eclipse-cdt / cdt

Eclipse CDT™ C/C++ Development Tools
http://eclipse.org/cdt
Eclipse Public License 2.0
299 stars 197 forks source link

TM Terminal: ssh connection does not support modern kex and MAC #434

Open alef75 opened 1 year ago

alef75 commented 1 year ago

Describe the bug ssh and sftp connection (RSE) can't connect to modern ssh server (device) because old and broken ciphers,kex, and MAC are disabled by default on the server.

As I've reported years ago on bugzilla: https://bugs.eclipse.org/bugs/show_bug.cgi?id=560571

Eclipse uses an old ssh implementation that does not support newer and safer ssh parameters.

Eclipse uses jsch library for ssh, that unfortunately seem discontinued.

I've found an update fork of the jsch: https://github.com/mwiede/jsch

could this a viable solution for you ?

jonahgraham commented 1 year ago

Thanks @alef75 for bringing the issue across to GitHub - my comment on Bugzilla may be somewhat dated, but should provide a good starting point:

Thanks Alessandro - that confirms that in the wider Eclipse ecosystem we have an SSH java implementation that will work. It just needs someone to adapt it to o.e.remote + terminal. Fortunately all this code is now in CDT and being built regularly.

For someone taking this on, I think a new implementation modeled on the org.eclipse.remote.jsch.core and related ui/tests bundles is needed for the o.e.remote side and the class org.eclipse.tm.terminal.connector.ssh.connector.SshConnection is the terminal side.

In addition to Bug 520927, the jgit changes in Bug 541272 Bug 541273 Bug 541274 and Bug 541275 would probably be of interest to get those standard ssh client features supported too.