openssh unix dev - Sep 2006 - OpenSSH 4.4p1 under Mac OS X 10.3.9

Hi there,

I've run into a strange problem. I have just finished building  
OpenSSH 4.4p1 against openssl 0.9.8d under Mac OS X 10.3.9 and  
10.4.7. Both were installed as updates to OpenSSH 4.3p2/openssl  
0.9.8c (not Apple's obsolete versions which are bypassed). The 10.4.7  
build works as expected, whereas the 10.3.9 build throws

Disconnecting: Bad packet length 2477450673.

when I try to connect to the machine. I googled this and found that  
this may be a protocol mismatch (unlikely, since 4.3p2 should have  
shown the same problem), but also saw a mention of a compile problem.

I downgraded to the previous version and can again connect to the  
machine. This does not fix the security problems, however.

Any ideas?

Marius
--
Marius Schamschula                               Webmaster

         The Huntsville Macintosh Users Group
                     www.hmug.org

webmaster at hmug dot org    marius at schamschula dot com

Marius Schamschula wrote:
> Hi there,
> 
> I've run into a strange problem. I have just finished building  
> OpenSSH 4.4p1 against openssl 0.9.8d under Mac OS X 10.3.9 and  
> 10.4.7. Both were installed as updates to OpenSSH 4.3p2/openssl  
> 0.9.8c (not Apple's obsolete versions which are bypassed). The 10.4.7  
> build works as expected, whereas the 10.3.9 build throws
> 
> Disconnecting: Bad packet length 2477450673.
When you built openssl 0.9.8d, did you run its tests ("make tests")? 
Did it pass or fail?

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

(cc:'ed the list, someone else may have some suggestions)

On Fri, Sep 29, 2006 at 06:13:16AM -0500, Marius Schamschula
wrote:
> Darren,
> 
> openssl 0.9.8d passed all tests.
OK that's useful.  (Not definitive, I have recently found one problem that
the tests don't catch.)
> A bit more information in this matter:
> 
> I built openssh 4.4.p1 against both openssl 0.9.8d and then 0.9.8c.  
> Neither version worked.
> I then rebuilt 4.3.p2 against openssl 0.9.8d and it works.
OK, in summary to make sure I have this right:

OS X 10.4.7, openssl 0.9.8d:	openssh 4.3p2 and 4.4p1 both work

OS X 10.3.9, openssl 0.9.8c:	openssh 4.3p2 works, 4.4p1 doesn't
OS X 10.3.9, openssl 0.9.8d:	openssh 4.3p2 works, 4.4p1 doesn't

Presumably the 10.3.9 builds were against the exact same binaries
of OpenSSL?

Could you please provide a client debug trace (ssh -vvv server) to show
where it's blowing up?

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.