tomaswolf commented on issue #682:
URL: https://github.com/apache/mina-sshd/issues/682#issuecomment-2703569953

   Our code seems to be correct. Per [RFC 8332, section 
3.1](https://datatracker.ietf.org/doc/html/rfc8332#section-3.1) the server is 
supposed to send an "ssh-rsa" _key_ and a "rsa-sha2-512" _signature_. If the 
server sends "rsa-sha2-512" as _key type_, then it's broken.
   
   If you run with TRACE logging, you'll also get buffer contents logged. Then 
we could verify what we get in that `SSH_MSG_KEX_DH_GEX_REPLY` message. But I'm 
pretty sure we'll see a wrong key type.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org
For additional commands, e-mail: dev-h...@mina.apache.org

Reply via email to