[Qt-creator] OpenSSH 6.7 stopped supping algorithms using cbc out of the box, breaking remotelinux plugin / ssh library

Kandeler Christian Christian.Kandeler at theqtcompany.com
Wed Nov 5 16:13:17 CET 2014


Benjamin Zeller wrote:

> I just hit the problem that from the 6.7 release on OpenSSH does not
> support algorithms using cbc by default anymore, because they are
> considered unsafe.

> This is a problem because the ssh implementation
> used in QtCreator just supports: "3des-cbc" and "aes128-cbc".

Yeah, we simply support what the RFC says is required, under the assumption that this makes us compatible with all conforming servers. Apparently, OpenSSH is no longer one of them.

> Is there already any work going on in switching to a different cypher,
> like described in that rfc "http://www.ietf.org/rfc/rfc4344.txt" ?

Not yet. I'll look into this. You might want to create a JIRA task and assign it to me.


Christian


More information about the Qt-creator mailing list