Specifically these are the Algo/Ciphers/MACs which we are being restricted on the SFTP servers we download from, as of March 10th.
Right now we're dead in the water in respect of maintaining those automated curl downloads from our Solaris 10 boxes without a version of curl which uses libssh2 1.8.0 or later, so please if anyone can assist and let us know that something will be available in the v. short term that would be amazing. Key Exchange Algorithms * curve25519-sha256 * [email protected]<mailto:[email protected]> * diffie-hellman-group18-sha512 * diffie-hellman-group14-sha256 * diffie-hellman-group16-sha512 * diffie-hellman-group-exchange-sha256 * ecdh-sha2-nistp256 * ecdh-sha2-nistp384 * ecdh-sha2-nistp521 Ciphers * [email protected]<mailto:[email protected]> * [email protected]<mailto:[email protected]> * [email protected]<mailto:[email protected]> * aes256-ctr * aes192-ctr * aes128-ctr MACs * [email protected]<mailto:[email protected]> * [email protected]<mailto:[email protected]> * [email protected]<mailto:[email protected]> * hmac-sha2-512 * hmac-sha2-256 We have the latest packages available from the "unstable" release tree installed.... But libssh2/1.4.2 is the problem... If CURL is re-compiled with libssh2 1.8.0 the problem goes away immediately... but with 1.4.2 it just can't complete negotiation with the above MAC/Cipher/KeyEx restrictions. root@lonsett-p1 / # pkginfo | grep curl | grep CSW application CSWcurl curl - A command line tool and library for client-side URL transfers application CSWlibcurl4 libcurl4 - Library for client-side URL transfers, libcurl.so.4 application CSWlibcurl4-feature libcurl4_feature - Full-features library for client-side URL transfers superseding libcurl.so.4 root@lonsett-p1 / # curl -V curl 7.63.0 (sparc-sun-solaris2.10) libcurl/7.63.0 OpenSSL/1.0.2o zlib/1.2.8 brotli/1.0.2 c-ares/1.10.0 libidn2/2.0.4 libpsl/0.19.1 (+libidn2/2.0.4) libssh2/1.4.2 nghttp2/1.30.0 librtmp/2.3 Release-Date: 2018-12-12 Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp Features: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz brotli TLS-SRP HTTP2 UnixSockets HTTPS-proxy PSL Metalink Thanks Again, Mark From: users [mailto:[email protected]] On Behalf Of CMH via users Sent: 24 January 2019 14:01 To: [email protected] Cc: CMH Subject: Re: Curl compiled with libssh2 - for Sparc Solaris 10 I would very interested in this as well. Hello Open CSW Team, Please can you I beg one of you to compile a version of CURL for Solaris Sparc 10 using libssh2 1.8.0 or later. The current "unstable" repository version still uses libssh2 v1.4.2 and unfortunately we are being restricted by the MACs/Key Algos & Ciphers for SFTP connectivity next month and I've only managed to get it working on Fedora at home which has curl built with 1.8.0 libssh2 - so this is the key. Doesn't matter so much which version of Curl is compiled It just has to be compiled with 1.8.0 libssh2. If you could help me here I would be v. v. grateful. Thanks, Mark ________________________________ CONFIDENTIAL An electronic communication(s)/message(s), including its contents and attachments, if any, may contain privileged or confidential information, or may be otherwise protected by work product immunity or other legal rules. No confidentiality or privilege is waived by any erroneously transmitted communication. Accessing, copying or re-using of information by non-intended or non-authorized recipients is prohibited. If you are not the named recipient please notify the sender and immediately delete this communication. You may not disseminate, distribute, or forward this message or disclose its contents to anybody else. Copyright and any other intellectual property rights in its contents are the sole property of BGC Partners Inc. and its affiliates (collectively, "BGC," "we," or "us"). MAY CONTAIN ERRORS AND/OR VIRUSES Electronic communications/messages cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of such transmission. If verification is required, please request a hard-copy version. Although we routinely screen for viruses, recipients should check this communications/message and any attachments for viruses. We make no representation or warranty as to the absence of viruses in this e-mail or any attachments. Please note that, to ensure regulatory compliance and for the protection of our customers and business, we may monitor and read e-mails sent to and from server(s) used by us. INFORMATION PURPOSES ONLY The information contained in this electronic communication/message and any attachments is for information purposes, and should not be regarded as an offer to sell, or a solicitation of an offer to buy, any security in any jurisdiction where such an offer or solicitation would be in violation of any local laws. It does not constitute a recommendation or take into account the particular investment objectives, financial conditions, or needs of specific investors. Any prices or data contained herein are indicative and do not represent where the underlying instrument(s) may trade in the market at any given point in time, nor does such price(s) represent a determination of the underlying value of a particular instrument(s). This information may be changed at any time without notice or obligation to update. BGC accepts no liability for any loss (whether direct, indirect or consequential) that may arise from any use of the information contained herein or derived herefrom. Reliance may not be placed on trade confirmations issued other than by our Operations Department. RETENTION Please note that any electronic communications/messages conducted within or through BGC systems is subject to monitoring, review, retention, and external production. BGC Financial LP is a broker-dealer registered with the U.S. Securities and Exchange, a member of FINRA and a member of SIPC. BGC Financial LP is a member of the National Futures Association as a swap firm and a futures commission merchant. BGC Derivatives Markets LP is a swap execution facility registered with the Commodity Futures Trading Commission. BGC Brokers LP ("BGCB") is authorised and regulated by the Financial Conduct Authority ("FCA"). BGCB is a Limited