ssh error invalid digest

Hello Cygwin,

Can openssl 3.5.71-1 be coerced to connect to an old ssh server?

I'm not sure if this is a cygwin problem or an openssl issue, but I 
figured I would start here as the error occurs for me in cygwin.

After updating my cygwin environment to the current recommended version 
of my packages, I am seeing this error:

     tgoodman@tester04 ~
     $ ssh -o HostKeyAlgorithms=+ssh-rsa notsure
     ssh_dispatch_run_fatal: Connection to 192.168.11.3 port 22: error 
in libcrypto: invalid digest

The destination host is running Ubuntu 10.04.4 LTS. (Yes, it is 
incredibly old, but this is an interior machine and it still works, so 
no one wants to touch it.)

Several years ago I added the HostKeyAlgorithms option that was needed 
to support the old crypto. (Actually added to ~/.ssh/config, but for 
debugging I've temporarily deleted config so everything is on the 
command line.)

Claude recommended:

     tgoodman@tester04 ~
     $ ssh -o HostKeyAlgorithms=+ssh-rsa \
         -o PubkeyAcceptedKeyTypes=+ssh-rsa \
         -o 
KexAlgorithms=+diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 \
         notsure
     ssh_dispatch_run_fatal: Connection to 192.168.11.3 port 22: error 
in libcrypto: invalid digest

Since that advice came from Claude, I did not have high hopes. As 
expected, that did not fix the issue.

The unsatisfying 'fix' I have implemented is to downgrade the openssl 
and libssl3 packages from current 3.5.71-1 to the older 3.0.19-1, but 
that is not a good, long term solution.

So my question:

Can openssl 3.5.71-1 be coerced to make the connection to this old ssh 
server? If so, what options?


-- 
Tom Goodman
[email protected]
https://fbe-inc.com/
FBE Associates, Inc.

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple