Subject: ssh{,d} failed on amd64
To: None <current-users@netbsd.org>
From: Kurt Schreiner <ks@ub.uni-mainz.de>
List: current-users
Date: 11/28/2005 17:55:29
Hi,

I'v cvs updated -current source an hour ago or so and compiled an new distrib
on amd64. Compiling was fine, but the resulting sshd doesn't allow me to
login to the machine:

(from an i386 running -current compiled some minutes ago)
OpenSSH_4.0 NetBSD_Secure_Shell-20050423, OpenSSL 0.9.8a 11 Oct 2005
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to isunopti [10.xx.yy.29] port 22.
debug1: Connection established.
debug1: identity file /home/ks/.ssh/identity type -1
debug1: identity file /home/ks/.ssh/id_rsa type -1
debug1: identity file /home/ks/.ssh/id_dsa type -1


and here it hangs "forever"...

Trying to ssh from the amd-machine to one of my suns gives:

OpenSSH_4.0 NetBSD_Secure_Shell-20050423, OpenSSL 0.9.8a 11 Oct 2005
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to isb1001 [10.xx.yy.220] port 22.
debug1: Connection established.
debug1: identity file /home/ks/.ssh/identity type -1
debug1: identity file /home/ks/.ssh/id_rsa type -1
debug1: identity file /home/ks/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version Sun_SSH_1.0.1
debug1: match: Sun_SSH_1.0.1 pat Sun_SSH_1.0*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.0 NetBSD_Secure_Shell-20050423
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: sending SSH2_MSG_KEXDH_INIT
debug1: expecting SSH2_MSG_KEXDH_REPLY
debug1: Host 'isb1001' is known and matches the RSA host key.
debug1: Found key in /home/ks/.ssh/known_hosts:5
RSA_public_decrypt failed: error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01
debug1: ssh_rsa_verify: signature incorrect
key_verify failed for server_host_key


Ssh and sshd compiled from the same source on i386 work w/o problems....

Kurt