Skip to content

pytest-cloud uses unsupported arcfour cipher #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dasm opened this issue Apr 22, 2020 · 1 comment
Closed

pytest-cloud uses unsupported arcfour cipher #11

dasm opened this issue Apr 22, 2020 · 1 comment

Comments

@dasm
Copy link
Contributor

dasm commented Apr 22, 2020

With the release of OpenSSL 7.6, there was dropped support of arcfour https://www.openssh.com/txt/release-7.6

arcfour cipher is being used when negotiating connection with rsync https://github.com/pytest-dev/pytest-cloud/blob/master/pytest_cloud/rsync.py#L89

When unwrapped from parallel and executed from command line:

$ rsync -arHAXx --bwlimit=10000 --ignore-errors --numeric-ids --force --inplace --delete-excluded --delete -e "ssh -T -c arcfour -o Compression=no -x" . hostname:pytest_directory
Unable to negotiate with hostname port 22: no matching cipher found. Their offer: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc
rsync: connection unexpectedly closed (0 bytes received so far) [sender]
rsync error: unexplained error (code 255) at io.c(226) [sender=3.1.2]
$ echo $?
255
$ rsync -arHAXx --bwlimit=10000 --ignore-errors --numeric-ids --force --inplace --delete-excluded --delete -e "ssh -T -o Compression=no -x" . hostname:pytest_directory
$ echo $?
0

Both servers use the same version of OpenSSL

[source]$ ssh -Q key
ssh-ed25519
[email protected]
ssh-rsa
ssh-dss
ecdsa-sha2-nistp256
ecdsa-sha2-nistp384
ecdsa-sha2-nistp521
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[dsmigiel@sj-avl-r1-1 dcp-test-utils]$ ssh -V
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017

---

[destination]$ ssh -Q key
ssh-ed25519
[email protected]
ssh-rsa
ssh-dss
ecdsa-sha2-nistp256
ecdsa-sha2-nistp384
ecdsa-sha2-nistp521
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[destination]$ ssh -V
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017
@dasm
Copy link
Contributor Author

dasm commented Apr 23, 2020

Fix has been merged. Will be released with new version of pytest-cloud

@dasm dasm closed this as completed Apr 23, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant