Bug#908113: openssh-client: When I try to connect to a remote SSH server I got broken-pipe error

2018-09-06 Thread Colin Watson
On Thu, Sep 06, 2018 at 02:36:55PM +0200, Tanguy BONNEAU wrote:
> Yep I'm running my debian in VMWare env with classic NAT configuration.
> Option -o 'IPQoS lowdelay throughput' you specified seems to work, i was
> able to connect successfully.

OK.  Although it was prompted by a change in OpenSSH, this is really a
VMware bug; I'd encourage you to report it to them.

-- 
Colin Watson   [cjwat...@debian.org]



Bug#908113: openssh-client: When I try to connect to a remote SSH server I got broken-pipe error

2018-09-06 Thread Colin Watson
Control: found -1 1:7.8p1-1
Control: notfound -1 1:7.4p1-10+deb9u4

On Thu, Sep 06, 2018 at 11:18:49AM +0200, Tanguy Bonneau wrote:
> I want to report an issue that appears after installation of latest version of
> openssh-client (1:7.8p1-1)
> When I try to push source code on our enterprise gitlab repository I'm
> encountering a broken pipe error.

That sounds like these threads on the upstream mailing list:

  https://lists.mindrot.org/pipermail/openssh-unix-dev/2018-August/037145.html
  https://lists.mindrot.org/pipermail/openssh-unix-dev/2018-August/037156.html

Are you using VMware, or is there anything else interesting about your
network setup?

Does passing -o 'IPQoS lowdelay throughput' to ssh help?

-- 
Colin Watson   [cjwat...@debian.org]



Processed: Re: Bug#908113: openssh-client: When I try to connect to a remote SSH server I got broken-pipe error

2018-09-06 Thread Debian Bug Tracking System
Processing control commands:

> found -1 1:7.8p1-1
Bug #908113 [openssh-client] openssh-client: When I try to connect to a remote 
SSH server I got broken-pipe error
Marked as found in versions openssh/1:7.8p1-1.
> notfound -1 1:7.4p1-10+deb9u4
Bug #908113 [openssh-client] openssh-client: When I try to connect to a remote 
SSH server I got broken-pipe error
No longer marked as found in versions openssh/1:7.4p1-10+deb9u4.

-- 
908113: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908113
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#908113: openssh-client: When I try to connect to a remote SSH server I got broken-pipe error

2018-09-06 Thread Tanguy Bonneau
Package: openssh-client
Version: 1:7.4p1-10+deb9u4
Severity: important
Tags: upstream

Dear Maintainer,

I want to report an issue that appears after installation of latest version of
openssh-client (1:7.8p1-1)
When I try to push source code on our enterprise gitlab repository I'm
encountering a broken pipe error.

I tryed to investigate more deeply and when I try to connect to my home server
I got the same issue. You can see log of ssh below.
When I try to connect to localhost it works perfectly.
My best clue is if there is a lot of chars retrieved after connection, the
connection hangs. On my home server I have linuxlogo which dumps an ascii art
logo.

I also tryed to stop ssh server and autossh but it changed nothing.

Reverting back to old openssh-client solved the problem (1:7.4p1-10+deb9u4)

Thank you


> ssh - XXX@tangserver
OpenSSH_7.8p1 Debian-1, OpenSSL 1.0.2o  27 Mar 2018
debug1: Reading configuration data /root/.ssh/config
debug1: /root/.ssh/config line 1: Applying options for tangserver
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug2: resolving "tangserver" port 22
debug2: ssh_connect_direct
debug1: Connecting to tangserver [XX.XX.XX.XX] port 22.
debug1: Connection established.
debug1: identity file /root/.ssh/id_rsa.home@tangserver type -1
debug1: identity file /root/.ssh/id_rsa.home@tangserver-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.8p1 Debian-1
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.8p1
Debian-1
debug1: match: OpenSSH_7.8p1 Debian-1 pat OpenSSH* compat 0x0400
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to tangserver:22 as ''
debug3: hostkeys_foreach: reading file "/root/.ssh/known_hosts"
debug3: record_hostkey: found key type RSA in file /root/.ssh/known_hosts:1
debug3: load_hostkeys: loaded 1 keys from tangserver
debug3: order_hostkeyalgs: prefer hostkeyalgs: rsa-
sha2-512-cert-...@openssh.com,rsa-sha2-256-cert-...@openssh.com,ssh-rsa-
cert-...@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha...@libssh.org,ecdh-
sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-
exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-
group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-
info-c
debug2: host key algorithms: rsa-sha2-512-cert-...@openssh.com,rsa-
sha2-256-cert-...@openssh.com,ssh-rsa-cert-...@openssh.com,rsa-sha2-512,rsa-
sha2-256,ssh-rsa,ecdsa-sha2-nistp256-cert-...@openssh.com,ecdsa-
sha2-nistp384-cert-...@openssh.com,ecdsa-
sha2-nistp521-cert-...@openssh.com,ssh-ed25519-cert-...@openssh.com,ecdsa-
sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519
debug2: ciphers ctos:
chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
debug2: ciphers stoc:
chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
debug2: MACs ctos: umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-
sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-
sha1-...@openssh.com,umac...@openssh.com,umac-...@openssh.com,hmac-
sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-
sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-
sha1-...@openssh.com,umac...@openssh.com,umac-...@openssh.com,hmac-
sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,z...@openssh.com,zlib
debug2: compression stoc: none,z...@openssh.com,zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha...@libssh.org,ecdh-
sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-
exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-
group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos:
chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
debug2: ciphers stoc:
chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
debug2: MACs ctos: umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-
sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-
sha1-...@openssh.com,umac...@openssh.com,umac-...@openssh.com,hmac-
sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-
sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-
sha1-...@openssh.com,umac...@openssh.com,umac-...@openssh.com,hmac-
sha2-256,hmac-sha2-512,hmac-sha1
d