Goldstein Lyor commented on SSHD-813:

I have made some changes to the KEX seed mechanism that should make it more 
tolerant to multi-threading - I would appreciate it if you could test the code 
- simply clone https://github.com/lgoldstein/mina-sshd.git, switch to SSHD-813 
branch, compile (no need to run the tests - you can run {{mvn -Pquick clean 
install}}) and then try using this code. I cannot reproduce it, but it would 
help if you could run some tests on it before I merge it into the _master_ 


> mina sshd 1.6.0, using as ssh server, run for about an hour,found that ssh 
> client throws  KeyExchange signature verification failed.
> ------------------------------------------------------------------------------------------------------------------------------------
>                 Key: SSHD-813
>                 URL: https://issues.apache.org/jira/browse/SSHD-813
>             Project: MINA SSHD
>          Issue Type: Bug
>    Affects Versions: 1.6.0
>         Environment: linux,jdk1.8
>            Reporter: cheng
>            Assignee: Goldstein Lyor
>            Priority: Major
> When our application call method 'writePacket' to send this message to the 
> client, found that ssh client throws KeyExchange signature verification 
> failed.
> We found that calling method 'writePacket' will check if a re-keying is 
> required and modify the reference of the array 'i_s' in the method 
> 'setKexSeed',
> and our application may reveive the message 'SSH_MSG_KEXINIT'at the same 
> time; when received the message 'SSH_MSG_KEXINIT', the class 'DHGServer' will 
> be
> initialized using the array 'i_s'. But in our multithreaded testing, the 
> value of the array 'i_s' in the class 'DHGServer' not up to date, which 
> results in 
> inconsistent digital signature between the client and the server, so ssh 
> client throws KeyExchange signature verification failed.
> I am wondering is this a multithreaded problem that is ignored. Please help 
> me, thank you.

This message was sent by Atlassian JIRA

Reply via email to