After a recent Ubuntu upgrade on my home machine, ssh attempts to it from the VirtualBox instance at work\u00a0stopped working. \u00a0 Here’s what ssh spewed back at me:<\/p>\n
no matching cipher found: client blowfish-cbc,arcfour server aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com<\/span><\/pre>\n <\/p>\n
Impatient, I just logged in from another machine. \u00a0The VM runs CentOS 5.10 so that its environment is comparable with what [used to be] present on the majority of our production servers. \u00a0 I’m an anti-RedHat bigot in the first place, and didn’t want to hunt down repos and upgrade my ssh.<\/p>\n
That was not necessary. \u00a0The problem was a “Ciphers” line I’d added to my ~\/.ssh\/config<\/em>, intended to prefer\u00a0 (“Googallegedly”) faster encryption methods. \u00a0 Adding all but those that resemble\u00a0email addresses seems to have fixed the issue. \u00a0\u00a0My “Ciphers” line now looks like this:<\/p>\n\u00a0 Host *<\/span>\r\n\u00a0 Ciphers blowfish-cbc,arcfour,aes128-ctr,aes192-ctr,aes256-ctr<\/span><\/pre>\n <\/p>\n
The ciphers may be defined in your system \/etc\/ssh\/ssh_config<\/em>. \u00a0Check around. \u00a0If\u00a0you can’t find it anywhere, try this:<\/p>\n\u00a0 sudo find \u00a0~\/.[a-z]* \/etc -path '*ssh*' -type f | sudo xargs fgrep Cipher<\/span><\/pre>\n <\/p>\n
Anyway, that was my fix. \u00a0\u00a0Right on in, easy-peasy lemon-squeezy.<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
After a recent Ubuntu upgrade on my home machine, ssh attempts to it from the VirtualBox instance at work\u00a0stopped working. \u00a0 Here’s what ssh spewed back at me: no matching cipher found: client blowfish-cbc,arcfour server aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com Impatient, I just logged in from another machine. \u00a0The VM runs CentOS 5.10 so that its environment is […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15],"tags":[26,67,25],"class_list":["post-560","post","type-post","status-publish","format-standard","hentry","category-hacking","tag-linux","tag-ssh","tag-sysadmin"],"_links":{"self":[{"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/posts\/560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/comments?post=560"}],"version-history":[{"count":3,"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/posts\/560\/revisions"}],"predecessor-version":[{"id":563,"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/posts\/560\/revisions\/563"}],"wp:attachment":[{"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/media?parent=560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/categories?post=560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fazigu.org\/blog\/wp-json\/wp\/v2\/tags?post=560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}