I cannot do any operations on my GitHub remotes. Is this expected?

Actual behavior

No Git remote operation works with my id_ed25519 keypair.

Expected behavior

Pull!

Relevant log output

eclipse.buildId=4.35.0.20250306-0811
java.version=21
java.vendor=Eclipse Adoptium
BootLoader constants: OS=macosx, ARCH=aarch64, WS=cocoa, NL=en_US
Framework arguments:  -product org.eclipse.epp.package.java.product -keyring /Users/pj/.eclipse_keyring
Command-line arguments:  -os macosx -ws cocoa -arch aarch64 -product org.eclipse.epp.package.java.product -keyring /Users/pj/.eclipse_keyring

org.eclipse.m2e.logback.appender
Warning
Wed Mar 12 17:30:21 CET 2025
Unsupported key type (ssh-ed25519) in /Users/pj/.ssh/id_ed25519

java.security.NoSuchAlgorithmException: Unsupported key type (ssh-ed25519) in /Users/pj/.ssh/id_ed25519
	at org.apache.sshd.common.config.keys.loader.openssh.OpenSSHKeyPairResourceParser.readPublicKey(OpenSSHKeyPairResourceParser.java:221)
	at org.apache.sshd.common.config.keys.loader.openssh.OpenSSHKeyPairResourceParser.extractKeyPairs(OpenSSHKeyPairResourceParser.java:133)
	at org.apache.sshd.common.config.keys.loader.AbstractKeyPairResourceParser.extractKeyPairs(AbstractKeyPairResourceParser.java:198)
	at org.apache.sshd.common.config.keys.loader.AbstractKeyPairResourceParser.extractKeyPairs(AbstractKeyPairResourceParser.java:167)
    [...]
	at org.eclipse.jgit.internal.transport.sshd.CachingKeyPairProvider.loadKey(CachingKeyPairProvider.java:131)
    [...]


and then:


org.eclipse.core.runtime.CoreException: git@github.com:alicetechnologies/alice-common.git: Cannot log in at github.com:22
publickey: no keys to try
	at org.eclipse.egit.ui.internal.fetch.FetchOperationUI.execute(FetchOperationUI.java:114)
	at org.eclipse.egit.ui.internal.fetch.FetchOperationUI$1.performJob(FetchOperationUI.java:137)
	at org.eclipse.egit.ui.internal.jobs.RepositoryJob.run(RepositoryJob.java:59)
	at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63)
Caused by: org.eclipse.jgit.api.errors.TransportException: git@github.com:alicetechnologies/alice-common.git: Cannot log in at github.com:22
publickey: no keys to try
	at org.eclipse.jgit.api.FetchCommand.call(FetchCommand.java:249)
	at org.eclipse.egit.core.op.FetchOperation.run(FetchOperation.java:134)
	at org.eclipse.egit.ui.internal.fetch.FetchOperationUI.execute(FetchOperationUI.java:111)
	... 3 more
Caused by: org.eclipse.jgit.errors.TransportException: git@github.com:alicetechnologies/alice-common.git: Cannot log in at github.com:22
publickey: no keys to try
	at org.eclipse.jgit.transport.sshd.SshdSession.connect(SshdSession.java:181)
    [...]
	at org.eclipse.jgit.transport.Transport.fetch(Transport.java:1458)
	at org.eclipse.jgit.api.FetchCommand.call(FetchCommand.java:238)
	... 5 more
Caused by: org.apache.sshd.common.SshException: No more authentication methods available
	at org.apache.sshd.common.future.AbstractSshFuture.verifyResult(AbstractSshFuture.java:141)
	[...]
	at org.eclipse.jgit.transport.sshd.SshdSession.connect(SshdSession.java:171)
	... 15 more
Caused by: org.apache.sshd.common.SshException: No more authentication methods available
	at org.apache.sshd.client.session.ClientUserAuthService.tryNext(ClientUserAuthService.java:441)
	at org.apache.sshd.client.session.ClientUserAuthService.processUserAuth(ClientUserAuthService.java:375)
	at org.apache.sshd.client.session.ClientUserAuthService.process(ClientUserAuthService.java:270)
    [...]

Other information

No response

[msohn]

To verify I downloaded
https://www.eclipse.org/downloads/download.php?file=/technology/epp/downloads/release/2025-03/R/eclipse-committers-2025-03-R-macosx-cocoa-aarch64.dmg
and installed it on MacOS 15.3.1 and using that I was able to successfully clone a repo from github.com using my ed25519 key pair.

