Wu ShuKun
2015-Mar-27 00:30 UTC
SSH hung with an OpenSSH_6.6.1p1 --> OpenSSH_5.8p2_hpn13v11
Yep. I'm upgraded via freebsd-update. and I have no idea where i'm wrong either.:-[ Is it likely I have no luck in other words? ? 2015/03/26 22:16, Mike Tancsa ??:> On 3/26/2015 2:44 AM, Wu ShuKun wrote: >> greeting! >> ssh connection failed by using a new version SSH to and old one. >> Below is the symptoms which on a same network. >> Connection is Okay with old version SSH >> %ssh -V >> OpenSSH_5.4p1 FreeBSD-20100308, OpenSSL 0.9.8q 2 Dec 2010 >> OpenSSH_6.6.1p1, OpenSSL 1.0.1l-freebsd 15 Jan 2015 >> % ssh -v 10.41.172.19 >> OpenSSH_6.6.1p1, OpenSSL 1.0.1l-freebsd 15 Jan 2015 > > > Is it possible this user somehow got a package or port, or binary > upgrade somehow built with OpenSSL when it was briefly broken between > r280266 and r280274 ? > > (Trimming the other lists from this thread) > > ---Mike > > > >
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 03/26/15 17:30, Wu ShuKun wrote:> Yep. I'm upgraded via freebsd-update. and I have no idea where > i'm wrong either.:-[ Is it likely I have no luck in other words?Can you try specifying -o "KexAlgorithms diffie-hellman-group-exchange-sha1" when ssh'ing and see if that would mitigate the problem? My gut feeling is that somehow the HPN patch have broke certain key exchange negotiation steps of OpenSSH, which was not exercised in earlier versions of FreeBSD due to the lack of ECDH key exchange? Cheers, - -- Xin LI <delphij at delphij.net> https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.1.2 (FreeBSD) iQIcBAEBCgAGBQJVFKndAAoJEJW2GBstM+ns83UQAIjsYGkaBJstCW1F/Rp1Q1mm Hg63DSYteIhOfAJ/m3M4qpfWJq3vf9ID0QjN0oPkfpKvwK35P3hgkT0y/hleRjpG YdcDqlW6Adm8ZmaI+9BdZSqga+plfXyjeyChgjXSfocT7Is+s0+zSS4km3rl91aR Jhv1uVr/gMKUTnXlCaNSDajzHpEYxaKu1ipp1OTfdwnSdoK1VpVN1dcDHFK0stts qdrFiOQWKaUXiXnfVTrGRowTBk46C429k+66YLKmYLfSj/0toiCGRlrwfCLTYFHM Uc0oGWTJbqyhd9lpf5Q90B7pvJ7sBaatvEt0i9LgyuyfZQieAX6hidgnEV5cI4nC CYfMwjXRSOChcvpBtjsC/Az+7FE0mOXN9NAmwPcQ5XO0JtipNrCKwN1oR6nG2Rk5 c1qBcc9fYZBYRwdnunEG3FlNgnzi5baoHszSoHGmkew4dbUZsTIYEknsMlP0B3BP k0RHnl/083JTDP55WR/IEJF0O0LVGnrI4UQEDq66hfNSNoLLJkMkyC95EIZpNHVo uo6TI9TP3QvJBp/iPIuIdQaux7DFD/ba1htXWwOsf4Sw2brHYyvLGfnHkFOBrFNt LkiYZf9CCsawDU+BGSn2OJCndDidLuJV4H2jtZFbJ+vo13nq0t+ZmA7ZtEOz4EMr v2DmLBOFU3jxsrAwmkhJ =HsH2 -----END PGP SIGNATURE-----