Test Connection for Edit VCS in TeamCity 2017.1.5 (build 47175) fails

We have a known working SSH key in our Github account.  We know it works because we checkout and commit code with it.

TeamCity though doesn't.

We get this error when I click the 'Test Connection' button. 

List remote refs failed: cannot locate repository at git@github.com:my-org/my-repo.git: ERROR: You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type.
Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.

It appears to be an issue that the client libs the VCS uses are not compatible now with Github.

I saw some other threads like this one... for adding an updated plugin.  Is there something that we can do to update the VCS plugin ?

https://youtrack.jetbrains.com/issue/TW-52052?&_ga=2.47935918.823535746.1650459654-2037145182.1650459654#comment=27-2607007

Logs for the TC Server are full of errors like, 

[2022-04-21 16:26:58,735]   INFO [cal executor 10] -      jetbrains.buildServer.VCS - Cannot load current state for VCS root "performance - master" {instance id=2198, parent internal id=546, parent id=PerfPipelineDeployment_Performance_PerformanceMaster, description: "git@github.com:my-org/pmy-repo.git#master"}: List remote refs failed: cannot locate repository at git@github.com:my-org/my-repo.git: ERROR: You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type.
Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.
9 comments
Comment actions Permalink

We are certain that we are not using a SHA-1 key.  We feel it has to do with the client libs because we get a similar error when an agent was using OpenSSH 6.  The Key worked when we updated this agent to 7.4

[centos@i-0ab21c7544a866bec ~]$ git clone git@github.com:my-org/my-repo.git
Cloning into 'my-repo'...
The authenticity of host 'github.com (192.30.255.112)' can't be established.
ECDSA key fingerprint is 7b:99:81:1e:4c:91:a5:0d:5a:2e:2e:80:13:3f:24:ca.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'github.com,192.30.255.112' (ECDSA) to the list of known hosts.
ERROR: You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type.
Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.

fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
[centos@i-0ab21c7544a866bec ~]$ ssh -V
OpenSSH_6.6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013
0
Comment actions Permalink

Hi Gregory,

 

could I ask you to setup a TeamCity installation with the latest release and try your key in it? We have made several upgrades to our libraries since 2017, which went out of support several years ago, so it's quite likely that one of those upgrades fixed the problem.

 

Unfortunately, we haven't tested newer versions of the plugin with such an old release. You might try downloading one from here: https://teamcity.jetbrains.com/project/TeamCityPluginsByJetBrains_Git?mode=builds#all-projects but we cannot promise it will work. Our recommendation would be to run the test above and, if it works, just upgrade your installation.

0
Comment actions Permalink

Thank you for the response. I know we are in kind of a dire situation and we don't have any current licenses that would allow us to upgrade.  I understand that we might be SOL.

Because we don't have any current licenses I assume that I can't install really use a newer version of TC even if a bare bones would allow us to test the key.

We already have a 'plugin' Called Git_JetBrains_Git_Plugin_TeamCity_2017.1.x_snapshot-33_artifacts so I think we are already have what you suggest.

Maybe you could direct me to what the key libraries .jars might be and I will take a look and see what I can do?  Maybe I can update an open source jar and see what happens.

0
Comment actions Permalink

Hi Gregory,

 

you can install the full zip file as a plugin and by it being newer than your installation it will override it entirely (you'll need to restart the server after installing it via the UI - Administration - Plugin List, or placing it in the data directory/plugins folder). You shouldn't replace jars on their own because that might lead to version mismatches which can cause unpredictable behavior. It's possible that a plugin made for a newer version could also work with 2017.1. As a note, plugins won't change internal libraries, so if some behavior becomes erratic or problematic, it should be possible to just remove it and restart the server. It's possible that caches do get some incompatible data but it should be possible to remove those caches at that point.

 

The professional edition is free of charge, which is why I recommended testing it in a separate installation first. It is very likely it will work, but it is not impossible that your case is special for some reason and it might still fail, in which case we would need to understand what causes it.

0
Comment actions Permalink

Thanks again for the helpful suggestions.  I have yet to go all the way to a much more current upgrade, but it turns out that out enterprise license we are using allowed me to upgrade to 2017.2.x . 

I also applied the updates from https://teamcity.jetbrains.com/buildConfiguration/TeamCityPluginsByJetBrains_Git_JetBrainsGitPluginTeamCity20172x

Didn't fix the issue but at least it is a newer version :-)

I think we have more current licenses available and I'm trying to hunt them down with JB Sales and our Org Admin.

If being on 2017.2.x helps with finding a solution ( unlikely I know ) please let me know

 

0
Comment actions Permalink

Stack Trace for the heck of it.

