search

michaellukashov / Far-NetBox

SFTP/SCP/FTP/FTPS/WebDAV/S3 client for Far Manager 3 (http://farmanager.com/)
https://forum.farmanager.com/viewtopic.php?t=6317
GNU General Public License v2.0
157 stars 52 forks source link

Failed connecting to OpenSSH 8.7 #331

Closed nfalliere closed 7 months ago

nfalliere commented 8 months ago

Hello - NetBox failed to connect to an Amazon Linux 3 EC2 instance running the default OpenSSH server (OpenSSH_8.7p1, OpenSSL 3.0.8 7 Feb 2023). Connecting using a keyfile. Do not have any problem connecting to the server using putty or winscp.

I have never encountered issued with similar setups using an older sshd version (OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017).

Anything I can tweak in the NetBox settings to be able to connect?

The connection log (debug level 2) can be seen below. I am using Far 3.0.6226 on Win x64.

. 2023-12-18 15:13:59.919 --------------------------------------------------------------------------
. 2023-12-18 15:13:59.919 NetBox Version 2.4.5 (Build 545) (OS 10.0.22631 - Windows 10 Pro)
. 2023-12-18 15:13:59.919 Configuration: NetBox 3\
. 2023-12-18 15:13:59.919 Working directory: xxx
. 2023-12-18 15:13:59.919 Process ID: 27796
. 2023-12-18 15:13:59.919 Time zone: xxx
. 2023-12-18 15:13:59.919 --------------------------------------------------------------------------
. 2023-12-18 15:13:59.919 Tunnel: No
. 2023-12-18 15:13:59.919 Transfer Protocol: SFTP (SCP)
. 2023-12-18 15:13:59.919 Code Page: 65001
. 2023-12-18 15:13:59.919 Ping type: Off, Ping interval: 30 sec; Timeout: 15 sec
. 2023-12-18 15:13:59.919 Disable Nagle: Yes
. 2023-12-18 15:13:59.919 Proxy: None
. 2023-12-18 15:13:59.919 Send buffer: 262144
. 2023-12-18 15:13:59.919 SSH protocol version: 2; Compression: No
. 2023-12-18 15:13:59.919 Bypass authentication: No
. 2023-12-18 15:13:59.919 Try agent: Yes; Agent forwarding: No; TIS/CryptoCard: No; KI: Yes; GSSAPI: No
. 2023-12-18 15:13:59.919 Ciphers: aes,chacha20,blowfish,3des,WARN,arcfour,des; Ssh2DES: No
. 2023-12-18 15:13:59.919 KEX: ecdh,dh-gex-sha1,dh-group14-sha1,rsa,WARN,dh-group1-sha1
. 2023-12-18 15:13:59.919 SSH Bugs: Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto
. 2023-12-18 15:13:59.919 Simple channel: Yes
. 2023-12-18 15:13:59.919 Return code variable: Autodetect; Lookup user groups: Auto
. 2023-12-18 15:13:59.919 Shell: default
. 2023-12-18 15:13:59.919 EOL: LF, UTF: Off
. 2023-12-18 15:13:59.919 Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes; Follow directory symlinks: Yes
. 2023-12-18 15:13:59.919 LS: ls -la, Ign LS warn: Yes, Scp1 Comp: No
. 2023-12-18 15:13:59.919 SFTP Bugs: Auto,Auto
. 2023-12-18 15:13:59.919 SFTP Server: default
. 2023-12-18 15:13:59.919 Local directory: default, Remote directory: home, Update: Yes, Cache: No
. 2023-12-18 15:13:59.919 Cache directory changes: No, Permanent: No
. 2023-12-18 15:13:59.919 Recycle bin: Delete to: No, Overwritten to: No, Bin path:
. 2023-12-18 15:13:59.919 DST mode: Unix
. 2023-12-18 15:13:59.919 --------------------------------------------------------------------------
. 2023-12-18 15:13:59.919 Looking up host xxx for SSH connection
. 2023-12-18 15:13:59.919 Connecting to xxx port 22
. 2023-12-18 15:13:59.950 Selecting events 63 for socket 1720
. 2023-12-18 15:13:59.950 We claim version: SSH-2.0-NetBox_FAR_release_2.4.5
. 2023-12-18 15:13:59.950 Waiting for the server to continue with the initialization
. 2023-12-18 15:13:59.950 Looking for incoming data
. 2023-12-18 15:13:59.950 Detected network event
. 2023-12-18 15:13:59.950 Enumerating network events for socket 1720
. 2023-12-18 15:13:59.950 Enumerated 18 network events making 18 cumulative events for socket 1720
. 2023-12-18 15:13:59.950 Handling network write event on socket 1720 with error 0
. 2023-12-18 15:13:59.950 Handling network connect event on socket 1720 with error 0
. 2023-12-18 15:14:00.013 Detected network event
. 2023-12-18 15:14:00.013 Enumerating network events for socket 1720
. 2023-12-18 15:14:00.013 Enumerated 1 network events making 1 cumulative events for socket 1720
. 2023-12-18 15:14:00.013 Handling network read event on socket 1720 with error 0
. 2023-12-18 15:14:00.013 Server version: SSH-2.0-OpenSSH_8.7
