All Servers - SSH Access Restricted

[nobodyiscertain]

Originally Posted by kjvarga

Holy smokes, I've fixed the Capistrano problem! I feel like a god! I feel invincible! I feel...dizzy.

It turns out it's a problem with Ruby's Net::SSH and OpenSSL implementations, and possibly also with your OpenSSL C libraries :/

However, I've created a work around for Net::SSH which should cover any bugs in the underlying OpenSSL. The problem is with the ARCFOUR256 cipher and OpenSSL's RC4 cipher handling. OpenSSL thinks the key should be 16 bytes long so Net::SSH goes and creates one of 16 bytes. But then OpenSSH says that "the key is too short".

So I've forced Net::SSH to generate adequately long keys for ARCFOUR256 and ARCFOUR512 (I added that for kicks) ciphers and now OpenSSL doesn't complain.

You can read more about it and get an updated ruby Gem from http://github.com/kjvarga/net-ssh/tree/master.

Good Lord Man.

Thank you. Thank you. Thank you.

Grabbed the gem and it works like butter.

Thanks again.