Bug ID 1461601: SSH to localhost not working with SSH-RSA in Non FIPS mode

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP LTM(all modules)

Fixed In:
17.5.0

Opened: Dec 15, 2023

Severity: 3-Major

Symptoms

The password prompt is not displayed when trying SSH to localhost in Non FIPS mode

Impact

SSH to localhost will not work in Non FIPS mode

Conditions

- Create test_user, # tmsh create auth user test_user password abcde shell bash session-limit -1 partition-access replace-all-with { all-partitions { role admin } } # tmsh save sys config - Try login localhost using test_user,

Workaround

- SSH-RSA key deprecated in FIPS mode and supported in non-FIPS mode. - Copying ssh-rsa key to ssh_known_hosts to connect to the local host in non-fips mode. - FIPS mode uses the ECDSA key present in ssh_known_hosts to connect to the local host

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips