[rancid] Issues with the latest version of OpenSSH and Rancid 3.2-2.

[Sebastien.Boulianne at cpu.ca]

I know that most devices use SSH2 but some are very old and I didn't find a recent firmware...
This switch is a HP ProCurve 2650.

ssh -2 -c aes256-cbc -x -l admin b.10.10.84.8
Protocol major versions differ: 2 vs. 1

Thanks.

Sébastien Boulianne

-----Message d'origine-----
De : Aaron Dudek [mailto:adudek16 at gmail.com] 
Envoyé : 28 décembre 2015 16:55
À : Sebastien Boulianne <Sebastien.Boulianne at cpu.ca>
Cc : ler762 at gmail.com; rancid-discuss at shrubbery.net
Objet : Re: [rancid] Issues with the latest version of OpenSSH and Rancid 3.2-2.

Don't use ssh version 1. Most modern devices have moved to version 2

spawn ssh -1
-1      Forces ssh to try protocol version 1 only.

Verify that the device supports version 2 via ssh -2 -c aes256-cbc -x -l admin b.10.10.84.8  from the command line.

You can add -v -v -v to to the command to see the debug logs.

Aaron




On Mon, Dec 28, 2015 at 4:30 PM,  <Sebastien.Boulianne at cpu.ca> wrote:
> WOW. Thanks for your very fast answer. It's appreciate.
> It works perfectly...
>
> AND for that, do you have a clue Lee ?
>
> bin/flogin b.10.10.84.8
> b.10.10.84.8
> spawn ssh -1 -c aes256-cbc -x -l admin b.10.10.84.8
> ssh1 is not supported
>
> Error: Couldn't login
>
> Sébastien Boulianne
>
> -----Message d'origine-----
> De : Lee [mailto:ler762 at gmail.com]
> Envoyé : 28 décembre 2015 15:55
> À : Sebastien Boulianne <Sebastien.Boulianne at cpu.ca> Cc : 
> rancid-discuss at shrubbery.net Objet : Re: [rancid] Issues with the 
> latest version of OpenSSH and Rancid 3.2-2.
>
> Hi,
>
> On 12/28/15, Sebastien.Boulianne at cpu.ca <Sebastien.Boulianne at cpu.ca> wrote:
>> Hi all,
>>
>> I upgraded my debian os to the latest version and I saw there is an 
>> issue with the latest version of OpenSSH.
>>
>> dpkg -l | grep openssh
>> ii  openssh-client                   1:7.1p1-5                    amd64
>>   secure shell (SSH) client, for secure access to remote machines
>> ii  openssh-server                   1:7.1p1-5                    amd64
>>   secure shell (SSH) server, for secure access from remote machines
>> ii  openssh-sftp-server              1:7.1p1-5                    amd64
>>   secure shell (SSH) sftp server module, for SFTP access from remote 
>> machine
>>
>> I got this error...
>>
>> bin/flogin tr.1
>> tr.1
>> spawn ssh -c 3des -x -l cpu_backup tr.1 Unknown cipher type '3des'
>>
>> Error: Couldn't login
>>
>> Anyone ever had this problem ?
>> How did fix it ?
>
> change cyphertype in ~/.cloginrc to aes256-cbc - ie.
>
> add method      * {ssh}
> # add cyphertype        * {3des}
> add cyphertype  * {aes256-cbc}
>
> Regards,
> Lee
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss