[
https://issues.apache.org/jira/browse/SSHD-281?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pavel Babyak updated SSHD-281:
------------------------------
Description:
When connecting to openssh server with authPublicKey, caught exception
Unsupported command: SSH_MSG_KEXINIT
java.lang.IllegalStateException: Unsupported command: SSH_MSG_KEXINIT
at
org.apache.sshd.client.session.ClientSessionImpl.doHandleMessage(ClientSessionImpl.java:422)
at
org.apache.sshd.client.session.ClientSessionImpl.handleMessage(ClientSessionImpl.java:293)
at
org.apache.sshd.common.session.AbstractSession.decode(AbstractSession.java:587)
at
org.apache.sshd.common.session.AbstractSession.messageReceived(AbstractSession.java:253)
at
org.apache.sshd.common.AbstractSessionIoHandler.messageReceived(AbstractSessionIoHandler.java:54)
at
org.apache.sshd.common.io.nio2.Nio2Session$2.completed(Nio2Session.java:231)
at
org.apache.sshd.common.io.nio2.Nio2Session$2.completed(Nio2Session.java:217)
at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)
at sun.nio.ch.Invoker$2.run(Invoker.java:206)
at
sun.nio.ch.AsynchronousChannelGroupImpl$1.run(AsynchronousChannelGroupImpl.java:112)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:744)
--------------------
i did a trace connection and authentication process and this is what i found:
ClientSessionImpl.doHandleMessage command flow:
SSH_MSG_KEXINIT
SSH_MSG_KEXDH_REPLY_KEX_DH_GEX_GROUP
SSH_MSG_NEWKEYS
SSH_MSG_SERVICE_ACCEPT
SSH_MSG_USERAUTH_SUCCESS
SSH_MSG_KEXINIT <----------!!!! with session state 'Running'
---------------------
Test code (Groovy):
---------------------
import org.apache.sshd.ClientChannel
import org.apache.sshd.ClientSession
import org.apache.sshd.SshClient
import org.apache.sshd.common.util.NoCloseOutputStream
import org.bouncycastle.jce.provider.BouncyCastleProvider
import org.bouncycastle.openssl.PEMDecryptorProvider
import org.bouncycastle.openssl.PEMEncryptedKeyPair
import org.bouncycastle.openssl.PEMKeyPair
import org.bouncycastle.openssl.PEMParser
import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter
import org.bouncycastle.openssl.jcajce.JcePEMDecryptorProviderBuilder
import java.security.KeyPair
import java.security.Security
def getKeyPair = { String resource ->
InputStream rsaStream = Class.getResourceAsStream( resource )
assert rsaStream != null
try{
PEMParser parser = new PEMParser( new InputStreamReader(
rsaStream ) )
Object object = parser.readObject()
JcaPEMKeyConverter converter = new
JcaPEMKeyConverter().setProvider( 'BC' )
return converter.getKeyPair( (PEMKeyPair) object )
}finally{
rsaStream.close()
}
}
SshClient client = SshClient.setUpDefaultClient()
client.start()
try{
def connect = client.connect( DST_ADDR, DST_PORT )
connect.await()
assert connect.connected
def session = connect.session
assert session != null
int ret = ClientSession.WAIT_AUTH;
while( ( ret & ClientSession.WAIT_AUTH ) != 0 ){
session.authPublicKey( DST_LOGIN, getKeyPair(RSA_KEY) )
ret = session.waitFor( ( ClientSession.WAIT_AUTH |
ClientSession.CLOSED | ClientSession.AUTHED ) as int, 0 );
}
assert ( ret & ClientSession.CLOSED ) == 0
ClientChannel channel = session.createExecChannel( './test.sh' )
channel.in = new NoCloseInputStream( System.in )
channel.out = new NoCloseOutputStream( System.out )
channel.err = new NoCloseOutputStream( System.err )
channel.open()
channel.waitFor( ClientChannel.CLOSED, 0 )
