Re: OpenSSH 6.2 with OpenSSL 1.0.1e hang at SERVICE_ACCEPT [was: openssl 6.2 hangs]

Thu, 08 Aug 2013 01:55:23 -0700 

On 07-08-2013 02:47, Marlon Davis wrote:

To the openssl community;

I have installed openssl 6.2 on my mac book pro and tried to ssh to a server 
and the ssh session hangs. The host server shows that a connection was 
established but I cannot return a prompt to indicate that I am connected to the 
server. Can someone advise?

Thanks in advance

Your problem looks a lot like an OpenSSH or Sun SSH problem, not
an OpenSSL problem, try asking on a mailing list for SSH problems,
please refer to http://www.openssh.org/list.html for instructions.
Be sure to use plain text mails with their lists.

The details you gave below are likely to help an SSH expert find
the issue, so please keep them when contacting the SSH people.


======>HOST SERVER
[ALLOC133 /export/home/tinker] netstat -a |grep msp9022.XX.XXX.COM.ssh
msp9022.XX.XXX.COM.ssh 
dhcp-uk-vpn-adc-anyconnect-10-154-141-30.XX.XXX.COM.49808 131024      0 128544  
    0 ESTABLISHED
[ALLOC133 /export/home/tinker] netstat -a |grep msp9022.XX.XXX.COM.ssh
msp9022.XX.XXX.COM.ssh 
dhcp-uk-vpn-adc-anyconnect-10-154-141-30.XX.XXX.COM.49808 131024      0 128544  
    0 ESTABLISHED
[ALLOC133 /export/home/tinker]


=======> CLIENT MACHINE

bash-3.2$ ssh -v
OpenSSH_6.2p2, OpenSSL 1.0.1e 11 Feb 2013
usage: ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]
            [-D [bind_address:]port] [-e escape_char] [-F configfile]
            [-I pkcs11] [-i identity_file]
            [-L [bind_address:]port:host:hostport]
            [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
            [-R [bind_address:]port:host:hostport] [-S ctl_path]
            [-W host:port] [-w local_tun[:remote_tun]]
            [user@]hostname [command]


