python - 将 PuTTY/ppk 私钥加载到 Paramiko 时为 "base64 decoding error: Incorrect padding"

Question

我正在尝试使用 paramiko 和 SSHTunnelForwarder 在 Windows 10 上使用 Python 3.6 创建 SSH 隧道

我已经使用 PuTTY 设置了连接，并且连接没有问题..

每当我尝试使用 paramiko 开始连接时，我都会收到以下错误:

paramiko.ssh_exception.SSHException: base64 decoding error: Incorrect padding

我尝试在开头和结尾使用 = 和 == === 填充 RSA key ... (在示例中，1 x = 位于末尾，它 %4 == 0..

我还尝试传入一个 pem 文件和一个 ppk 版本。

如何让 paramiko 接受 key ？？

import paramiko
from io import StringIO

KEY = """-----BEGIN RSA PRIVATE KEY-----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-----END PRIVATE KEY-----"""

private_key_file = StringIO()
private_key_file.write(KEY)
private_key_file.seek(0)

print('\n\nlen(KEY)%4 ==', len(KEY)%4)
print()

mypkey = paramiko.RSAKey.from_private_key(private_key_file)

完整回溯:

len(KEY)%4 == 0

Traceback (most recent call last):
File "C:\Users\user\AppData\Local\Programs\Python\Python36\lib\site-packages\paramiko\pkey.py", line 306, in _read_private_key
data = decodebytes(b(''.join(lines[start:end])))
File "C:\Users\user\AppData\Local\Programs\Python\Python36\lib\base64.py", line 553, in decodebytes
return binascii.a2b_base64(s)
binascii.Error: Incorrect padding

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "d:/GIT/Production_apps/deploy_data_files/connect_tosql.py", line 37, in <module>
mypkey = paramiko.RSAKey.from_private_key(private_key_file)
File "C:\Users\user\AppData\Local\Programs\Python\Python36\lib\site-packages\paramiko\pkey.py", line 227, in from_private_key
key = cls(file_obj=file_obj, password=password)
File "C:\Users\user\AppData\Local\Programs\Python\Python36\lib\site-packages\paramiko\rsakey.py", line 45, in __init__
self._from_private_key(file_obj, password)
File "C:\Users\user\AppData\Local\Programs\Python\Python36\lib\site-packages\paramiko\rsakey.py", line 173, in _from_private_key
data = self._read_private_key('RSA', file_obj, password)
File "C:\Users\user\AppData\Local\Programs\Python\Python36\lib\site-packages\paramiko\pkey.py", line 308, in _read_private_key
raise SSHException('base64 decoding error: ' + str(e))
paramiko.ssh_exception.SSHException: base64 decoding error: Incorrect padding

(出于安全原因，我更改了 key 中的一些随机字节，但长度和错误是相同的)

这是我在 PuTTY 中使用的 ppk 文件:

PuTTY-User-Key-File-2: ssh-rsa
Encryption: none
Comment: user_1@computer
Public-Lines: 6
AAAAB3NzaC1yc2EAAAABJQAAAQEAnQQd2g519EiUb+4dH8XDDagBWq/3lpFWD5Ng
TJlEnGAwhRsshtYPMvV5PXgJ6SMstRz4+/73nvJqe2SIHzBBNQeTsqQLMJqaYw5t
m6TMPkRO1zIyeAndQ8PV/TIQVEhTMGuZKJICBxP0rXEQLKOUl09kk3VwDlsCM1yj
ZiVcmZI7/Hyk2U6c0NGUUmpTSNQBraA8ZJ8tJJ28WTM1S4ogBpBjn3DP+hPlZI7h
Ek0gCc6XfwChOcRBY1kd3IHuC3fI51so+5ohcdILCflhODmAQZapNIP5dJudX3sd
6WWi/ibgQycJ+43Nricn0JxVDRzdOViJo2ZuA0Bte0wihVwoYw==
Private-Lines: 14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Private-MAC: d44d6ad6590c05c04eb78770be16ee5e11f0802e

Answer 1

Paramiko 仅支持 OpenSSH key 格式。

您不能只使用 PuTTY 格式的 key 文件并添加 OpenSSH“ header ”。这不会使 key 采用 OpenSSH 格式。

使用 PuTTYgen 将 PuTTY key 转换为 OpenSSH key (Conversions > Export OpenSSH key)。