[2022-04-22 15:06:13,977]   INFO [nio-8111-exec-3] -      jetbrains.buildServer.VCS - Error occurred in test connection: jetbrains.buildServer.vcs.VcsException: List remote refs failed: cannot locate repository at git@github.com:my-org/my-repo.git: ERROR: You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type.
Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.
    at jetbrains.buildServer.buildTriggers.vcs.git.OperationContext.wrapException(OperationContext.java:185)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.getRemoteRefs(GitVcsSupport.java:450)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.lambda$getCurrentState$0(GitVcsSupport.java:158)
    at jetbrains.buildServer.buildTriggers.vcs.git.RepositoryManagerImpl.runWithDisabledRemove(RepositoryManagerImpl.java:254)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.getCurrentState(GitVcsSupport.java:154)
    at jetbrains.buildServer.buildTriggers.vcs.git.TestConnectionCommand.checkFetchConnection(TestConnectionCommand.java:95)
    at jetbrains.buildServer.buildTriggers.vcs.git.TestConnectionCommand.testConnection(TestConnectionCommand.java:68)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.lambda$testConnection$2(GitVcsSupport.java:293)
    at jetbrains.buildServer.buildTriggers.vcs.git.RepositoryManagerImpl.runWithDisabledRemove(RepositoryManagerImpl.java:254)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.testConnection(GitVcsSupport.java:290)
    at jetbrains.vcs.api.services.impl.TestConnectionServiceProvider$1.testConnection(TestConnectionServiceProvider.java:2)
    at jetbrains.buildServer.controllers.admin.projects.TestConnectionCommand.runTestConnection(TestConnectionCommand.java:41)
    at jetbrains.buildServer.controllers.admin.projects.TestConnectionCommand.doTestConnection(TestConnectionCommand.java:1)
    at jetbrains.buildServer.controllers.admin.projects.EditVcsRootsController.doPost(EditVcsRootsController.java:13)
    at jetbrains.buildServer.controllers.BaseFormXmlController$1.handleRequest(BaseFormXmlController.java:54)
    at jetbrains.buildServer.controllers.AjaxRequestProcessor.processRequest(AjaxRequestProcessor.java:47)
    at jetbrains.buildServer.controllers.BaseFormXmlController.doHandle(BaseFormXmlController.java:52)
    at jetbrains.buildServer.controllers.BaseController.handleRequestInternal(BaseController.java:101)
    at org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:174)
    at jetbrains.buildServer.controllers.BaseController.handleRequest(BaseController.java:80)
    at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:50)
    at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:967)
    at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:901)
    at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:970)
    at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:872)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:661)
    at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:846)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
    at jetbrains.buildServer.maintenance.TeamCityDispatcherServlet.processedByMainServlet(TeamCityDispatcherServlet.java:54)
    at jetbrains.buildServer.maintenance.TeamCityDispatcherServlet.service(TeamCityDispatcherServlet.java:38)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at jetbrains.buildServer.web.jsp.JspPrecompilerFilter.doFilter(JspPrecompilerFilter.java:26)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at jetbrains.buildServer.web.DisableSessionIdFromUrlFilter.doFilter(DisableSessionIdFromUrlFilter.java:9)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:107)
    at jetbrains.buildServer.diagnostic.web.DiagnosticFilter.doFilter(DiagnosticFilter.java:15)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:112)
    at jetbrains.buildServer.web.DependencyParametersCalculationContextFilter.doFilter(DependencyParametersCalculationContextFilter.java:7)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:112)
    at jetbrains.buildServer.web.ContentSecurityPolicyFilter.doFilter(ContentSecurityPolicyFilter.java:14)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:112)
    at jetbrains.buildServer.web.CSRFFilter.doFilter(CSRFFilter.java:100)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:112)
    at org.springframework.web.filter.CompositeFilter.doFilter(CompositeFilter.java:73)
    at jetbrains.buildServer.web.DelegatingFilter.doFilter(DelegatingFilter.java:53)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at jetbrains.buildServer.web.ResponseFragmentFilter.doFilter(ResponseFragmentFilter.java:13)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
    at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803)
    at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
    at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868)
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459)
    at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
    at java.lang.Thread.run(Thread.java:748)
Caused by: org.eclipse.jgit.errors.NoRemoteRepositoryException: git@github.com:my-org/my-repo.git: ERROR: You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type.
Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.
    at org.eclipse.jgit.transport.TransportGitSsh.cleanNotFound(TransportGitSsh.java:208)
    at org.eclipse.jgit.transport.TransportGitSsh$SshFetchConnection.<init>(TransportGitSsh.java:292)
    at org.eclipse.jgit.transport.TransportGitSsh.openFetch(TransportGitSsh.java:161)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.getRemoteRefs(GitVcsSupport.java:468)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.getRemoteRefs(GitVcsSupport.java:445)
    ... 70 more
0
Comment actions Permalink

I found my licenses and I'm able to upgrade now to a supported version.

