Re: [Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-29 Thread Craig Rodrigues
Hi, Well in Twisted checked out directly from GitHub, this seems to work: ssh -vv -oKexAlgorithms=ecdh-sha2-nistp256 -oMACs=hmac-sha2-512 user@localhost and these fail: ssh -vv -oKexAlgorithms=diffie-hellman-group1-sha1 -oMACs=hmac-sha2-512 user@localhost ssh -vv -oKexAlgorithms=diffie-hellman-

Re: [Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-29 Thread 陈健
hi, Yes, you are right. ssh -vv -oKexAlgorithms=diffie-hellman-group14-sha1 -oMACs=hmac-sha2-512 user@localhost against a Twisted ssh server, and i saw the problem. The reason is that twisted(16.6.0) is not supported the diffie-hellman-group14-sha1 and ecdh-sha512-nistp512 key exchange a

Re: [Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-28 Thread Craig Rodrigues
Hi, Is this what you are saying: Twisted Server + OpenSSH client == WORKS Twisted Server + Xshell client == WORKS OpenSSH Server + SecureCRT client == WORKS Twisted Server + SecureCRT client == FAIL ?? I don't have SecureCRT client, so don't know the solution to this problem. You might want to

Re: [Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-28 Thread 陈健
hi: Oh, I'm sorry, It is my server-side code has bugs with Twisted(16.6.0) Conch, that i have fixed it . But 'Message Authentication Code did not verify (packet #3)' error will occurs with the SecureCRT(8.0.0 or 7.3.4) client. If I connect OpenSSH_5.3p1 (or OpenSSH_6.6.1p1 ) sshd serve

Re: [Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-28 Thread Craig Rodrigues
Jianchen, Can you provide more details about the server you are writing? I cannot reproduce your problem with the latest Twisted code in trunk. Here is what I did: git clone https://github.com/twisted/twisted twisted-test cd twisted-test python setup.py develop cd docs/conch/examples mkdir ssh

Re: [Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-22 Thread Glyph Lefkowitz
Sorry to have misdiagnosed your problem. I am glad that Adi Roiban could help! Thank you very much for upgrading to the latest version - it helps us a lot for users to try recent versions of the software. (And when a fix is available, of course, you will have to upgrade to get it, so upgradin

Re: [Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-21 Thread Adi Roiban
On 21 December 2016 at 03:15, 陈健 wrote: > > hi: > > I write a SSH server with Twisted(15.5.0) Conch. But it don't support hmac-sha2-512 MAC algorithms > > . However I see this problem has been fixed in https://twistedmatrix.com/trac/ticket/8108 . I asked the question in http://stackoverf

Re: [Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-21 Thread 陈健
thank you for your reply!I have updated to the latest version of Twisted 16.6.0, but the problem remains. More detailed debugging information with -vvv in http://stackoverflow.com/questions/41254398/twisted-hmac-sha2-512-corrupted-mac-on-input-with-openssh . I really do not know how to do it

Re: [Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-21 Thread Glyph Lefkowitz
Hi Jianchen, As I said on stack overflow, you will need to upgrade to a more recent version of Twisted to get a version with that bug fixed. If it's still a problem in a current version, you'll need to provide more details, ideally a short SSCCE http://sscce.org explaining how to get a broken

[Twisted-Python] hmac-sha2-512 - Corrupted MAC on input with OpenSSH

2016-12-20 Thread 陈健
hi: | | I write a SSH server with Twisted(15.5.0) Conch. But it don't support hmac-sha2-512 MAC algorithms | . However I see this problem has been fixed in https://twistedmatrix.com/trac/ticket/8108 . I asked the question in http://stackoverflow.com/questions/41254398/twisted-hmac-sh