Bug#1069768: dropbear-initramfs becomes unresponsive after several connection attempts

2024-04-24 Thread Guilhem Moulin
Control: tag -1 - moreinfo unreproducible On Wed, 24 Apr 2024 at 17:10:57 +0200, Guilhem Moulin wrote: >> It should be trivially reproducible by running `ssh -o ServerAliveCountMax=3 >> -o ServerAliveInterval=1 root@yourdropbearserver`. The client should then >> disconnect after 3 seconds. > >

Bug#1069768: dropbear-initramfs becomes unresponsive after several connection attempts

2024-04-24 Thread Lee Garrett
On 24.04.24 17:10, Guilhem Moulin wrote: On Wed, 24 Apr 2024 at 16:32:09 +0200, Lee Garrett wrote: Although the dropbear man page is not explicit, I'm assuming it refers to TCP keepalive. I think this assumption is incorrect:

Bug#1069768: dropbear-initramfs becomes unresponsive after several connection attempts

2024-04-24 Thread Guilhem Moulin
On Wed, 24 Apr 2024 at 16:32:09 +0200, Lee Garrett wrote: > Although the dropbear man page is not explicit, I'm assuming it refers to > TCP keepalive. I think this assumption is incorrect: https://sources.debian.org/src/dropbear/2024.84-1/src/common-session.c/#L497 > It should be trivially

Bug#1069768: dropbear-initramfs becomes unresponsive after several connection attempts

2024-04-24 Thread Lee Garrett
On 24.04.24 16:15, Guilhem Moulin wrote: Control: tag -1 unreproducible moreinfo Hi, On Wed, 24 Apr 2024 at 14:42:43 +0200, Lee Garrett wrote: After some debugging, it turns out that ServerAliveInterval != 0 will cause the ssh client to reset the connection, which dropbear will count as

Bug#1069768: dropbear-initramfs becomes unresponsive after several connection attempts

2024-04-24 Thread Guilhem Moulin
Control: tag -1 unreproducible moreinfo Hi, On Wed, 24 Apr 2024 at 14:42:43 +0200, Lee Garrett wrote: > After some debugging, it turns out that ServerAliveInterval != 0 will cause > the > ssh client to reset the connection, which dropbear will count as unlock > attempt, > and after three tries

Bug#1069768: dropbear-initramfs becomes unresponsive after several connection attempts

2024-04-24 Thread Lee Garrett
Package: dropbear-initramfs Version: 2022.83-1+deb12u1 Severity: normal X-Debbugs-Cc: deb...@rocketjump.eu Hi, I have a remote server running bookworm that is configured to use dropbear-initramfs and cryptsetup-initramfs to unlock the LUKS container. The way I unlock it is shown below: $ until