softwareag / ganymed-ssh-2 Goto Github PK

Good day!
We use ganymed-ssh-2 for Netconf protocol. In some conditions KexManager.getOrWaitForConnectionInfo fall in endless wait (3 days for example).
Why don't you use wait with sshtimeout at KexManager?

I downloaded the source code from https://github.com/SoftwareAG/ganymed-ssh-2/archive/refs/tags/ganymed-ssh2-263.zip and tried to compile. I am getting following error. Please help me in resolving.

[ERROR] E:\workspace-Akka-1\ganymed-ssh-2-ganymed-ssh2-263\src\main\java\ch\ethz\ssh2\Connection.java:34: error: self-closing element not allowed
[ERROR] *

[ERROR] ^
[ERROR] E:\workspace-Akka-1\ganymed-ssh-2-ganymed-ssh2-263\src\main\java\ch\ethz\ssh2\HTTPProxyData.java:11: error: reference not found
[ERROR] * @see Connection#setProxyData(ProxyData)
[ERROR] ^

I am using ganymed-ssh-2 to establish SSH2 connection. I have GIT cloned it for code browsing specifying the HEAD tag and debugging (GIT location is E:\git-clone\ganymed-ssh-2).

When I use ganymed-ssh2 ver 262, I am getting an error "Key exchange was not finished, connection is closed". I have added the following dependency in my Maven pom.xml. Why is this error reported?
<dependency> <groupId>ch.ethz.ganymed</groupId> <artifactId>ganymed-ssh2</artifactId> <version>262</version> </dependency>

In order to debug, when I specified E:\git-clone\ganymed-ssh-2\target\classes in the classpath and run it as a Java application, the issue is not seen. Note that

Hi,
I'm facing this issue when i'm trying to connect to the host(Isilon version 9.4) was working fine with previous versions.
below attached from the server
KEX algorithms: curve25519-sha256,[email protected] ,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c.

Auth.log says "Unable to negotiate with x.x.x.x port 53564: no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth]"

As ssh-rsa and ssh-dss have vulnerabilities. Are there any plans to include rsa-sha2-512, rsa-sha2-256 them in ganymed-ssh2 ?

Or any help in how to include them ?

Hi,

Could you please update the "ganymed-ssh2" maven version as 263 in mvnrepository.
https://mvnrepository.com/artifact/ch.ethz.ganymed/ganymed-ssh2/

Regards,
Vinodhini

I want to upload file from windows to Unix. File created, but it's empty.

This code creates empty 'C:\Users\myuser\test\mydir\my_test_file.sql' file in /tmp directory insted of my_test_file.sql.
Tried to move "my_test_file.sql" to working dir to use file without full path, but it creates empty "my_test_file.sql" file.
There is no any error message.

Tried for both 262 and 263 versions.

Note: At the end need to use 263 version to include key-exchange algorithms related changes.

public void test() {
    String hostName = "my-IP";
    String userName = "user";
    String password = "pass";

    try {

        Connection conn = getSSHConnection(hostName, userName, password);

        String myFile = "C:\\Users\\myuser\\test\\mydir\\my_test_file.sql";
       
        SCPClient client = conn.createSCPClient();

        client.put(myFile, new File(myFile).length(), "/tmp", "0777");
    } catch (Exception e) {
        System.out.println("ERROR: " + e.getMessage());
    }
}

Connection getSSHConnection(String hostName, String userName, final String password) throws IOException, Exception {
    Connection conn = new Connection(hostName);
    conn.connect();

    String[] strArray;
    try {
        strArray = conn.getRemainingAuthMethods(userName);
    } catch (IOException var7) {
        throw new Exception("Getting Remaining AuthMethods failed with IOException: " + var7.getMessage());
    }

    if (strArray == null) {
        System.out.println("conn.getRemainingAuthMethods returns null");

        try {
            conn.authenticateWithPassword(userName, password);
        } catch (Exception var8) {
            String warning = "";
            if (password.equals("")) {
                warning = warning + " : Warning: Implementation of this package does not allow empty passwords for authentication";
            }

            throw new Exception("Authentication with password failed: " + var8.getMessage() + warning);
        }
    } else {
        List<String> authMethods = Arrays.asList(strArray);
        if (authMethods.contains("password")) {
            if (!conn.authenticateWithPassword(userName, password)) {
                throw new Exception("Password based authentication failed.");
            }
        } else {
            if (!authMethods.contains("keyboard-interactive")) {
                throw new Exception("SSH Server doesnt support password or keyboard-interactive logins");
            }

            InteractiveCallback cb = new InteractiveCallback() {
                public String[] replyToChallenge(String name, String instruction, int numPrompts, String[] prompt, boolean[] echo) throws Exception {
                    String[] response = new String[numPrompts];

                    for (int i = 0; i < response.length; ++i) {
                        response[i] = password;
                    }

                    return response;
                }
            };
            if (!conn.authenticateWithKeyboardInteractive(userName, cb)) {
                throw new Exception("Keyboard-interactive based authentication failed.");
            }
        }
    }
    return conn;
}

hello, we met a problem,we upgrade our openssh server to 8.8p1,then display this error message

java.io.IOException: There was a problem while connecting to 192.168.110.171:22
ch.ethz.ssh2.Connection.connect(Connection.java:699)
com.tianque.datagroup.dataplatform.odps.util.LinuxSshUtil.callShellCommand(LinuxSshUtil.java:70)
com.tianque.datagroup.dataplatform.odps.taskflowengine.work.impl.ShellWorkNodeAction.execute(ShellWorkNodeAction.java:81)
com.tianque.datagroup.dataplatform.odps.taskflowengine.work.impl.AbstractWorkNodeAction.doAction(AbstractWorkNodeAction.java:86)
com.tianque.datagroup.dataplatform.odps.taskflowengine.service.impl.CodeWorkNodeServiceImpl.lambda$executeDebugAndGenerateLog$54(CodeWorkNodeServiceImpl.java:182)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)

    at com.tianque.datagroup.dataplatform.odps.util.LinuxSshUtil.callShellCommand(LinuxSshUtil.java:93)
    at com.tianque.datagroup.dataplatform.odps.taskflowengine.work.impl.ShellWorkNodeAction.execute(ShellWorkNodeAction.java:81)
    ... 5 more

Caused by: java.io.IOException: There was a problem while connecting to 192.168.110.171:22
at ch.ethz.ssh2.Connection.connect(Connection.java:699)
at com.tianque.datagroup.dataplatform.odps.util.LinuxSshUtil.callShellCommand(LinuxSshUtil.java:70)
... 6 more
Caused by: java.io.IOException: Key exchange was not finished, connection is closed.
at ch.ethz.ssh2.transport.KexManager.getOrWaitForConnectionInfo(KexManager.java:91)
at ch.ethz.ssh2.transport.TransportManager.getConnectionInfo(TransportManager.java:229)
at ch.ethz.ssh2.Connection.connect(Connection.java:655)
... 7 more
Caused by: java.io.IOException: Cannot negotiate, proposals do not match.
at ch.ethz.ssh2.transport.KexManager.handleMessage(KexManager.java:412)
at ch.ethz.ssh2.transport.TransportManager.receiveLoop(TransportManager.java:753)
at ch.ethz.ssh2.transport.TransportManager$1.run(TransportManager.java:468)
... 1 more

no matching host key type found. Their offer: ssh-rsa
i checked the openssh website (https://www.openssh.com/legacy.html)
and change the config file,still can not work. hope check and fix.

many thanks.