I'm going one level at a time for testing etc.

I'm up to 2019.2.4 (build 72059) now and I still get this error.  How far up do I need to go ?

0
Comment actions Permalink

Most recent stack trace now on  2019.2.4 (build 72059)

[2022-04-22 20:38:04,405]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Running test connection for "jetbrains.git" {instance id=-6, parent internal id=-1, parent id=dummy_jetbrains.git, description: "git@github.com:my-org/my-repo.git#%tracking.branch%"}
[2022-04-22 20:38:04,447]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Connecting to github.com port 22
[2022-04-22 20:38:04,457]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Connection established
[2022-04-22 20:38:04,594]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Remote version string: SSH-2.0-babeld-aa6f9991
[2022-04-22 20:38:04,594]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Local version string: SSH-2.0-TeamCity-Server-2019.2.4-JSCH-0.1.54
[2022-04-22 20:38:04,594]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - CheckKexes: diffie-hellman-group14-sha1,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - CheckSignatures: ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - SSH_MSG_KEXINIT sent
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - SSH_MSG_KEXINIT received
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: ssh-ed25519,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: none
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: none
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: 
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server: 
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc
[2022-04-22 20:38:04,621]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96
[2022-04-22 20:38:04,622]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96
[2022-04-22 20:38:04,622]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: none
[2022-04-22 20:38:04,622]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: none
[2022-04-22 20:38:04,622]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: 
[2022-04-22 20:38:04,622]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client: 
[2022-04-22 20:38:04,622]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: server->client aes128-ctr hmac-sha2-256 none
[2022-04-22 20:38:04,622]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - kex: client->server aes128-ctr hmac-sha2-256 none
[2022-04-22 20:38:04,624]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - SSH_MSG_KEX_ECDH_INIT sent
[2022-04-22 20:38:04,624]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - expecting SSH_MSG_KEX_ECDH_REPLY
[2022-04-22 20:38:04,702]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - ssh_rsa_verify: signature true
[2022-04-22 20:38:04,703]   WARN [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Permanently added 'github.com' (RSA) to the list of known hosts.
[2022-04-22 20:38:04,703]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - SSH_MSG_NEWKEYS sent
[2022-04-22 20:38:04,703]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - SSH_MSG_NEWKEYS received
[2022-04-22 20:38:04,703]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - SSH_MSG_SERVICE_REQUEST sent
[2022-04-22 20:38:04,775]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - SSH_MSG_SERVICE_ACCEPT received
[2022-04-22 20:38:04,848]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Authentications that can continue: publickey,keyboard-interactive,password
[2022-04-22 20:38:04,848]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Next authentication method: publickey
[2022-04-22 20:38:05,126]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Authentication succeeded (publickey).
[2022-04-22 20:38:05,308]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Disconnecting from github.com port 22
[2022-04-22 20:38:05,310]   INFO [nio-8111-exec-8] -      jetbrains.buildServer.VCS - Error occurred in test connection: jetbrains.buildServer.vcs.VcsException: List remote refs failed: cannot locate repository at git@github.com:my-org/my-repo.git: ERROR: You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type.
Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.


