FS#56058 - [openssh] No matching cipher found

Attached to Project: Arch Linux
Opened by Ralph Plawetzki (Ralph) - Friday, 20 October 2017, 17:25 GMT
Last edited by Jan de Groot (JGC) - Friday, 20 October 2017, 19:53 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
With the update from 7.5p1-2 -> 7.6p1-1 ssh refuses to connect to STRATO HiDrive.

[ralph@mothership ~]$ ssh xxxxxxxx@rsync.hidrive.strato.com
Unable to negotiate with 85.214.3.70 port 22: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc
[ralph@mothership ~]$

With ssh downgraded to 7.5p1-2:
[ralph@mothership ~]$ ssh xxxxxxxx@rsync.hidrive.strato.com
The authenticity of host 'rsync.hidrive.strato.com (85.214.3.70)' can't be established.
RSA key fingerprint is SHA256:xxx.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'rsync.hidrive.strato.com,85.214.3.70' (RSA) to the list of known hosts.
xxxxxxxx@rsync.hidrive.strato.com's password:
shell access not allowed
Connection to rsync.hidrive.strato.com closed.
[ralph@mothership ~]$

Additional info:
openssh 7.6p1-1 x86_64
This task depends upon

Closed by  Jan de Groot (JGC)
Friday, 20 October 2017, 19:53 GMT
Reason for closing:  Not a bug
Comment by Ralph Plawetzki (Ralph) - Friday, 20 October 2017, 17:29 GMT
The package is in Core, not Extra. Can't find a way to change this after submitting the bug report.
Comment by Jan de Groot (JGC) - Friday, 20 October 2017, 19:53 GMT
7.6 disabled cbc ciphers by default. You will have to enable them in config if you want to keep using them.

Note that a future version will remove cbc support completely.

Loading...