[jira] [Closed] (GUACAMOLE-1497) Guacamole 1.4.0 ssh client seems to have host key sig compatibility issues with my ssh server

["Mike Jumper (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/GUACAMOLE-1497?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mike Jumper closed GUACAMOLE-1497.
----------------------------------
    Resolution: Invalid

For more modern host key algorithms, you will need a more recent build of libssh2. It's not Guacamole itself that dictates whether a particular host key algorithm is supported, but rather the underlying SSH support library.

The latest release of libssh2 is 1.10.0.

> Guacamole 1.4.0 ssh client seems to have host key sig compatibility issues with my ssh server
> ---------------------------------------------------------------------------------------------
>
>                 Key: GUACAMOLE-1497
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1497
>             Project: Guacamole
>          Issue Type: Bug
>          Components: SSH
>    Affects Versions: 1.4.0
>            Reporter: Colin Gordon
>            Priority: Major
>         Attachments: pcap.pcap
>
>
> Gaucamole fails to establish a connection to my piKVM via SSH.
> Guacd reports "SSH handshake failed" in the logs.
> I took a pcap and noticed that the guacamole client seems to only support two server host key algorithms: ssh-rsa and ssh-dss. The ssh server doesn't support either of those two. I infer that this is the cause of the ssh handshake failure. 
> From googling around, openssh no longer supports ssh-rsa so it seems like a deprecation issue. My suggested fix would be for the guac ssh client to support additional server host key algorithms.
> PCAP attached. The client (guac) is 100.76.173.55 and the server is 100.97.86.50.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)