. 2023-12-18 15:14:00.013 Using SSH protocol version 2
. 2023-12-18 15:14:00.013 Have a known host key of type ssh-ed25519
. 2023-12-18 15:14:00.013 Waiting for the server to continue with the initialization
. 2023-12-18 15:14:00.013 Looking for incoming data
. 2023-12-18 15:14:00.076 Detected network event
. 2023-12-18 15:14:00.076 Enumerating network events for socket 1720
. 2023-12-18 15:14:00.076 Enumerated 1 network events making 1 cumulative events for socket 1720
. 2023-12-18 15:14:00.076 Handling network read event on socket 1720 with error 0
. 2023-12-18 15:14:00.076 Doing ECDH key exchange with curve Curve25519 and hash SHA-256
. 2023-12-18 15:14:00.076 Waiting for the server to continue with the initialization
. 2023-12-18 15:14:00.076 Looking for incoming data
. 2023-12-18 15:14:00.122 Detected network event
. 2023-12-18 15:14:00.122 Enumerating network events for socket 1720
. 2023-12-18 15:14:00.122 Enumerated 1 network events making 1 cumulative events for socket 1720
. 2023-12-18 15:14:00.122 Handling network read event on socket 1720 with error 0
. 2023-12-18 15:14:00.294 Server also has ecdsa-sha2-nistp256 host key, but we don't know it
. 2023-12-18 15:14:00.294 Host key fingerprint is:
. 2023-12-18 15:14:00.294 ssh-ed25519 256 9b:9f:0c:81:9f:9e:c4:ee:05:ef:b7:df:91:e0:13:9e
. 2023-12-18 15:14:00.294 Verifying host key ssh-ed25519 0x xxxxxx with fingerprint ssh-ed25519 256 xxx
. 2023-12-18 15:14:00.294 Host key matches cached key
. 2023-12-18 15:14:00.310 Selecting events 63 for socket 1720
. 2023-12-18 15:14:00.310 Initialised AES-256 SDCTR client->server encryption
. 2023-12-18 15:14:00.310 Initialised HMAC-SHA-256 client->server MAC algorithm
. 2023-12-18 15:14:00.310 Initialised AES-256 SDCTR server->client encryption
. 2023-12-18 15:14:00.310 Initialised HMAC-SHA-256 server->client MAC algorithm
. 2023-12-18 15:14:00.310 Waiting for the server to continue with the initialization
. 2023-12-18 15:14:00.310 Looking for incoming data
. 2023-12-18 15:14:00.357 Detected network event
. 2023-12-18 15:14:00.357 Enumerating network events for socket 1720
. 2023-12-18 15:14:00.357 Enumerated 1 network events making 1 cumulative events for socket 1720
. 2023-12-18 15:14:00.357 Handling network read event on socket 1720 with error 0
. 2023-12-18 15:14:00.357 Reading key file "C:\xxx\xxx.ppk
. 2023-12-18 15:14:00.357 Waiting for the server to continue with the initialization
. 2023-12-18 15:14:00.357 Looking for incoming data
. 2023-12-18 15:14:00.388 Detected network event
. 2023-12-18 15:14:00.388 Enumerating network events for socket 1720
. 2023-12-18 15:14:00.388 Enumerated 1 network events making 1 cumulative events for socket 1720
. 2023-12-18 15:14:00.388 Handling network read event on socket 1720 with error 0
. 2023-12-18 15:14:00.388 Server offered these authentication methods: publickey,gssapi-keyex,gssapi-with-mic
. 2023-12-18 15:14:00.388 Offered public key
. 2023-12-18 15:14:00.388 Waiting for the server to continue with the initialization
. 2023-12-18 15:14:00.388 Looking for incoming data
. 2023-12-18 15:14:00.435 Detected network event
. 2023-12-18 15:14:00.435 Enumerating network events for socket 1720
. 2023-12-18 15:14:00.435 Enumerated 1 network events making 1 cumulative events for socket 1720
. 2023-12-18 15:14:00.435 Handling network read event on socket 1720 with error 0
! 2023-12-18 15:14:00.435 Using username "xxx".Server refused our key
. 2023-12-18 15:14:00.435 Server refused our key
. 2023-12-18 15:14:00.435 Server offered these authentication methods: publickey,gssapi-keyex,gssapi-with-mic
. 2023-12-18 15:14:00.435 Selecting events 0 for socket 1720
. 2023-12-18 15:14:00.435 Disconnected: No supported authentication methods available (server sent: publickey,gssapi-keyex,gssapi-with-mic)
* 2023-12-18 15:14:00.435 
* 2023-12-18 15:14:00.435 Authentication log (see session log for details):
* 2023-12-18 15:14:00.435 Using username "xxx".Server refused our key
* 2023-12-18 15:14:00.435 
* 2023-12-18 15:14:00.435 Authentication failed.
pasha-zzz commented 8 months ago

Try new version - https://github.com/michaellukashov/Far-NetBox/releases/tag/v23.12.0.546-RC2

nfalliere commented 8 months ago

Thank you, the fix is working :)