session.close( true )
}finally{
client.stop();
}
---------------------
was:
When connecting to openssh server with authPublicKey, caught exception
Unsupported command: SSH_MSG_KEXINIT
java.lang.IllegalStateException: Unsupported command: SSH_MSG_KEXINIT
at
org.apache.sshd.client.session.ClientSessionImpl.doHandleMessage(ClientSessionImpl.java:422)
at
org.apache.sshd.client.session.ClientSessionImpl.handleMessage(ClientSessionImpl.java:293)
at
org.apache.sshd.common.session.AbstractSession.decode(AbstractSession.java:587)
at
org.apache.sshd.common.session.AbstractSession.messageReceived(AbstractSession.java:253)
at
org.apache.sshd.common.AbstractSessionIoHandler.messageReceived(AbstractSessionIoHandler.java:54)
at
org.apache.sshd.common.io.nio2.Nio2Session$2.completed(Nio2Session.java:231)
at
org.apache.sshd.common.io.nio2.Nio2Session$2.completed(Nio2Session.java:217)
at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)
at sun.nio.ch.Invoker$2.run(Invoker.java:206)
at
sun.nio.ch.AsynchronousChannelGroupImpl$1.run(AsynchronousChannelGroupImpl.java:112)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:744)
--------------------
i did a trace connection and authentication process and this is what i found:
ClientSessionImpl.doHandleMessage command flow:
SSH_MSG_KEXINIT
SSH_MSG_KEXDH_REPLY_KEX_DH_GEX_GROUP
SSH_MSG_NEWKEYS
SSH_MSG_SERVICE_ACCEPT
SSH_MSG_USERAUTH_SUCCESS
SSH_MSG_KEXINIT <----------!!!! with session state 'Running'
---------------------
Test code (Groovy):
---------------------
def getKeyPair = { String resource ->
InputStream rsaStream = Class.getResourceAsStream( resource )
assert rsaStream != null
try{
PEMParser parser = new PEMParser( new InputStreamReader(
rsaStream ) )
Object object = parser.readObject()
JcaPEMKeyConverter converter = new
JcaPEMKeyConverter().setProvider( 'BC' )
return converter.getKeyPair( (PEMKeyPair) object )
}finally{
rsaStream.close()
}
}
SshClient client = SshClient.setUpDefaultClient()
client.start()
try{
def connect = client.connect( DST_ADDR, DST_PORT )
connect.await()
assert connect.connected
def session = connect.session
assert session != null
int ret = ClientSession.WAIT_AUTH;
while( ( ret & ClientSession.WAIT_AUTH ) != 0 ){
session.authPublicKey( DST_LOGIN, getKeyPair(RSA_KEY) )
ret = session.waitFor( ( ClientSession.WAIT_AUTH |
ClientSession.CLOSED | ClientSession.AUTHED ) as int, 0 );
}
assert ( ret & ClientSession.CLOSED ) == 0
ClientChannel channel = session.createExecChannel( './test.sh' )
channel.in = new NoCloseInputStream( System.in )
channel.out = new NoCloseOutputStream( System.out )
channel.err = new NoCloseOutputStream( System.err )
channel.open()
channel.waitFor( ClientChannel.CLOSED, 0 )
session.close( true )
}finally{
client.stop();
}
---------------------
> Unsupported command: SSH_MSG_KEXINIT with openssh 6.4_p1
> --------------------------------------------------------
>
> Key: SSHD-281
> URL: https://issues.apache.org/jira/browse/SSHD-281
> Project: MINA SSHD
> Issue Type: Bug
> Affects Versions: 0.9.0
> Environment: host: Gentoo x86_64, OpenSSH_6.4p1-hpn14v2, OpenSSL
> 1.0.1f 6 Jan 2014
> client: Java(TM) SE Runtime Environment (build 1.7.0_51-b13)
> Reporter: Pavel Babyak
>
> When connecting to openssh server with authPublicKey, caught exception
> Unsupported command: SSH_MSG_KEXINIT
> java.lang.IllegalStateException: Unsupported command: SSH_MSG_KEXINIT
