Failed host key complaint despite identical keys being shown

Hi,

I'm having a problem where sometimes, apparently nondeterministically, WinSCP claims thta the host key verification fails, even though the Ed25519 host key fingerprint it shows as "new" is exactly the same as the one it has saved.

Please see the attached screenshot, which displays that in fact the two keys are the same.

The key also agrees with what the server's fingerprint actually is.

The problem happens when doing large batch transfers of 100 GB toal with ~1GB individual file size, "background transfer" is active, and up to 9 files are being transferred in parallel.

If I click "Update", I get the "Host is not communicating for more than 15 seconds", with an "Abort" button that counts down seconds that reset from 57 back to 60 every 3 seconds approximately. Eventually, the Abort button will not have a seconds counter any more, and just be labelled "Abort", when I click that, I get a password prompt popup, even though I have configured the Site in WinSCP to use key-based login.

WinSCP 5.19 (Build 11512) on Windows Server 2019. Target host is openssh-8.2p1.

This looks like a bug to me.

After clicking "Cancel" on the password prompts a sufficient number of times, WinSCP shows "Out of memory", even though the machine has 40 GB free RAM of 64 GB total; see screenshot.

Some thing seem to be going quite wrong here.

Having upgraded to 5.19.2, this is a stacktrace I get for the "Out of memory" error:

[/code]

Likely connected with this, I also observe WinSCP uploading files with corrupted contents.

The sizes match, but the MD5 hashes do not match after upload.

The difference isn't even at the end -- the end is exactly identical.


Sections in the middle of the file are zeroed out:

I'm sending you an email with a development version of WinSCP to the address you have used to register on this forum.

Thanks martin!

Running this, after some seconds of transferring I get a popup "Signature from server's host key is invalid" with detail message:

Authentication log (see session log for details):
Using username "jp".
Authenticating with public key "eddsa-key-20210629".

Authentication failed.

WinSCP has written 3 trace files of 1 GB each. Already the first trace file contains a relevant error:
(How) Should I send you this 1GB trace file? It zip-compresses to 30 MB.

Does a trace contain information that I need to redact first?

Thanks!

I have sent you an email.