On Tue, 25 Mar 2008, Robert Lawhead wrote:

>I've twice tried to report what appears to me to be an sshd bug introduced
>in snv_b80, but have yet to find my report in the searchable bug db.  Are
>reports normally vetted before being accepted?  In any case, I'll post here
>what I tried to report there in hopes that some who might care will
>notice.

        hi Robert, it was filed today as:

        6679747 ssh disconnects with error if acsfour, 3des or blowfish is 
                used and RekeyLimit is >= 1G

>Using Sun sshd and either Sun_SSH client or OpenSSH client, try to transfer
>more than 1GB over a connection where "Ciphers" is one of arcfour, 3des-cbc
>or blowfish-cbc and RetryLimit is >= 1GB.

        1GB is the default rekey limit for 3des, blowfish and arcfour. The 
bug is triggered without using RekeyLimit at all.

        I'm investigating it.

>     arcfour: RekeyLimit=1024M Disconnecting: Protocol error: expected packet 
> type 31, got 20

        this means that in the middle of rekeying, another key re-exchange 
request came.

        thanks for the report, J.

-- 
Jan Pechanec

Reply via email to