Hi,
I am having a problem when trying to connect to my gentoo server with SSH. See error message below.
Regards Johan
Aug 16 10:41:10 phi4 sshd[20077]: debug3: fd 5 is not O_NONBLOCK
Aug 16 10:41:10 phi4 sshd[20077]: debug1: Forked child 20082.
Aug 16 10:41:10 phi4 sshd[20077]: debug3: send_rexec_state: entering fd = 8 config len 322
Aug 16 10:41:10 phi4 sshd[20077]: debug3: ssh_msg_send: type 0
Aug 16 10:41:10 phi4 sshd[20077]: debug3: send_rexec_state: done
Aug 16 10:41:10 phi4 sshd[20082]: debug3: oom_adjust_restore
Aug 16 10:41:10 phi4 sshd[20082]: Set /proc/self/oom_score_adj to 0
Aug 16 10:41:10 phi4 sshd[20082]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
Aug 16 10:41:10 phi4 sshd[20082]: debug1: inetd sockets after dupping: 3, 3
Aug 16 10:41:10 phi4 sshd[20082]: Connection from 88.89.21.77 port 21157 on 83.168.196.188 port 22
Aug 16 10:41:10 phi4 sshd[20082]: debug1: HPN Disabled: 0, HPN Buffer Size: 87380
Aug 16 10:41:10 phi4 sshd[20082]: debug1: Client protocol version 2.0; client software version cryptlib
Aug 16 10:41:10 phi4 sshd[20082]: SSH: Server;Ltype: Version;Remote: 88.89.21.77-21157;Protocol: 2.0;Client: cryptlib
Aug 16 10:41:10 phi4 sshd[20082]: debug1: no match: cryptlib
Aug 16 10:41:10 phi4 sshd[20082]: debug1: Enabling compatibility mode for protocol 2.0
Aug 16 10:41:10 phi4 sshd[20082]: debug1: Local version string SSH-2.0-OpenSSH_6.7p1-hpn14v5
Aug 16 10:41:10 phi4 sshd[20082]: debug2: fd 3 setting O_NONBLOCK
Aug 16 10:41:10 phi4 sshd[20082]: debug3: ssh_sandbox_init: preparing seccomp filter sandbox
Aug 16 10:41:10 phi4 sshd[20082]: debug2: Network child is on pid 20083
Aug 16 10:41:10 phi4 sshd[20082]: debug3: preauth child monitor started
Aug 16 10:41:10 phi4 sshd[20082]: debug3: privsep user:group 22:22 [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: permanently_set_uid: 22/22 [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug3: ssh_sandbox_child: attaching seccomp filter program [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: SSH2_MSG_KEXINIT sent [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: error: Received disconnect from 88.89.21.77: 2: Handshake failed [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: do_cleanup [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug3: PAM: sshpam_thread_cleanup entering [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: monitor_read_log: child log fd closed
Aug 16 10:41:10 phi4 sshd[20082]: debug3: mm_request_receive entering
Aug 16 10:41:10 phi4 sshd[20082]: debug1: do_cleanup
Aug 16 10:41:10 phi4 sshd[20082]: debug3: PAM: sshpam_thread_cleanup entering
Aug 16 10:41:10 phi4 sshd[20082]: debug1: Killing privsep child 20083
Hi,
I think this could be related to recent changes in the OpenSSH library of your SSH server. Specifically this problem http://permalink.gmane.org/gmane.comp.encryption.cryptlib/2832 was reported to the CryptLib library also used by BVRDE.
I'll try to investigate how to work around this.
regards
bjarke
Hi Bjarke,
any success with your investigation?
Regards Johan
--
JA MarinTech
Johan Axelsson
M.Sc. Naval Architect
http://www.marintech.se
"For every complex problem, there is a solution that is simple, neat,
and wrong." H.L. Mencken
On 2015-08-16 22:06, Bjarke Viksøe wrote:
it seems that the problem is in current realization of OpenSSH (6.7)
Please look at this link:
http://stackoverflow.com/questions/26424621/algorithm-negotiation-fail-ssh-in-jenkins
Matthieu Wipliez did the trick.
this is the end of sshd_config which works for current version of bvrde 1.3a (cryptlib 3.3.0)
Ciphers 3des-cbc,blowfish-cbc,cast128-cbc,arcfour,arcfour128,arcfour256,aes128-cbc,aes192-cbc,aes256-cbc
MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
Hi,
any plans of updating BVRDE with the latest cryplib relaes, I really miss working with this great app.
Regards Johan