[OmniOS-discuss] common-factor key exchange

Fri Nov 28 11:56:29 UTC 2014

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Le 28/11/14 10:17, Michael Mounteney a écrit :
| After a recent upgrade to my Gentoo Linux installations, I can no
| longer ssh into them from OmniOS:
|
| -bash-4.3$ ssh 192.168.1.48 no common kex alg: client
| 'diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1',
| server
|
'curve25519-sha256 at libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1'
|
|  The client being OmniOS and the server being Gentoo Linux.  Now I
| could downgrade what Gentoo offers, but it would be nicer to
| upgrade what OmniOS offers.  Is there a way ?
|
| Michael.
|
you may need to verify which ssh you have installed.
| # pkg list -a |grep ssh network/openssh (omnios)
| 6.6.1-0.151013             --- network/openssh-server (omnios)
| 6.6.1-0.151013             --- network/ssh
| 0.5.11-0.151013            i-- network/ssh/ssh-key
| 0.5.11-0.151013            i-- service/network/ssh
| 0.5.11-0.151013            i--

if you have openssh installed (omnios or, for example pkgsrc) then you
should be able to query the algorithms supported.
With pkgsrc openssh:
| # ssh -Q kex diffie-hellman-group1-sha1
| diffie-hellman-group14-sha1 diffie-hellman-group-exchange-sha1
| diffie-hellman-group-exchange-sha256 ecdh-sha2-nistp256
| ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group1-sha1
| curve25519-sha256 at libssh.org