You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "Carolyn Suzanne Bornn (JIRA)" <ji...@apache.org> on 2018/09/24 00:45:00 UTC

[jira] [Updated] (SSHD-813) mina sshd 1.6.0, using as ssh server, run for about an hour,found that ssh client throws KeyExchange signature verification failed.

     [ https://issues.apache.org/jira/browse/SSHD-813?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carolyn Suzanne Bornn updated SSHD-813:
---------------------------------------
    Attachment: Builtin Object Token_Taiwan GRCA

> mina sshd 1.6.0, using as ssh server, run for about an hour,found that ssh client throws  KeyExchange signature verification failed.
> ------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SSHD-813
>                 URL: https://issues.apache.org/jira/browse/SSHD-813
>             Project: MINA SSHD
>          Issue Type: Bug
>    Affects Versions: 1.6.0
>         Environment: linux,jdk1.8
>            Reporter: cheng
>            Assignee: Goldstein Lyor
>            Priority: Major
>             Fix For: 2.0.0
>
>         Attachments: Builtin Object Token_Taiwan GRCA
>
>
> When our application call method 'writePacket' to send this message to the client, found that ssh client throws KeyExchange signature verification failed.
> We found that calling method 'writePacket' will check if a re-keying is required and modify the reference of the array 'i_s' in the method 'setKexSeed',
> and our application may reveive the message 'SSH_MSG_KEXINIT'at the same time; when received the message 'SSH_MSG_KEXINIT', the class 'DHGServer' will be
> initialized using the array 'i_s'. But in our multithreaded testing, the value of the array 'i_s' in the class 'DHGServer' not up to date, which results in 
> inconsistent digital signature between the client and the server, so ssh client throws KeyExchange signature verification failed.
> I am wondering is this a multithreaded problem that is ignored. Please help me, thank you.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)