Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Add Sun_SSH support

See original GitHub issue

I assume this is the issue, but am using your script to test vulnerability fixes on some Solaris hosts and the ones with Openssh installed work correctly. On the hosts with sun_ssh I get:

ssh-audit.py solaristst2
Traceback (most recent call last):
  File "/usr/local/bin/ssh-audit.py", line 3016, in <module>
    audit(conf)
  File "/usr/local/bin/ssh-audit.py", line 3007, in audit
    SSH2.HostKeyTest.run(s, kex)
  File "/usr/local/bin/ssh-audit.py", line 625, in run
    SSH2.HostKeyTest.__test(s, server_kex, kex_str, kex_group, SSH2.HostKeyTest.HOST_KEY_TYPES)
  File "/usr/local/bin/ssh-audit.py", line 670, in __test
    host_key = kex_group.recv_reply(s, variable_key_len)
  File "/usr/local/bin/ssh-audit.py", line 2205, in recv_reply
    raise Exception('Expected MSG_KEXDH_REPLY (%d) or MSG_KEXDH_GEX_REPLY (%d), but got %d instead.' % (SSH.Protocol.MSG_KEXDH_REPLY, SSH.Protocol.MSG_KEXDH_GEX_REPLY, packet_type))
Exception: Expected MSG_KEXDH_REPLY (31) or MSG_KEXDH_GEX_REPLY (33), but got 4 instead.

Installed ssh is:

root@solaristst2:~# ssh -V
Sun_SSH_2.4, SSH protocols 1.5/2.0, OpenSSL 0x100020cf

System isn’t fully updated but is fairly recent:

SunOS solaristst2 5.11 11.3 sun4v sparc sun4v

A system that returned usable info is set up as:

root@solarisprd2:# uname -a
SunOS solarisprd2 5.11 11.4.2.3.0 sun4v sparc sun4v
root@solarisprd2:# ssh -V
OpenSSH_7.5p1, OpenSSL 1.0.2p  14 Aug 2018

Let me know if there’s any other data/info you need or how I could help.

Issue Analytics

State:
Created 4 years ago
Comments:8 (5 by maintainers)

Top GitHub Comments

1reaction

jtestacommented, Sep 20, 2019

Great! And you’re welcome!

Since I just made a stable release not too long ago, and because I’d like to make more improvements first, I’m not planning on releasing another stable version for at least a couple more weeks. But I always aim to keep the dev branch in good working order. So you can keep using that in the meantime.

Please let me know if anything else goes wrong!

0reactions

brantleyp1commented, Sep 20, 2019

Very educated! That got it!

brantley@workstation:ssh-audit-dev$ ./ssh-audit.py solaristst2
# general
(gen) banner: SSH-2.0-Sun_SSH_2.4
(gen) compatibility: OpenSSH 5.9-6.0, Dropbear SSH 2013.56+
(gen) compression: enabled (zlib@openssh.com, zlib)

Thank you so much!