Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 7801 - openssl or openssh bug ?
Summary: openssl or openssh bug ?
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Daniel Ahlberg (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-09-11 07:56 UTC by Cong
Modified: 2003-02-04 19:42 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
log from sshd2 (sshd2.log,5.91 KB, text/plain)
2002-09-11 08:04 UTC, Cong
Details
/tmp/ssh.log: log from openssh client (ssh.log,1.29 KB, text/plain)
2002-09-11 08:05 UTC, Cong
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Cong 2002-09-11 07:56:30 UTC
After upgrade openssl to 0.9.6g and remerge openssh with the new openssl, I can
not access to commercial sshd server anymore.

$ emerge  openssl openssh -cp

>>> These are the packages that I would unmerge:

 net-misc/openssh
    selected: none
   protected: 3.4_p1-r3
     omitted: none

 dev-libs/openssl
    selected: none
   protected: 0.9.6g
     omitted: none

>>> clean: No packages selected for removal.

I installed newest commercial ssh into my box and start the daemon:
# /opt/sbin/sshd2 -p 2222 -v 2> /tmp/sshd2.log
Comment 1 Cong 2002-09-11 08:03:19 UTC
Then I tried to access to that server, using openssh's client
frespace$ ssh -p 2222 freespace -v 2> /tmp/ssh.log

As you can see in the log files, ssh client fell.

To see the version of openssh and openssl
freespace$ ssh -V
OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090607f

And I should mention that, from an other machine, say nazca, I can access to the
commercial sshd2 server on my machine freespace.
nazca$ ssh -V 
OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090602f

The difference between outputs from 'ssh -V' on freespace and nazca is only the
last digits in version number of OpenSSL.
Comment 2 Cong 2002-09-11 08:04:38 UTC
Created attachment 3837 [details]
log from sshd2
Comment 3 Cong 2002-09-11 08:05:41 UTC
Created attachment 3838 [details]
/tmp/ssh.log: log from openssh client
Comment 4 SpanKY gentoo-dev 2002-09-11 16:44:47 UTC
i'd point at 'key_verify failed for server_host_key' in the ssh.log as a place 
to look ... if you want you could try running `emerge openssh openssl` and 
having them both re-installed to see if you have better results

but at any rate, i cant say that anytime will be spent tracking down this since 
the commerical sshd you are using is not part of gentoo ...
try taking this to the forums and see if someone over there can help you