Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-4762

default settings of ssh client in Fedora 23 doesn't work with Fuse

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Do
    • Major
    • jboss-fuse-6.3
    • jboss-fuse-6.2.1
    • Karaf
    • None
    • % %

    Description

      There was some change in ssh client in Fedora 23, because this doesn't work anymore:

      ssh admin@localhost -p 8101                
Unable to negotiate with 127.0.0.1: no matching host key type found. Their offer: ssh-dss
      Fuse log error
      13:38:08,397 | WARN  | b]-nio2-thread-5 | ServerSession                    | 124 - org.apache.sshd.core - 0.14.0 | Exception caught
java.lang.IllegalStateException: Unable to negotiate key exchange for server host key algorithms (client: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa / server: ssh-dss)

      SSH from other distro or older Fedora version works fine.
      Workaround for Fedora 23:

      ssh admin@localhost -p 8101 -oHostKeyAlgorithms=+ssh-dss

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem that impairs or prevents the functions of the product. ENTESB-4427 ssh issues with ssh-dss on Fedora 23 and newer

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) ENTESB-5642 Move Away From ssh-dss (DSA) Public Key Cipher

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is related to

          Quality Risk - A potential bug. JBPM-5076 Embedded ssh server (for git) does not use recomended ciphers

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              pantinor@redhat.com Paolo Antinori
              jludvice Josef Ludvicek (Inactive)
              Josef Ludvicek Josef Ludvicek (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: