search for: dsa_verify

I am building version 2.3.0p1 of openssh on a UnixWare 2.03 system and am unable to connect with SSH 2. The error I get is: debug: len 55 datafellows 0 debug: dsa_verify: signature incorrect dsa_verify failed for server_host_key The build environment is as follows: gcc 2.95.1 openssl-0.9.6-beta2 I've looked through the archives and found similar problems related to version incompatabilities. In this case, I have the same version (2.3.0p1) on both ends. I go...

...t ran very well until we tried to connect to an SSH server using SSH2 protocol. On the OS/390 (which is the client) it comes up with the following error messages: >ssh -v -2 somehost . . . debug: bits set: 504/1024 debug: len 55 datafellows 0 debug: dsa_verify: signature incorrect dsa_verify failed for server_host_key debug: Calling cleanup 0x1cf36d18(0x0) and it ends. I also tried a different key : -c "blowfish-cbc" but the problem remains the same. Can anybody help ?? Gruss/ regards Michael Mai Deutsche Bank PCAM-G...

...find that openssh 2.2.0p1 fails > to connect. I did some more experiments and also saw the problems. They occur when using a 0.9.6-beta client to connect to 0.9.5a and 0.9.6-beta servers. They also occur when using a 0.9.5a client connecting to a 0.9.6-beta server. Connections fail with "dsa_verify: signature incorrect". I have completely recompiled and re-linked the packages, so that binary compatibility of the OpenSSL library is not an issue. I have crossposted this message to openssh-unix-dev, as I don't know, whether this is caused by the new OpenSSL release or a problem with O...

...ed. DSA key fingerprint is 6a:1d:ca:98:3f:cb:1a:ac:a7:ba:3f:60:51:8d:39:7d. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'galaxy.acm.jhu.edu,128.220.223.65' (DSA) to the list of knn hosts. debug: bits set: 510/1024 debug: len 40 datafellows 15 debug: dsa_verify: signature incorrect dsa_verify failed for server_host_key debug: Calling cleanup 0x8059884(0x0)

...error: we do not read, but chan_read_failed for istate 8 This is FreeBSD 3.4... Any ideas? Also, FYI, I had a problem connecting from the latest SNAP to 2.2.0p1 using DSA keys; on most machines (18 of 20) it wouldn't use key verification. Debug printed out: debug: len 55 datafellows 0 debug: dsa_verify: signature incorrect while the working machines would print: debug: len 55 datafellows 0 debug: dsa_verify: signature correct Upgrading both ends to the latest SNAP solved the problem with no key changes on either end. -Rob

Hi guys, and another feature request for sshd which I would classify as really useful. And I think this behaviour is currently not available (If yes, sorry, I must have missed it): > I believe that the sshd should log which RSA key was used to connect to > an account. When there are a number of keys in the authorized_keys file > it is often useful to know which one was used for each

...; can't be established. DSA key fingerprint is d5:1e:47:01:9a:63:7d:07:6a:44:6c:a6:61:2d:15:c4. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '44.1.2.3' (DSA) to the list of known hosts. debug: bits set: 524/1024 debug: len 55 datafellows 0 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: Enabling compression at level 6. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST a4 c8 7d 9e 89 ad ee dd 19 ca fa 26 df 41 3e c6 debug: com...

...Got SSH2_MSG_KEX_DH_GEX_GROUP. debug: bits set: 499/1024 debug: Sending SSH2_MSG_KEX_DH_GEX_INIT. debug: Wait SSH2_MSG_KEX_DH_GEX_REPLY. debug: Got SSH2_MSG_KEXDH_REPLY. debug: Host 'gabriel' is known and matches the DSA host key. debug: bits set: 522/1024 debug: len 55 datafellows 0 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST debug: service_accept: ssh-userauth debug: got SSH2_MSG_SERVICE_ACCEPT debug: authentications that...

...rting up PAM with username "root" Failed none for ROOT from 10.8.8.107 port 1411 ssh2 debug1: userauth-request for user root service ssh-connection method publickey debug1: attempt #2 debug1: matching key found: file /root/.ssh/authorized_keys2, line 1 debug1: len 55 datafellows 0 debug1: dsa_verify: signature correct debug1: PAM setting rhost to "w107.ensim.com" Accepted publickey for ROOT from 10.8.8.107 port 1411 ssh2 debug1: Entering interactive session for SSH2. debug1: server_init_dispatch_20 debug1: server_input_channel_open: ctype session rchan 0 win 65536 max 32768 debug1: o...

...ox perfectly fine before but have not accessed the box in a while (at least a week). Now, I get the following trace when I try to login to a server: <--snip--> debug: Host 'hostname' is known and matches the DSA host key. debug: bits set: 485/1024 debug: len 55 datafellows 4 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST debug: service_accept: ssh-userauth debug: got SSH2_MSG_SERVICE_ACCEPT debug: authentications that...