bash-3.2$ ssh -l tinker -vvv  msp9022
OpenSSH_6.2p2, OpenSSL 1.0.1e 11 Feb 2013
debug1: Reading configuration data /opt/local/etc/ssh/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to msp9022 [10.141.10.31] port 22.
debug1: Connection established.
debug3: Incorrect RSA1 identifier
debug3: Could not load "/Users/sherlock holmes/.ssh/id_rsa" as a RSA1 public key
debug1: identity file /Users/sherlock holmes/.ssh/id_rsa type 1
debug1: identity file /Users/sherlock holmes/.ssh/id_rsa-cert type -1
debug3: Incorrect RSA1 identifier
debug3: Could not load "/Users/sherlock holmes/.ssh/id_dsa" as a RSA1 public key
debug1: identity file /Users/sherlock holmes/.ssh/id_dsa type 2
debug1: identity file /Users/sherlock holmes/.ssh/id_dsa-cert type -1
debug1: identity file /Users/sherlock holmes/.ssh/id_ecdsa type -1
debug1: identity file /Users/sherlock holmes/.ssh/id_ecdsa-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.2
debug1: Remote protocol version 2.0, remote software version Sun_SSH_2.0
debug1: no match: Sun_SSH_2.0
debug2: fd 3 setting O_NONBLOCK
debug3: load_hostkeys: loading entries for host "msp9022" from file "/Users/sherlock 
holmes/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /Users/sherlock 
holmes/.ssh/known_hosts:52
debug3: load_hostkeys: loaded 1 keys
debug3: order_hostkeyalgs: prefer hostkeyalgs: 
[email protected],[email protected],ssh-rsa
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: 
ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: 
[email protected],[email protected],ssh-rsa,[email protected],[email protected],[email protected],[email protected],[email protected],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-dss
debug2: kex_parse_kexinit: 
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,[email protected],[email protected],aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[email protected]
debug2: kex_parse_kexinit: 
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,[email protected],[email protected],aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[email protected]
debug2: kex_parse_kexinit: 
[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-md5,hmac-sha1,[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: 
[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-md5,hmac-sha1,[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,[email protected],zlib
debug2: kex_parse_kexinit: none,[email protected],zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit: 
diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: 
aes128-ctr,aes192-ctr,aes256-ctr,arcfour128,arcfour256,arcfour
debug2: kex_parse_kexinit: 
aes128-ctr,aes192-ctr,aes256-ctr,arcfour128,arcfour256,arcfour
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: 
af-ZA,ar-AE,ar-BH,ar-DZ,ar-EG,ar-IQ,ar-JO,ar-KW,ar-LY,ar-MA,ar-OM,ar-QA,ar-SA,ar-TN,ar-YE,as-IN,az-AZ,be-BY,bg-BG,bn-IN,bs-BA,ca-ES,cs-CZ,da-DK,de-AT,de-BE,de-CH,de-DE,de-LI,de-LU,el-CY,el-GR,en-AU,en-BW,en-CA,en-GB,en-HK,en-IE,en-IN,en-MT,en-NZ,en-PH,en-SG,en-US,en-ZW,es-AR,es-BO,es-CL,es-CO,es-CR,es-DO,es-EC,es-ES,es-GT,es-HN,es-MX,es-NI,es-PA,es-PE,es-PR,es-PY,es-SV,es-US,es-UY,es-VE,et-EE,fi-FI,fr-BE,fr-CA,fr-CH,fr-FR,fr-LU,gu-IN,he-IL,hi-IN,hr-HR,hu-HU,hy-AM,id-ID,is-IS,it-CH,it-IT,ja-JP,ka-GE,kk-KZ,kn-IN,ko-KR,ks-IN,ku-TR,ky-KG,lt-LT,lv-LV,mk-MK,ml-IN,mr-IN,ms-MY,mt-MT,nb-NO,nl-BE,nl-NL,nn-NO,or-IN,pa-IN,pl-PL,pt-BR,pt-PT,ro-RO,ru-RU,ru-UA,sa-IN,sk-SK,sl-SI,sq-AL,sr-ME,sr-RS,sv-SE,ta-IN,te-IN,th-TH,tr-TR,uk-UA,vi-VN,zh-CN,zh-HK,zh-SG,zh-TW,i-default
debug2: kex_parse_kexinit: 
af-ZA,ar-AE,ar-BH,ar-DZ,ar-EG,ar-IQ,ar-JO,ar-KW,ar-LY,ar-MA,ar-OM,ar-QA,ar-SA,ar-TN,ar-YE,as-IN,az-AZ,be-BY,bg-BG,bn-IN,bs-BA,ca-ES,cs-CZ,da-DK,de-AT,de-BE,de-CH,de-DE,de-LI,de-LU,el-CY,el-GR,en-AU,en-BW,en-CA,en-GB,en-HK,en-IE,en-IN,en-MT,en-NZ,en-PH,en-SG,en-US,en-ZW,es-AR,es-BO,es-CL,es-CO,es-CR,es-DO,es-EC,es-ES,es-GT,es-HN,es-MX,es-NI,es-PA,es-PE,es-PR,es-PY,es-SV,es-US,es-UY,es-VE,et-EE,fi-FI,fr-BE,fr-CA,fr-CH,fr-FR,fr-LU,gu-IN,he-IL,hi-IN,hr-HR,hu-HU,hy-AM,id-ID,is-IS,it-CH,it-IT,ja-JP,ka-GE,kk-KZ,kn-IN,ko-KR,ks-IN,ku-TR,ky-KG,lt-LT,lv-LV,mk-MK,ml-IN,mr-IN,ms-MY,mt-MT,nb-NO,nl-BE,nl-NL,nn-NO,or-IN,pa-IN,pl-PL,pt-BR,pt-PT,ro-RO,ru-RU,ru-UA,sa-IN,sk-SK,sl-SI,sq-AL,sr-ME,sr-RS,sv-SE,ta-IN,te-IN,th-TH,tr-TR,uk-UA,vi-VN,zh-CN,zh-HK,zh-SG,zh-TW,i-default
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: mac_setup: found hmac-md5
debug1: kex: server->client aes128-ctr hmac-md5 none
debug2: mac_setup: found hmac-md5
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug2: dh_gen_key: priv key bits set: 146/256
debug2: bits set: 488/1024
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: RSA 18:8f:32:19:1f:c3:1d:ee:8c:61:c8:11:a0:59:77:5f
debug3: load_hostkeys: loading entries for host "msp9022" from file "/Users/sherlock 
holmes/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /Users/sherlock 
holmes/.ssh/known_hosts:52
debug3: load_hostkeys: loaded 1 keys
debug3: load_hostkeys: loading entries for host "10.141.10.31" from file 
"/Users/sherlock holmes/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /Users/sherlock 
holmes/.ssh/known_hosts:52
debug3: load_hostkeys: loaded 1 keys
debug1: Host 'msp9022' is known and matches the RSA host key.
debug1: Found key in /Users/sherlock holmes/.ssh/known_hosts:52
debug2: bits set: 517/1024
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received

======> hangs here until I control C==================


Enjoy

Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S.  http://www.wisemo.com
Transformervej 29, 2730 Herlev, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]
  • openssl 6.2 hangs Marlon Davis
    • Re: OpenSSH 6.2 with OpenSSL 1.0.1e hang at SERVICE_ACCE... Jakob Bohm

Reply via email to