> at
> org.apache.sshd.client.session.ClientSessionImpl.doHandleMessage(ClientSessionImpl.java:422)
> at
> org.apache.sshd.client.session.ClientSessionImpl.handleMessage(ClientSessionImpl.java:293)
> at
> org.apache.sshd.common.session.AbstractSession.decode(AbstractSession.java:587)
> at
> org.apache.sshd.common.session.AbstractSession.messageReceived(AbstractSession.java:253)
> at
> org.apache.sshd.common.AbstractSessionIoHandler.messageReceived(AbstractSessionIoHandler.java:54)
> at
> org.apache.sshd.common.io.nio2.Nio2Session$2.completed(Nio2Session.java:231)
> at
> org.apache.sshd.common.io.nio2.Nio2Session$2.completed(Nio2Session.java:217)
> at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)
> at sun.nio.ch.Invoker$2.run(Invoker.java:206)
> at
> sun.nio.ch.AsynchronousChannelGroupImpl$1.run(AsynchronousChannelGroupImpl.java:112)
> at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
> at java.lang.Thread.run(Thread.java:744)
> --------------------
> i did a trace connection and authentication process and this is what i found:
> ClientSessionImpl.doHandleMessage command flow:
> SSH_MSG_KEXINIT
> SSH_MSG_KEXDH_REPLY_KEX_DH_GEX_GROUP
> SSH_MSG_NEWKEYS
> SSH_MSG_SERVICE_ACCEPT
> SSH_MSG_USERAUTH_SUCCESS
> SSH_MSG_KEXINIT <----------!!!! with session state 'Running'
> ---------------------
> Test code (Groovy):
> ---------------------
> import org.apache.sshd.ClientChannel
> import org.apache.sshd.ClientSession
> import org.apache.sshd.SshClient
> import org.apache.sshd.common.util.NoCloseOutputStream
> import org.bouncycastle.jce.provider.BouncyCastleProvider
> import org.bouncycastle.openssl.PEMDecryptorProvider
> import org.bouncycastle.openssl.PEMEncryptedKeyPair
> import org.bouncycastle.openssl.PEMKeyPair
> import org.bouncycastle.openssl.PEMParser
> import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter
> import org.bouncycastle.openssl.jcajce.JcePEMDecryptorProviderBuilder
> import java.security.KeyPair
> import java.security.Security
> def getKeyPair = { String resource ->
> InputStream rsaStream = Class.getResourceAsStream( resource )
> assert rsaStream != null
> try{
> PEMParser parser = new PEMParser( new InputStreamReader(
> rsaStream ) )
> Object object = parser.readObject()
> JcaPEMKeyConverter converter = new
> JcaPEMKeyConverter().setProvider( 'BC' )
> return converter.getKeyPair( (PEMKeyPair) object )
> }finally{
> rsaStream.close()
> }
> }
> SshClient client = SshClient.setUpDefaultClient()
> client.start()
> try{
> def connect = client.connect( DST_ADDR, DST_PORT )
> connect.await()
> assert connect.connected
> def session = connect.session
> assert session != null
> int ret = ClientSession.WAIT_AUTH;
> while( ( ret & ClientSession.WAIT_AUTH ) != 0 ){
> session.authPublicKey( DST_LOGIN, getKeyPair(RSA_KEY) )
> ret = session.waitFor( ( ClientSession.WAIT_AUTH |
> ClientSession.CLOSED | ClientSession.AUTHED ) as int, 0 );
> }
> assert ( ret & ClientSession.CLOSED ) == 0
> ClientChannel channel = session.createExecChannel( './test.sh' )
> channel.in = new NoCloseInputStream( System.in )
> channel.out = new NoCloseOutputStream( System.out )
> channel.err = new NoCloseOutputStream( System.err )
> channel.open()
> channel.waitFor( ClientChannel.CLOSED, 0 )
> session.close( true )
> }finally{
> client.stop();
> }
> ---------------------
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)