While I hear many suggestions to move to newer
release,
can someone shed light on a solution to the
problem as immediate help !?
Can someone who has knowledge of this section of
code please suggestion some pointers/solutions ?
In snippet below, 'siglen' is 128 (per debugger)
but RSA_size(..) returns 1 !
BTW, the system the client is running on is
NetBSD1.4.2
--- foo foo <foomail123 at yahoo.com> wrote:> Using OpenSSH 2.3.1 client and OpenSSL 0.9.6a
>
> When trying to ssh to OpenSSH server of
> higher versions SSH-1.99-OpenSSH_2.5.2p2 or such,
>
> I see error in RSA key exchange:
> RSA_verify(..)routine.
>
> I see:
>
> error at:int RSA_verify(int dtype, unsigned char *m,
> unsigned int m_len,
> unsigned char *sigbuf, unsigned int siglen,
> RSA *rsa)
> {
> int i,ret=0,sigtype;
> unsigned char *p,*s;
> X509_SIG *sig=NULL;
>
> if (siglen != (unsigned int)RSA_size(rsa))
> {
>
>
RSAerr(RSA_F_RSA_VERIFY,RSA_R_WRONG_SIGNATURE_LENGTH);> return(0);
> }
>
>
> debugger output:
>
> Breakpoint 1, RSA_verify (dtype=64,
> m=0x199d380 "mB?\tP???\t?Wz\227\226?\a0?[?UU",
> m_len=20,
> sigbuf=0x1990300
>
"\0205:\t\026\217????\206b#??nG?\177??\002U*P^9\0213?]??f\225?:?m\005\215\225??n????\205?\205?'?\220??,e#?\2150\025K\em?\022Wn\177[@?\fQ?4w3g?yX???\024\b\2222????F[p??n??r?(??\017?\214\177\220;qI?Z,.Bv\026$R?",> siglen=128, rsa=0x198b700) at
> bsd/tools/openssl/crypto/rsa/rsa_sign.c:147
> 147 if (siglen != (unsigned
> int)RSA_size(rsa))
> (gdb) x/40x
> 0x198b7a0: 0x00000041 0x00000000
> 0x00008000 0x00000000
> 0x198b7b0: 0x00000000 0x00000000
> 0x00000000 0x00008000
> 0x198b7c0: 0xe5b83d65 0x00000001
> 0x5555686d 0x61632d6d
> 0x198b7d0: 0x64352d39 0x36005555
> 0x00000000 0x00000000
> 0x198b7e0: 0x00000000 0x00000000
> 0x00000000 0x00000000
> 0x198b7f0: 0x00000000 0x00000000
> 0xfeefdead 0x0198b778
> 0x198b800: 0x0186ed14 0x00000000
> 0x0199d2a0 0x0199d280
> 0x198b810: 0x00000000 0x0199d360
> 0x0199d380 0x00000001
> 0x198b820: 0x0198b780 0x00000000
> 0x00000000 0x00000000
> 0x198b830: 0x00000000 0x00000000
> 0x00000000 0x00000000
> (gdb) p *rsa
> $3 = {pad = 0, version = 0, meth = 0x195bb1c, n > 0x199d480, e =
0x199d3c0,
> d = 0x0, p = 0x0, q = 0x0, dmp1 = 0x0, dmq1 = 0x0,
> iqmp = 0x0, ex_data = {
> sk = 0x0, dummy = 1848469362}, references = 1,
> flags = 6,
> _method_mod_n = 0x0, _method_mod_p = 0x0,
> _method_mod_q = 0x0,
> bignum_data = 0x0, blinding = 0x0}
> (gdb) x/40x 0x199d480
> 0x199d480: 0x0199d4a0 0x00000001
> 0x00000001 0x00000000
> 0x199d490: 0x00000001 0x55550000
> 0xef025555 0x00000008
> 0x199d4a0: 0x00000023 0xffffffff
> 0x555535d2 0x55550000
> 0x199d4b0: 0x55550000 0x00000000
> 0xfeefdead 0x0199d3d8
> 0x199d4c0: 0x0186ed14 0x8bcb35d2
> 0x00000000 0x00000000
> 0x199d4d0: 0x55550000 0x00000000
> 0xfeefdead 0x0199d4f8
> 0x199d4e0: 0x00000000 0x00000000
> 0x00000000 0x00000000
> 0x199d4f0: 0x00000000 0x00000000
> 0xfeefdead 0x0199d518
> 0x199d500: 0x00000000 0x00000000
> 0x00000000 0x00000000
> 0x199d510: 0x00000000 0x00000000
> 0xfeefdead 0x0199d538
> (gdb)
>
>
> Does anyone know issues with OpenSSL or OpenSSH
> above versions ? Is there any compatiblity issue ?
>
> Can someone share their knowledge ?
>
> Thank you,
>
>
>
>
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Games - play chess, backgammon, pool and more
> http://games.yahoo.com/
> _______________________________________________
> openssh-unix-dev at mindrot.org mailing list
>
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
__________________________________________________
Do You Yahoo!?
Yahoo! Games - play chess, backgammon, pool and more
http://games.yahoo.com/