[
https://issues.apache.org/jira/browse/SSHD-813?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on SSHD-813 started by Goldstein Lyor.
-------------------------------------------
> mina sshd 1.6.0, using as ssh server, run for about an hour，found that ssh
> client throws KeyExchange signature verification failed.
> ------------------------------------------------------------------------------------------------------------------------------------
>
> Key: SSHD-813
> URL: https://issues.apache.org/jira/browse/SSHD-813
> Project: MINA SSHD
> Issue Type: Bug
> Affects Versions: 1.6.0
> Environment: linux，jdk1.8
> Reporter: cheng
> Assignee: Goldstein Lyor
> Priority: Major
>
> When our application call method 'writePacket' to send this message to the
> client, found that ssh client throws KeyExchange signature verification
> failed.
> We found that calling method 'writePacket' will check if a re-keying is
> required and modify the reference of the array 'i_s' in the method
> 'setKexSeed',
> and our application may reveive the message 'SSH_MSG_KEXINIT'at the same
> time; when received the message 'SSH_MSG_KEXINIT', the class 'DHGServer' will
> be
> initialized using the array 'i_s'. But in our multithreaded testing, the
> value of the array 'i_s' in the class 'DHGServer' not up to date, which
> results in
> inconsistent digital signature between the client and the server, so ssh
> client throws KeyExchange signature verification failed.
> I am wondering is this a multithreaded problem that is ignored. Please help
> me, thank you.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