    at jetbrains.buildServer.buildTriggers.vcs.git.OperationContext.wrapException(OperationContext.java:185)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.getRemoteRefs(GitVcsSupport.java:508)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.lambda$getCurrentState$0(GitVcsSupport.java:182)
    at jetbrains.buildServer.buildTriggers.vcs.git.RepositoryManagerImpl.runWithDisabledRemove(RepositoryManagerImpl.java:256)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.getCurrentState(GitVcsSupport.java:178)
    at jetbrains.buildServer.buildTriggers.vcs.git.TestConnectionCommand.checkFetchConnection(TestConnectionCommand.java:98)
    at jetbrains.buildServer.buildTriggers.vcs.git.TestConnectionCommand.lambda$testConnection$0(TestConnectionCommand.java:70)
    at jetbrains.buildServer.buildTriggers.vcs.git.JSchLoggers.evaluateWithLoggingLevel(JSchLoggers.java:43)
    at jetbrains.buildServer.buildTriggers.vcs.git.TestConnectionCommand.testConnection(TestConnectionCommand.java:59)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.lambda$testConnection$2(GitVcsSupport.java:320)
    at jetbrains.buildServer.buildTriggers.vcs.git.RepositoryManagerImpl.runWithDisabledRemove(RepositoryManagerImpl.java:256)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.testConnection(GitVcsSupport.java:317)
    at jetbrains.vcs.api.services.impl.TestConnectionServiceProvider$1.testConnection(TestConnectionServiceProvider.java:2)
    at jetbrains.buildServer.controllers.admin.projects.TestConnectionCommand.runTestConnection(TestConnectionCommand.java:13)
    at jetbrains.buildServer.controllers.admin.projects.TestConnectionCommand.doTestConnection(TestConnectionCommand.java:40)
    at jetbrains.buildServer.controllers.admin.projects.EditVcsRootsController.doPost(EditVcsRootsController.java:136)
    at jetbrains.buildServer.controllers.BaseFormXmlController$1.handleRequest(BaseFormXmlController.java:54)
    at jetbrains.buildServer.controllers.AjaxRequestProcessor.processRequest(AjaxRequestProcessor.java:48)
    at jetbrains.buildServer.controllers.BaseFormXmlController.doHandle(BaseFormXmlController.java:52)
    at jetbrains.buildServer.controllers.BaseController.handleRequestInternal(BaseController.java:114)
    at org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:174)
    at jetbrains.buildServer.controllers.BaseController.handleRequest(BaseController.java:93)
    at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:50)
    at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:967)
    at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:901)
    at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:970)
    at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:872)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:660)
    at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:846)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
    at jetbrains.buildServer.maintenance.TeamCityDispatcherServlet.processedByMainServlet(TeamCityDispatcherServlet.java:43)
    at jetbrains.buildServer.maintenance.TeamCityDispatcherServlet.service(TeamCityDispatcherServlet.java:57)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at jetbrains.buildServer.web.jsp.JspPrecompilerFilter.doFilter(JspPrecompilerFilter.java:111)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at jetbrains.buildServer.web.DisableSessionIdFromUrlFilter.doFilter(DisableSessionIdFromUrlFilter.java:2)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at jetbrains.buildServer.web.UserIdProviderFilter.doFilter(UserIdProviderFilter.java:7)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at jetbrains.buildServer.web.NodeInfoHeaderFilter.doFilter(NodeInfoHeaderFilter.java:6)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:107)
    at jetbrains.buildServer.diagnostic.web.DiagnosticFilter.doFilter(DiagnosticFilter.java:39)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:112)
    at jetbrains.buildServer.web.DependencyParametersCalculationContextFilter.doFilter(DependencyParametersCalculationContextFilter.java:12)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:112)
    at jetbrains.buildServer.diagnostic.web.HttpRequestsDurationMetricsReporter.doFilter(HttpRequestsDurationMetricsReporter.java:18)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:112)
    at jetbrains.buildServer.web.HttpSecurityHeadersFilter.doFilter(HttpSecurityHeadersFilter.java:75)
    at org.springframework.web.filter.CompositeFilter$VirtualFilterChain.doFilter(CompositeFilter.java:112)
    at org.springframework.web.filter.CompositeFilter.doFilter(CompositeFilter.java:73)
    at jetbrains.buildServer.web.DelegatingFilter.doFilter(DelegatingFilter.java:61)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at jetbrains.buildServer.web.ResponseFragmentFilter.doFilter(ResponseFragmentFilter.java:40)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:528)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
    at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:798)
    at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
    at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:810)
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1500)
    at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
    at java.lang.Thread.run(Thread.java:748)
Caused by: org.eclipse.jgit.errors.NoRemoteRepositoryException: git@github.com:my-org/my-repo.git: ERROR: You're using an RSA key with SHA-1, which is no longer allowed. Please use a newer client or a different key type.
Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.


    at org.eclipse.jgit.transport.TransportGitSsh.cleanNotFound(TransportGitSsh.java:218)
    at org.eclipse.jgit.transport.TransportGitSsh$SshFetchConnection.<init>(TransportGitSsh.java:306)
    at org.eclipse.jgit.transport.TransportGitSsh.openFetch(TransportGitSsh.java:170)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.getRemoteRefs(GitVcsSupport.java:526)
    at jetbrains.buildServer.buildTriggers.vcs.git.GitVcsSupport.getRemoteRefs(GitVcsSupport.java:503)
    ... 79 more
0
Comment actions Permalink

To wrap this up.  I did do ask requested and tried just a quick installation of TC just to see if the keys work.  I tried 2018, 2019, 2020, and the keys finally worked with 2021.  Go figure

Took me an afternoon to upgrade to 2021.2.3 (build 99711) with a couple of minor hiccups along the way.

0

Please sign in to leave a comment.