FS#46007 - [openssh] ssh1 is not supported

Attached to Project: Arch Linux
Opened by Gabriel Schanuel (gschanuel) - Tuesday, 18 August 2015, 03:06 GMT
Last edited by Doug Newgard (Scimmia) - Tuesday, 18 August 2015, 03:51 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To No-one
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description: After update to openssh-7.0p1-1 ssh1 is not supported for client anymore.
Protocol configuration on /etc/ssh/ssh_config gives error to option "1"

/etc/ssh/ssh_config line 38: Bad protocol spec '1'.

when trying to connect to a v1 only server an error is shown

"ssh1 is not supported"

Additional info:
* package version: OpenSSH_7.0p1-1

# Output from ssh:
$ ssh -v1 user@172.2.2.2
OpenSSH_7.0p1, OpenSSL 1.0.2d 9 Jul 2015
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 20: Applying options for *
debug1: Connecting to 172.2.2.2 [172.2.2.2] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: key_load_public: No such file or directory
debug1: identity file /root/.ssh/identity type -1
debug1: key_load_public: No such file or directory
debug1: identity file /root/.ssh/identity-cert type -1
debug1: Remote protocol version 1.5, remote software version Cisco-1.25
debug1: match: Cisco-1.25 pat Cisco-1.* compat 0x60000000
debug1: Local version string SSH-1.5-OpenSSH_7.0
debug1: Authenticating to 172.2.2.2:22 as 'user'
ssh1 is not supported

# After changing Protocol in /etc/ssh/ssh_config file:
$ ssh -v1 user172.2.2.2
OpenSSH_7.0p1, OpenSSL 1.0.2d 9 Jul 2015
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 20: Applying options for *
/etc/ssh/ssh_config line 38: Bad protocol spec '1'.
This task depends upon

Closed by  Doug Newgard (Scimmia)
Tuesday, 18 August 2015, 03:51 GMT
Reason for closing:  Not a bug
Comment by Daniel Micay (thestinger) - Tuesday, 18 August 2015, 03:13 GMT
SSH1 is insecure so OpenSSH 7 disabled it in normal builds. You should rebuild the package if you want support for an insecure protocol. It would be against Arch's principle of respecting upstream decisions to override this for the official package.

http://www.openssh.com/txt/release-7.0

Loading...