Comment 4 for bug 1951251

Revision history for this message
Gauthier Jolly (gjolly) wrote :

It's strange, are you sure you have the latest version of the package installed?
This is the logs I see from the client side:

debug1: kex: algorithm: diffie-hellman-group-exchange-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: aes128-ctr MAC: <email address hidden> compression: none
debug1: kex: client->server cipher: aes128-ctr MAC: <email address hidden> compression: none
debug3: send packet: type 34
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(2048<8192<8192) sent
Connection closed by 10.99.208.71 port 22

and on the server

Nov 18 13:13:58 bionic-fips sshd[3891]: debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received [preauth]
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: mm_request_send entering: type 0 [preauth]
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: mm_choose_dh: waiting for MONITOR_ANS_MODULI [preauth]
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: mm_request_receive_expect entering: type 1 [preauth]
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: mm_request_receive entering [preauth]
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: mm_request_receive entering
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: monitor_read: checking request 0
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: mm_answer_moduli: got parameters: 2048 8192 8192
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: mm_request_send entering: type 1
Nov 18 13:13:58 bionic-fips sshd[3891]: debug2: monitor_read: 0 used once, disabling now
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: mm_choose_dh: remaining 0 [preauth]
Nov 18 13:13:58 bionic-fips sshd[3891]: debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent [preauth]
Nov 18 13:13:58 bionic-fips sshd[3891]: debug3: send packet: type 31 [preauth]
Nov 18 13:13:58 bionic-fips sshd[3891]: ssh_dispatch_run_fatal: Connection from 10.99.208.1 port 58396: error in libcrypto [preauth]

The server receives the SSH2_MSG_KEX_DH_GEX_REQUEST and tries to send SSH2_MSG_KEX_DH_GEX_GROUP but something goes wrong apparently.

I will also attach the full logs for a complete session.