Partnership formed under the laws of England (under Limited Partnership Act 1907 LP011453) and its VAT registration number is 577 406809. BGCB's registered office is at 12 Endeavour Square, London, E20 1JN. For any issues arising from this email please reply to the sender. BGCB appears on the FCA register under no 454814. The FCA register appears at www.fca.org.uk/register<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.fca.org.uk_register&d=DwMF-g&c=3v6EBbtpnn9A7jIZYjOw6KN7Pe17WoimzcinOq2Xztg&r=h1BgflT2I7NyYPzaLZCy6lFcAOsJtijy_yb0p-xhBKE&m=6UhvTGJT4oaYbplOYIiAEB1wmtNeCWlXduRCMKiydyY&s=HLBtG5Vs2yr3LkPoLujS2pwquiIjikdY9D3t2f0eAVA&e=>. The FCA is a financial services industry regulator in the United Kingdom and is located at 12 Endeavour Square, London, E20 1JN. An individuals' personal data under the GDPR - For further information about the way BGC entities (and relevant affiliates) within the European Economic Area (EEA) use your personal data please see our Third Party Privacy Notice at www.bgcpartners.com/notices/<http://www.bgcpartners.com/notices/> or at such other place as we may provide notice of from time to time. Marketing within the European Economic Area - BGC entities within the EEA may contact you about industry news, offers and information relating to their products and services which they think would be of interest to you. You can tell them you do not wish to receive such communications by contacting them at [email protected]<mailto:[email protected]>. For additional disclosures, please visit http://www.bgcpartners.com/disclaimers/ -- Systems Since 1948 Craig M. Houck ><> Tech Hub/Computer Center 3rd Floor 332 607 777 6827 We are only as good as the problems we solve! ---------------------------------------------------------------------- CONFIDENTIAL An electronic communication(s)/message(s), including its contents and attachments, if any, may contain privileged or confidential information, or may be otherwise protected by work product immunity or other legal rules. No confidentiality or privilege is waived by any erroneously transmitted communication. Accessing, copying or re-using of information by non-intended or non-authorized recipients is prohibited. If you are not the named recipient please notify the sender and immediately delete this communication. You may not disseminate, distribute, or forward this message or disclose its contents to anybody else. Copyright and any other intellectual property rights in its contents are the sole property of BGC Partners Inc. and its affiliates (collectively, “BGC,” “we,” or “us”). MAY CONTAIN ERRORS AND/OR VIRUSES Electronic communications/messages cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of such transmission. If verification is required, please request a hard-copy version. Although we routinely screen for viruses, recipients should check this communications/message and any attachments for viruses. We make no representation or warranty as to the absence of viruses in this e-mail or any attachments. Please note that, to ensure regulatory compliance and for the protection of our customers and business, we may monitor and read e-mails sent to and from server(s) used by us. INFORMATION PURPOSES ONLY The information contained in this electronic communication/message and any attachments is for information purposes, and should not be regarded as an offer to sell, or a solicitation of an offer to buy, any security in any jurisdiction where such an offer or solicitation would be in violation of any local laws. It does not constitute a recommendation or take into account the particular investment objectives, financial conditions, or needs of specific investors. Any prices or data contained herein are indicative and do not represent where the underlying instrument(s) may trade in the market at any given point in time, nor does such price(s) represent a determination of the underlying value of a particular instrument(s). This information may be changed at any time without notice or obligation to update. BGC accepts no liability for any loss (whether direct, indirect or consequential) that may arise from any use of the information contained herein or derived herefrom. Reliance may not be placed on trade confirmations issued other than by our Operations Department. RETENTION Please note that any electronic communications/messages conducted within or through BGC systems is subject to monitoring, review, retention, and external production. BGC Financial LP is a broker-dealer registered with the U.S. Securities and Exchange, a member of FINRA and a member of SIPC. BGC Financial LP is a member of the National Futures Association as a swap firm and a futures commission merchant. BGC Derivatives Markets LP is a swap execution facility registered with the Commodity Futures Trading Commission. BGC Brokers LP ("BGCB") is authorised and regulated by the Financial Conduct Authority ("FCA"). BGCB is a Limited Partnership formed under the laws of England (under Limited Partnership Act 1907 LP011453) and its VAT registration number is 577 406809. BGCB's registered office is at 12 Endeavour Square, London, E20 1JN. For any issues arising from this email please reply to the sender. BGCB appears on the FCA register under no 454814. The FCA register appears at www.fca.org.uk/register. The FCA is a financial services industry regulator in the United Kingdom and is located at 12 Endeavour Square, London, E20 1JN. An individuals’ personal data under the GDPR - For further information about the way BGC entities (and relevant affiliates) within the European Economic Area (EEA) use your personal data please see our Third Party Privacy Notice at www.bgcpartners.com/notices/ or at such other place as we may provide notice of from time to time. Marketing within the European Economic Area - BGC entities within the EEA may contact you about industry news, offers and information relating to their products and services which they think would be of interest to you. You can tell them you do not wish to receive such communications by contacting them at [email protected]. For additional disclosures, please visit http://www.bgcpartners.com/disclaimers/
