topic Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed. in Panorama Discussions

Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Mamoudou — Tue, 11 Oct 2022 09:10:11 GMT

Hello team,

I have a problem with my export configuration Panorama via scheduled task.

When I make a test SCP server connexion I have this mesage :

Before upgrade to 10.2 the export was working fine.

I have also saw that PAN-188052 talk about this issue. Do you know how to fix it ?

Could you help me please tu understand this problem.

Thank you in advance.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

sebblondeau — Fri, 04 Nov 2022 10:04:52 GMT

Hi, I have the same trouble in 10.2.2-h2 ... Do you fix it?

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

miguelMA — Fri, 02 Dec 2022 15:13:37 GMT

Actually spent a few hours with TAC last night, bottom line, their is a work around, where they log into to root and delete the host/key folder and then you can try again to import the key through the article

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HByDCAW

This this not work for me, and they are researching a possible workaround, if there is any.

They said it is a know issue and it is said to be fixed in 10.2.4. we are running 10.2.3 and .4 is not available for download.

It seems the key the gui is looking for is the md5 "hex key word" but what you import is actually a alaphnumberic equivelant.

ive tried all kinds of combinations but have not gotten anywhere.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

jasonwald — Thu, 12 Jan 2023 16:38:55 GMT

Thanks everyone for posting about this. Ran into the issue also immediately after upgrading Panorama to 10.2.3H2. This saves me a ticket since it appears there is no current fix.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

miguelMA — Thu, 12 Jan 2023 21:04:31 GMT

unfortunately no, but they should be able to log into root and do the needful, like they did in my case.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

djr — Fri, 13 Jan 2023 08:29:32 GMT

I had this issue under the same circumstances and TAC were also able to resolve it by logging in as root and manually removing the old key, so it may be worth asking them to try for you.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

VVLAANDE — Tue, 31 Jan 2023 13:21:29 GMT

The known issue id is PAN-194805. Probably fixed in March 10.2.4 release. A mentioned, in the meantime, you can contact support and have them login to root.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Robin.Verkerk — Thu, 23 Mar 2023 12:43:55 GMT

Seem also still be an issue in 10.2.3-h4, but i also don't see the bug id back in the know issue list.

Does anyone know under which bug id this will be fixed and also in which release?

Thanks!

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

djr — Thu, 23 Mar 2023 15:42:37 GMT

We hit this issue again after having it fixed, but following the H4 patch installation. We are still working on the understanding that hit will be resolved in 10.2.4

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Robin.Verkerk — Fri, 31 Mar 2023 08:23:57 GMT

Hi,

Now 10.2.4 is available, i didn't see an fix regarding this issue. Is there more info when this is fixed or which release?

Thanks,

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

TomaszSobczak — Thu, 13 Apr 2023 08:33:07 GMT

Hi,

it is resolved in 10.2.4. Confirmed in lab.

Regards,

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Mamoudou — Thu, 27 Apr 2023 13:53:13 GMT

Hello,

After an upgrade to 10.2.4 the issue appear again. I will contact the TAC to connect as a root like the first time I had this issue.

Regards

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

TomaszSobczak — Thu, 27 Apr 2023 13:59:04 GMT

Hi,

Confirm. However the test option works well and sample file creates. While doing scheduled task there is an error only in log file :

admin@Panorama> less mp-log logd.log

2023-04-14 01:45:05.806 +0200 ### [Failed exporting config bundle via ssh to X.X.X.X. No RSA host key is known for X.X.X.X.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

ENSANANTES — Fri, 05 May 2023 13:41:24 GMT

Same issue on PA-850 after upgrade from 9.1.4 >10.2.0>10.2.4 .

Support me ask to roll back and follow the recommended upgrade path

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/determine-the-upgrade-path

w8&c

edit

File "/usr/local/bin/pan_log_export_scp", line 533, in <module>
print(sshconn.insertHostkey(opt.add_host_key))
File "/usr/local/bin/pan_log_export_scp", line 174, in insertHostkey
cleanhostkey = filterKeyString(hostkey).strip() + "
"
AttributeError: 'filter' object has no attribute 'strip'

this error needs root access to be fixed

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

VVLAANDE — Fri, 05 May 2023 15:42:38 GMT

For our Panorama the upgrade from 10.2.3-h2 to 10.2.4 did not fix the scp issue. The test option works but I did not asked for that, I just want a working scheduled scp. This means I need to contact TAC again to fix it as root for us.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

JanneKing — Tue, 09 May 2023 08:20:02 GMT

Hi, upgraded to 10.2.4 and I can confirm they haven't fixed this. For me, backing up is important so I can't understand why this is such a low priority?

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Mamoudou — Tue, 09 May 2023 09:35:57 GMT

Hello,

I have the same problem. I havea session with the TAC to fix the issue and this is ths second time.

I will ask them a real solution for this problem because we didn't need to contact them every time.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Mamoudou — Thu, 11 May 2023 08:18:21 GMT

I resolved again with session with TAC who has connected as root to make some change.

I asked them when this issue will be fix definitively, they said me there is a workaround in progress.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

David-P — Thu, 18 May 2023 16:02:56 GMT

Upgraded to 10.2.4.h2 from 10.1.10 and now have this issue. not fixed in 10.2.4 h2 for panorama.

Re: Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Toivo — Sat, 15 Jul 2023 16:37:44 GMT

We're seeing the same issue appear after updating from 10.1.x to 10.2.4-h2 😞