openssh si blocca su "rekey dopo 134217728 blocchi"

7

Per prima cosa, ho cercato un giorno intero e nonostante ci siano problemi simili a simili , non riesco a trovare nessuno con questo problema esatto.

Il mio hackintosh in esecuzione 10.12.3 ha OpenSSH installato tramite homebrew. Si blocca esattamente nella stessa riga "rekey", indipendentemente dal server a cui mi sto collegando, e non ho idea del perché.

(nota: il risultato atteso dal sotto dovrebbe terminare con

Permission Denied (publickey).

perché non ho installato il certificato, invece sto usando [email protected] per testare. Ma non è nemmeno così lontano, e questo è il problema. La mia casella del server principale che esegue Ubuntu produce lo stesso punto di svolta.)

➜  ~ ssh -vvv -T [email protected]
OpenSSH_7.5p1, OpenSSL 1.0.2k  26 Jan 2017
debug1: Reading configuration data /usr/local/etc/ssh/ssh_config
debug2: resolving "github.com" port 22
debug2: ssh_connect_direct: needpriv 0
debug1: Connecting to github.com [192.30.255.112] port 22.
debug1: Connection established.
debug1: key_load_public: No such file or directory
debug1: identity file /Volumes/StorageRAID/ajlowndes/.ssh/id_rsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Volumes/StorageRAID/ajlowndes/.ssh/id_rsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Volumes/StorageRAID/ajlowndes/.ssh/id_dsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Volumes/StorageRAID/ajlowndes/.ssh/id_dsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Volumes/StorageRAID/ajlowndes/.ssh/id_ecdsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Volumes/StorageRAID/ajlowndes/.ssh/id_ecdsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Volumes/StorageRAID/ajlowndes/.ssh/id_ed25519 type -1
debug1: key_load_public: No such file or directory
debug1: identity file /Volumes/StorageRAID/ajlowndes/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.5
debug1: Remote protocol version 2.0, remote software version libssh-0.7.0
debug1: no match: libssh-0.7.0
debug2: fd 5 setting O_NONBLOCK
debug1: Authenticating to github.com:22 as 'git'
debug3: hostkeys_foreach: reading file "/Volumes/StorageRAID/ajlowndes/.ssh/known_hosts"
debug3: record_hostkey: found key type RSA in file /Volumes/StorageRAID/ajlowndes/.ssh/known_hosts:2
debug3: load_hostkeys: loaded 1 keys from github.com
debug3: order_hostkeyalgs: prefer hostkeyalgs: [email protected],rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c
debug2: host key algorithms: [email protected],rsa-sha2-512,rsa-sha2-256,ssh-rsa,[email protected],[email protected],[email protected],[email protected],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519
debug2: ciphers ctos: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],aes128-cbc,aes192-cbc,aes256-cbc
debug2: ciphers stoc: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],aes128-cbc,aes192-cbc,aes256-cbc
debug2: MACs ctos: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,[email protected],zlib
debug2: compression stoc: none,[email protected],zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: [email protected],ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: host key algorithms: ssh-dss,ssh-rsa
debug2: ciphers ctos: [email protected],aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-cbc
debug2: ciphers stoc: [email protected],aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-cbc
debug2: MACs ctos: hmac-sha1,hmac-sha2-256,hmac-sha2-512
debug2: MACs stoc: hmac-sha1,hmac-sha2-256,hmac-sha2-512
debug2: compression ctos: none,zlib,[email protected]
debug2: compression stoc: none,zlib,[email protected]
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug1: kex: algorithm: [email protected]
debug1: kex: host key algorithm: ssh-rsa
debug1: kex: server->client cipher: [email protected] MAC: <implicit> compression: none
debug1: kex: client->server cipher: [email protected] MAC: <implicit> compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: Server host key: ssh-rsa SHA256:nThbg6kXUpJWGl7E1IGOCspRomTxdCARLviKw6E5SY8
debug3: hostkeys_foreach: reading file "/Volumes/StorageRAID/ajlowndes/.ssh/known_hosts"
debug3: record_hostkey: found key type RSA in file /Volumes/StorageRAID/ajlowndes/.ssh/known_hosts:2
debug3: load_hostkeys: loaded 1 keys from github.com
debug3: hostkeys_foreach: reading file "/Volumes/StorageRAID/ajlowndes/.ssh/known_hosts"
debug3: record_hostkey: found key type RSA in file /Volumes/StorageRAID/ajlowndes/.ssh/known_hosts:11
debug3: load_hostkeys: loaded 1 keys from 192.30.255.112
debug1: Host 'github.com' is known and matches the RSA host key.
debug1: Found key in /Volumes/StorageRAID/ajlowndes/.ssh/known_hosts:2
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: set_newkeys: mode 0
debug1: rekey after 134217728 blocks

Ho anche provato una versione precedente di ssh:

➜  ~ /usr/local/Cellar/openssh/7.4p1/bin/ssh -vvv -T [email protected]

con esattamente lo stesso risultato.

E ho provato la versione nativa di macOS in questo modo:

➜  ~ /usr/bin/ssh -vvv -T [email protected]
OpenSSH_7.3p1, LibreSSL 2.4.1

... {same stuff} ...

Warning: Permanently added the RSA host key for IP address '192.30.255.113' to the list of known hosts.
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug2: set_newkeys: mode 0
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS received

Ho notato che le ultime tre righe sono in un ordine diverso, altrimenti non sembra esserci differenza.

Altri computer (ad esempio MacBook Air) con ssh nativo di mac non hanno alcun problema. È solo l'hackintosh. Qualche idea in cui posso risolvere il problema?

Grazie in anticipo.

Nota: non riesco a ssh TO il hackintosh, non solo da esso.

    
posta ajlowndes 26.03.2017 - 03:39
fonte

1 risposta

8

Il problema è che ssh è in attesa di una connessione al tuo ssh-agent. Puoi testarlo eseguendo SSH_AUTH_SOCK= ssh [email protected] .

Se questo è davvero il problema (come lo era per me), probabilmente hai più LaunchAgent che stanno ascoltando sul socket in SSH_AUTH_SOCK e uno di loro sta facendo la cosa sbagliata. Ad esempio, ne ho avuto uno da MacPorts che stava cercando di eseguire /opt/local/bin/ssh-agent -l ma che ssh-agent non esisteva più.

Dovresti avere un LaunchAgent per ssh-agent in /System/Library/LaunchAgents/com.openssh.ssh-agent.plist ma potresti averne altri in /Library/LaunchAgents o ~/Library/LaunchAgents . Se è così, scarica ssh-agent LaunchAgents usando launchctl unload o semplicemente cancellali e disconnetti e torna indietro (o forse riavvia, non sono sicuro che un logout sia sufficiente). Spero che questo risolva il tuo problema.

    
risposta data 15.04.2017 - 02:20
fonte

Leggi altre domande sui tag