Re: key re-exchange problem?

Andre Charbonneau <[email protected]>
Newsgroups gmane.comp.java.sshtools.user
Message-ID <[email protected]>
Hi Sascha,
First, thanks a lot for the reply.

Unfortunately, I'm not sure if the bug I'm seeing is addressed by this 
patch.  The patch fixes a key re-exchange problem that happens when over 
1 GB of data is transfered over the stream.  In my case, the problem 
seem to happen randomly, way before 1 GB is actually transfered on the 
stream.

One thing I noticed in the debug output I attached is that it seems the 
server sends a bit of data after the client sent the inital 
SSH_MSG_KEXINIT message.  Maybe this is a scenario that does not happen 
often and might trigger a bug in the client.  (for example, maybe the 
client expects the server to send the SSH_MSG_KEXINIT reply right away, 
but in some cases the server still has some data to send before sending 
the SSH_MSG_KEXINIT reply).

 From the rfc4253 draft:

"Note, however, that during a key re-exchange, after sending a 
SSH_MSG_KEXINIT message, each party MUST be prepared to process an 
arbitrary number of messages that my be in-flight before receiving a 
SSH_MSG_KEXINIT message from the other party."

Since the problem happens very randomly, it is very difficult to 
reproduce on demand, which makes debugging of the problem difficult.  I 
will look in the code to see if i can find where it is failing...


Thanks again,
    Andre

Sascha Hunold wrote:
> Andre Charbonneau wrote:
>   
>> I have a problem with sshtools where the connection is being closed
>> and I get a protocol error.  According to the debug output, it looks
>> like this occurs during key re-exchange.
>>     
> I guess you are using version 0.2.7 or prior.
>
> The patches section contains a fix.
> I think it's this one here
> http://sourceforge.net/tracker/index.php?func=detail&aid=898106&group_id=60894&atid=495564
>
> You can find my personal patches at
> http://capivara.sourceforge.net/?SSHTools
>
> Hope this helps!
>
> Cheers
>
> Sascha
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Sshtools-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/sshtools-users
>   

-- 
Andre Charbonneau

100 Sussex Drive, Rm 2025
Research Computing Support, IMSB
National Research Council Canada
Ottawa, ON, Canada K1A 0R6
613-993-3129  Fax: 613-993-3127     



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.