Re: bin/49297: openssh update broke sshd

[christos%zoulas.com@localhost (Christos Zoulas)]

On Oct 21,  6:25am, martin%NetBSD.org@localhost (martin%NetBSD.org@localhost) wrote:
-- Subject: bin/49297: openssh update broke sshd

| >Number:         49297
| >Category:       bin
| >Synopsis:       openssh update broke sshd
| >Confidential:   no
| >Severity:       critical
| >Priority:       high
| >Responsible:    bin-bug-people
| >State:          open
| >Class:          sw-bug
| >Submitter-Id:   net
| >Arrival-Date:   Tue Oct 21 06:25:00 +0000 2014
| >Originator:     Martin Husemann
| >Release:        NetBSD 7.99.1
| >Organization:
| The NetBSD Foundation, Inc.
| >Environment:
| System: NetBSD whoever-brings-the-night.aprisoft.de 7.99.1 NetBSD 7.99.1 (WHOEVER) #18: Mon Oct 20 17:00:05 CEST 2014 martin%seven-days-to-the-wolves.aprisoft.de@localhost:/usr/src/sys/arch/sparc64/compile/WHOEVER sparc64
| Architecture: sparc64
| Machine: sparc64
| >Description:
| 
| After updating this machine to -current as of yesterday (i.e. with the brand
| new openssh imported) I can't log into it from some windows machines
| any more:
| 
| Oct 21 08:16:19 whoever-brings-the-night sshd[1610]: fatal: no matching cipher found: client aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour server aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm%openssh.com@localhost,aes256-gcm%openssh.com@localhost,chacha20-poly1305%openssh.com@localhost [preauth]
| 

Yes, they removed a whole bunch of ciphers because they are not supporting
them anymore. We could either consider bringing them back, or you need to
upgrade your windows ssh to something newer.

christos