Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-06-03 Thread Nikola M
On 06/ 3/16 01:40 PM, Kim Bak wrote: On 03/06/16 12:28, Nikola M wrote: OI hipster has openssl, wouldn't it be better just to install in-OI package? Or upgrade OI hipster installation? This depends on your needs, in my case, upgrades of linux based production systems broke some ssh based aut

Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-06-03 Thread Kim Bak
On 03/06/16 12:28, Nikola M wrote: On 06/ 3/16 11:06 AM, Kim Bak wrote: Actually the problem goes much deeper than this, all the key exchange algorithms compiled with oi openssh, are considered insecure and should be avoided. However, it was surprisingly easy to fix. I downloaded the latest

Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-06-03 Thread Nikola M
On 06/ 3/16 11:06 AM, Kim Bak wrote: Actually the problem goes much deeper than this, all the key exchange algorithms compiled with oi openssh, are considered insecure and should be avoided. However, it was surprisingly easy to fix. I downloaded the latest openssl, compiled it, and just copie

Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-06-03 Thread Kim Bak
On 11/05/16 20:00, Bob Friesenhahn wrote: On Wed, 11 May 2016, Kim Bak wrote: I have troubles connecting ssh to servers with newer openssh version doe to no common kex algorithm. Is there a way to fix this without changing the remote server config? The only problem I remember encountering is

Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-05-11 Thread Predrag Zečević - Unix Systems Administrator
On 05/11/16 07:24 PM, Tim Mooney wrote: In regard to: [OpenIndiana-discuss] ssh to servers with recent openssh, Kim...: I have troubles connecting ssh to servers with newer openssh version doe to no common kex algorithm. Is there a way to fix this without changing the remote server config

Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-05-11 Thread Nikola M
On 05/12/16 12:02 AM, Jerry Kemp wrote: I did something similar. I built from source, after building from the latest OpenSSL source. To all: You can always check what builds and has landed on /hipster, with http://hipster.openindiana.org:8080/ OpenSSH 7.2p2 landed Apr 14th: https://github.com

Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-05-11 Thread Jerry Kemp
I did something similar. I built from source, after building from the latest OpenSSL source. I used aliases in my .cshrc file vs symlinks though. Jerry On 05/11/16 01:34 PM, russell wrote: Hi, I had a similar problem with the ssh provided with OI but I fixed this by downloading building my

Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-05-11 Thread Alexander Pyhalov
On 05/11/2016 21:34, russell wrote: Hi, I had a similar problem with the ssh provided with OI but I fixed this by downloading building my own OpenSSH. I created a OpenIndiana Feature see https://www.illumos.org/issues/6820 and received an update that OpenSSH should be available in the repository

[OpenIndiana-discuss] ssh to servers with recent openssh

2016-05-11 Thread russell
Hi, I had a similar problem with the ssh provided with OI but I fixed this by downloading building my own OpenSSH. I created a OpenIndiana Feature see https://www.illumos.org/issues/6820 and received an update that OpenSSH should be available in the repository soon. If you look a quicker so

Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-05-11 Thread Bob Friesenhahn
On Wed, 11 May 2016, Kim Bak wrote: I have troubles connecting ssh to servers with newer openssh version doe to no common kex algorithm. Is there a way to fix this without changing the remote server config? The only problem I remember encountering is that recent OpenSSH does not accept DSS (

Re: [OpenIndiana-discuss] ssh to servers with recent openssh

2016-05-11 Thread Tim Mooney
In regard to: [OpenIndiana-discuss] ssh to servers with recent openssh, Kim...: I have troubles connecting ssh to servers with newer openssh version doe to no common kex algorithm. Is there a way to fix this without changing the remote server config? I've seen the same, and the issu

[OpenIndiana-discuss] ssh to servers with recent openssh

2016-05-11 Thread Kim Bak
I have troubles connecting ssh to servers with newer openssh version doe to no common kex algorithm. Is there a way to fix this without changing the remote server config? uname -a SunOS openindiana 5.11 oi_151a9 i86pc i386 i86pc Solaris ssh -V Sun_SSH_1.5, SSH protocols 1.5/2.0, OpenSSL 0x00908