Please check if your Eclipse installation has the following plugins installed

• org.apache.sshd.osgi 2.15.0
• bcprov 1.80

[tomaswolf]

No, this is not expected. Possibly updating an older Eclipse installation left you with old and new Bouncy Castle bundles installed. If you see old versions of bcpg, bcpkix, bcprov, or bcutil listed in About Eclipse→Installation Details→Plug-ins, remove the old ones.

[JanecekPetr]

org.apache.sshd.osgi is 2.15.0, that's fine.

However, bcprov is 1.79:

Interestingly I do not see any duplicates in my plugins, the 1.79 is the only one there. Possibly it stayed there because of some conflict / different plugin? Not sure. Check updates also does nothing now.

I'll try a new installation in the evening, and I'm interested in trying to install vanilla eclipse 2024-12 and updating to 2025-03 to see if the update itself is fine.

Is there anything else I can do to try and debug this?

The key itself was created by invoking ssh-keygen -t ed25519 -C "my-email@example.com"

[tomaswolf]

Looks like a problem with updating then.

• org.apache.sshd.osgi has BC as an optional dependency.
• JGit's only dependency on BC is in bundle org.eclipse.jgit.gpg.bc, and that is 1.79 or higher.
• EGit has a dependency on BC in org.eclipse.egit.core, but that dependency is also 1.79 or higher.

Net result: an update of EGit or JGit doesn't force updating BC beyond 1.79.

Doh. I think to fix this so that updates also update BC we would need to add a mandatory dependency in org.eclipse.jgit.ssh.apache to bcprov 1.80, and bump the dependencies in o.e.j.gpg.bc also to 1.80. (I hope having a requirement for bcprov 1.80 will also force pcpkix and bcutil to 1.80, but if not, we might have to add more mandatory dependenices.) EGit should also bump its minimum requirement to 1.80.

Adding these dependencies can be done in MANIFEST.MF with extra package imports without code changes.

Work-around: install bcpg, bcpkix, bcprov, and bcutil explicitly from the EGit update site (they're under "Git integration for Eclipse - dependencies").

BTW, why does the EGit update site contain old bundles? I see many older bundle versions at https://download.eclipse.org/egit/updates/plugins/ . Old BC, old com.sun.jna, old jakarta.servlet-api, old org.apache.ant, old org.apache.sshd.osgi, and so on. According to the timestamps shown, they're new files. Also https://download.eclipse.org/egit/updates-7.2/plugins/ has these old versions, and so does 7.1. 7.0 doesn't have them.

[JanecekPetr]

I can confirm that updating bcpg, bcpkix, bcprov and bcutil manually to 1.80 fixes the issue. Thank you.

[tomaswolf]

Two Gerrit changes for this:

• EGit: Gerrit change 1211565
• JGit: Gerrit change 1211567

[msohn]

fixes have been merged to the master branch

[alfespa17]

If this helps anyone I was having the same issue when using 7.3.0.202506031305-r in my pom and I was able to fix it adding the following dependecy:

        <dependency>
            <groupId>org.bouncycastle</groupId>
            <artifactId>bcpkix-jdk18on</artifactId>
            <version>1.81</version>
        </dependency>

Without adding bcpkix-jdk18on I was getting the below error:

Caused by: java.security.NoSuchAlgorithmException: Unsupported key type (ssh-ed25519) in /home/cnb/.terraform-spring-boot/ssh/registry/f655cc2b-0293-4847-8703-f22fc23bb36d/id_ed25519
2025-07-01T21:24:16.589038508Z 	at org.apache.sshd.common.config.keys.loader.openssh.OpenSSHKeyPairResourceParser.readPublicKey(OpenSSHKeyPairResourceParser.java:221) ~[sshd-osgi-2.15.0.jar:2.15.0]
2025-07-01T21:24:16.589041694Z 	at org.apache.sshd.common.config.keys.loader.openssh.OpenSSHKeyPairResourceParser.extractKeyPairs(OpenSSHKeyPairResourceParser.java:133) ~[sshd-osgi-2.15.0.jar:2.15.0]
2025-07-01T21:24:16.589045071Z 	at org.apache.sshd.common.config.keys.loader.AbstractKeyPairResourceParser.extractKeyPairs(AbstractKeyPairResourceParser.java:198) ~[sshd-osgi-2.15.0.jar:2.15.0]
2025-07-01T21:24:16.589048207Z 	at org.apache.sshd.common.config.keys.loader.AbstractKeyPairResourceParser.extractKeyPairs(AbstractKeyPairResourceParser.java:167) ~[sshd-osgi-2.15.0.jar:2.15.0]
2025-07-01T21:24:16.589056733Z 	at org.apache.sshd.common.config.keys.loader.AbstractKeyPairResourceParser.loadKeyPairs(AbstractKeyPairResourceParser.java:117) ~[sshd-osgi-2.15.0.jar:2.15.0]