...: bits set: 516/1024 debug: Wait SSH2_MSG_KEXDH_REPLY. debug: Got SSH2_MSG_KEXDH_REPLY. debug: keytype ssh-dss debug: keytype ssh-dss debug: keytype ssh-dss debug: Host 'tomcat.ssd.loral.com' is known and matches the DSA host key. debug: bits set: 506/1024 debug: len 55 datafellows 0 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST Disconnecting: Corrupted HMAC on input. debug: Calling cleanup 0x80571ac(0x0) and tomcat is runnin...

...m 209.186.189.140 port 63337 ssh2 debug: userauth-request for user jphillips service ssh-connection method publickey debug: keytype ssh-dss debug: keytype ssh-dss debug: keytype ssh-dss debug: matching key found: file /home/jphillips/.ssh/authorized_keys2, line 2 debug: len 55 datafellows 20 debug: dsa_verify: signature incorrect Failed publickey for jphillips from 209.186.189.140 port 63337 ssh2 debug: userauth-request for user jphillips service ssh-connection method password Failed password for jphillips from 209.186.189.140 port 63337 ssh2 debug: userauth-request for user jphillips service ssh-connec...

...bug: bits set: 500/1024 debug: Wait SSH2_MSG_KEXDH_REPLY. debug: Got SSH2_MSG_KEXDH_REPLY. debug: keytype ssh-dss debug: keytype ssh-dss debug: keytype ssh-dss debug: Host 'scyc2h.qc.bell.ca' is known and matches the DSA host key. debug: bits set: 499/1024 debug: len 55 datafellows 0 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST debug: service_accept: ssh-userauth debug: got SSH2_MSG_SERVICE_ACCEPT debug: authentications that...

...Sending SSH2_MSG_KEXDH_INIT. debug: bits set: 492/1024 debug: Wait SSH2_MSG_KEXDH_REPLY. debug: Got SSH2_MSG_KEXDH_REPLY. debug: keytype ssh-dss debug: keytype ssh-dss debug: Host 'x.x.x.x' is known and matches the DSA host key. debug: bits set: 536/1024 debug: len 40 datafellows 15 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST debug: buggy server: service_accept w/o service debug: got SSH2_MSG_SERVICE_ACCEPT debug: authentic...

...SSH2_MSG_KEX_DH_GEX_GROUP. debug: bits set: 524/1024 debug: Sending SSH2_MSG_KEX_DH_GEX_INIT. debug: Wait SSH2_MSG_KEX_DH_GEX_REPLY. debug: Got SSH2_MSG_KEXDH_REPLY. debug: Host 'sysman-ftp' is known and matches the DSA host key. debug: bits set: 535/1024 debug: len 55 datafellows 0 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST debug: service_accept: ssh-userauth debug: got SSH2_MSG_SERVICE_ACCEPT debug: authentications that...

I have an openssh server running on solaris 7 and the client running on a clean RH linux 6.1 box. I am using the latest release (2.1.1p1 -- i had the known solaris utmp problem and the read_key problem when using 2.1.0p2 so i upgraded). scp from the linux machine to solaris machine gives a "lost connection" message [root at dog /root]# scp foo.bar solmachine:/tmp/ lost connection the

...IT. debug: bits set: 491/1024 debug: Wait SSH2_MSG_KEXDH_REPLY. debug: Got SSH2_MSG_KEXDH_REPLY. debug: keytype ssh-dss debug: keytype ssh-dss debug: keytype ssh-dss debug: Host 'my_host.com' is known and matches the DSA host key. debug: bits set: 518/1024 debug: len 55 datafellows 0 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: Enabling compression at level 6. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST debug: service_accept: ssh-userauth debug: got SSH2_MSG_SER...

...DH_INIT. debug: bits set: 512/1024 debug: Wait SSH2_MSG_KEXDH_REPLY. debug: Got SSH2_MSG_KEXDH_REPLY. debug: keytype ssh-dss debug: keytype ssh-dss debug: keytype ssh-dss debug: Host 'saturn' is known and matches the DSA host key. debug: bits set: 514/1024 debug: len 55 datafellows 0 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST debug: service_accept: ssh-userauth debug: got SSH2_MSG_SERVICE_ACCEPT debug: authentications that...

I've been running OpenSSH for quite some time now, and I have been acting more as the point man in making the builds for LinuxPPC as well as distributing it to the Linux for the PowerPC community. Things have worked rather well, making it a straight rebuild of the package. However, a new problem was introduced with 2.1.1p1. It's not critical, but a little more than a simple annoyance.

...DSA key fingerprint is 29:49:6e:f2:b4:e8:e1:a3:91:2f:f9:99:d5:27:7b:7e. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'login.metalab.unc.edu,152.2.210.14' (DSA) to the list of known hosts. debug: bits set: 504/1024 debug: len 40 datafellows 15 debug: dsa_verify: signature correct debug: Wait SSH2_MSG_NEWKEYS. debug: GOT SSH2_MSG_NEWKEYS. debug: send SSH2_MSG_NEWKEYS. debug: done: send SSH2_MSG_NEWKEYS. debug: done: KEX2. debug: send SSH2_MSG_SERVICE_REQUEST debug: buggy server: service_accept w/o service debug: got SSH2_MSG_SERVICE_ACCEPT debug: authentic...