Cisco ASA SCP broken

Trying to scp an image to asa and encountering an issue, the image is being uploaded successfully but netmiko throws an error, I’m guessing due to the new lfbff image doing additional checks. The lfbff and SPA indicates it has FirePower IPS included in the image and this image is digitally signed which makes it tamper resistant, below is an output of a successful file transfer and it’s output:

`…[removed]asa992-32-lfbff-k8.SPA…!!!

---

!!! Verifying file disk0:/asa992-32-lfbff-k8.SPA… Computed Hash SHA2: d9b83d16cd493a213def1ec238f8e699 c908a0b4383e86fd09228635fe545f5a 76f8098392a0618e54e5724aa09ceb97 da5d46679d75784d7e785e5659e73d64

Embedded Hash SHA2: d9b83d16cd493a213def1ec238f8e699 c908a0b4383e86fd09228635fe545f5a 76f8098392a0618e54e5724aa09ceb97 da5d46679d75784d7e785e5659e73d64

Digital signature successfully validated

Writing file disk0:/asa992-32-lfbff-k8.SPA…

111505136 bytes copied in 391.310 secs (285179 bytes/sec)`

Netmiko throws below error after successfully uploading the file:

Copying: asa992-32-lfbff-k8.SPA to: MUCAZ-ASA5516-01: 100%|##########| 112M/112M [48:15<00:00, 48.8kb/s] Traceback (most recent call last): File "asa.py", line 332, in <module> device.upgrade() File "asa.py", line 310, in upgrade self.copy_with_progress() File "asa.py", line 242, in copy_with_progress self.ft.scp_client.put(source, dest) File "/Library/Python/2.7/site-packages/scp.py", line 154, in put self._send_files(files) File "/Library/Python/2.7/site-packages/scp.py", line 250, in _send_files self._send_file(fl, name, mode, size) File "/Library/Python/2.7/site-packages/scp.py", line 276, in _send_file self._recv_confirm() File "/Library/Python/2.7/site-packages/scp.py", line 349, in _recv_confirm raise SCPException('Invalid response from server', msg) scp.SCPException: ('Invalid response from server', 'Computed Hash SHA2: d9b83d16cd493a213def1ec238f8e699\r\n c908a0b4383e86fd09228635fe545f5a\r\n 76f8098392a0618e54e5724aa09ceb97\r\n da5d46679d75784d7e785e5659e73d64\r\n \r\nEmbedded Hash SHA2: d9b83d16cd493a213def1ec238f8e699\r\n c908a0b4383e86fd09228635fe545f5a\r\n 76f8098392a0618e54e5724aa09ceb97\r\n da5d46679d75784d7e785e5659e73d64\r\n \r\n\r\nDigital signat')

I’m guessing the output is not expected in netmiko logic.

[eakikel]

I think this is the same as my bug dealing with Arista SCP.py times out too quickly on Secure Copy of large files

[carlmontanari]

@tonypnode that’d be great if you have access to a recent ASA/version! I think from what @edurguti posted and said in Slack its just having a bad day at checking the checksum once the files copy over, but I haven’t looked too closely. If you dig in and run into any issues feel free to bug us and we can try to help! (here or on Slack)