Re: key re-exchange problem?
Andre Charbonneau <[email protected]>
| Newsgroups | gmane.comp.java.sshtools.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Sascha,
First, thanks a lot for the reply.
Unfortunately, I'm not sure if the bug I'm seeing is addressed by this
patch. The patch fixes a key re-exchange problem that happens when over
1 GB of data is transfered over the stream. In my case, the problem
seem to happen randomly, way before 1 GB is actually transfered on the
stream.
One thing I noticed in the debug output I attached is that it seems the
server sends a bit of data after the client sent the inital
SSH_MSG_KEXINIT message. Maybe this is a scenario that does not happen
often and might trigger a bug in the client. (for example, maybe the
client expects the server to send the SSH_MSG_KEXINIT reply right away,
but in some cases the server still has some data to send before sending
the SSH_MSG_KEXINIT reply).
From the rfc4253 draft:
"Note, however, that during a key re-exchange, after sending a
SSH_MSG_KEXINIT message, each party MUST be prepared to process an
arbitrary number of messages that my be in-flight before receiving a
SSH_MSG_KEXINIT message from the other party."
Since the problem happens very randomly, it is very difficult to
reproduce on demand, which makes debugging of the problem difficult. I
will look in the code to see if i can find where it is failing...
Thanks again,
Andre
Sascha Hunold wrote:
> Andre Charbonneau wrote:
>
>> I have a problem with sshtools where the connection is being closed
>> and I get a protocol error. According to the debug output, it looks
>> like this occurs during key re-exchange.
>>
> I guess you are using version 0.2.7 or prior.
>
> The patches section contains a fix.
> I think it's this one here
> http://sourceforge.net/tracker/index.php?func=detail&aid=898106&group_id=60894&atid=495564
>
> You can find my personal patches at
> http://capivara.sourceforge.net/?SSHTools
>
> Hope this helps!
>
> Cheers
>
> Sascha
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Sshtools-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/sshtools-users
>
--
Andre Charbonneau
100 Sussex Drive, Rm 2025
Research Computing Support, IMSB
National Research Council Canada
Ottawa, ON, Canada K1A 0R6
613-993-3129 Fax: 613-993-3127
-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642