|
Posted by smallpond on May 9, 2008, 11:59 am
Please log in for more thread options
lovecreatesbea...@gmail.com wrote:
>
>>lovecreatesbea...@gmail.com wrote:
>>
>>>Hi,
>>
>>>I'm getting "Selected cipher type not supported by server" error on
>>>this line
>>
>>> $cnn = Net::SSH::Perl->new($host);
>>
>>Are you tring to connect to an SSH-1 or SSH-2 host?
>>If not sure, report the error(s) you get from trying each.
>
>
> Hi, Thank you.
>
> I tried the following ciphers one by one and got the same error
> message: "Selected cipher type not supported by server Options ".
>
>
>>>The error occurs even when I specify all IDEA, DES, DES3, Blowfish,
>>>arcfour, blowfish-cbc, and 3des-cbc like this:
>
>
>>> $cnn = Net::SSH::Perl->new($host, cipher => "IDEA");
>
>
>
> I manually ssh login the host and check the version. Is OpenSSH_4.6p1
> an SSH1 or SSH2 implementation, or both?
>
> root@bx1200:/etc/ssh# ssh -V
> OpenSSH_4.6p1, OpenSSL 0.9.8d 28 Sep 2006
> root@bx1200:/etc/ssh#
>
> root user ssh login is enabled defaultly, right? So I don't su root,
> do I?
>
I normally disable root login, but its optional.
> The Cipher lines in ssh_config file are commented out as following.
> How can know its cipher settings?
>
> root@bx1200:/etc/ssh# grep Cipher ssh_config
> # Cipher 3des
> # Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-
> cbc,arcfour,aes192-cbc,aes256-cbc
> root@bx1200:/etc/ssh#
>
> [ Do I need to in my perl script issue "ssh -c <cipher_spec>" command
> before ...? Absolutely not! I am not ssh-connected with the host. What
> can I do? ]
The rule when you don't know what's wrong is to step back to the
earliest place that you get an error.
Most ssh supports protocol type 1 and 2 these days, but to narrow
down your problem, try each each individually. Let the cipher type
be the default for that protocol. So try each of these separately:
$cnn = Net::SSH::Perl->new($host, -protocol => '1');
$cnn = Net::SSH::Perl->new($host, -protocol => '2');
You may get a different error from each one which would be a clue
for what's wrong.
--S
** Posted from http://www.teranews.com **
|