(In reply to Jakub Jelen from comment #1) I assume that there's something about the previous packet from the server that the client doesn't like (as the connection succeeds if I tell ssh to prefer aes128-ctr encryption), but the client should report an accurate error message to the user, not a bogus timeout. However, the attached packet capture shows that it's actually the Fedora 33 ssh client that is aborting the connection (sending TCP RST).
Packet capture of unsuccessful connection attempt (aes256-ctr)Īttempting to SSH from my Fedora 33 system to an old Cyclades terminal ~]$ ssh -v ipilcher:ĭebug1: Reading configuration data /home/pilcher/.ssh/configĭebug1: Reading configuration data /etc/ssh/ssh_configĭebug1: Reading configuration data /etc/ssh/ssh_config.d/nfĭebug1: Reading configuration data /etc/crypto-policies/back-ends/nfigĭebug1: Reading configuration data /etc/ssh/ssh_config.d/nfĭebug1: configuration requests final Match passĭebug1: Connecting to .com port 22.ĭebug1: identity file /home/pilcher/.ssh/id_rsa type 0ĭebug1: identity file /home/pilcher/.ssh/id_rsa-cert type -1ĭebug1: identity file /home/pilcher/.ssh/id_dsa type -1ĭebug1: identity file /home/pilcher/.ssh/id_dsa-cert type -1ĭebug1: identity file /home/pilcher/.ssh/id_ecdsa type -1ĭebug1: identity file /home/pilcher/.ssh/id_ecdsa-cert type -1ĭebug1: identity file /home/pilcher/.ssh/id_ecdsa_sk type -1ĭebug1: identity file /home/pilcher/.ssh/id_ecdsa_sk-cert type -1ĭebug1: identity file /home/pilcher/.ssh/id_ed25519 type -1ĭebug1: identity file /home/pilcher/.ssh/id_ed25519-cert type -1ĭebug1: identity file /home/pilcher/.ssh/id_ed25519_sk type -1ĭebug1: identity file /home/pilcher/.ssh/id_ed25519_sk-cert type -1ĭebug1: identity file /home/pilcher/.ssh/id_xmss type -1ĭebug1: identity file /home/pilcher/.ssh/id_xmss-cert type -1ĭebug1: Local version string SSH-2.0-OpenSSH_8.4ĭebug1: Remote protocol version 2.0, remote software version OpenSSH_4.4ĭebug1: match: OpenSSH_4.4 pat OpenSSH_2*,OpenSSH_3*,OpenSSH_4* compat 0x00000002ĭebug1: Authenticating to .com:22 as 'ipilcher:7001'ĭebug1: kex: algorithm: diffie-hellman-group-exchange-sha256ĭebug1: kex: server->client cipher: aes256-ctr MAC: hmac-sha1 compression: noneĭebug1: kex: client->server cipher: aes256-ctr MAC: hmac-sha1 compression: noneĭebug1: kex: diffie-hellman-group-exchange-sha256 need=32 dh_need=32ĭebug1: SSH2_MSG_KEX_DH_GEX_REQUEST(2048<8192<8192) sentĬonnection to 10.11.173.228 port 22 timed out
0 kommentar(er)
