Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #198133

Re: a dh keys question?

From Richard Hector <richard@walnut.gen.nz>
Newsgroups linux.debian.user
Subject Re: a dh keys question?
Date 2018-08-01 04:00 +0200
Message-ID <whOAF-3SP-1@gated-at.bofh.it> (permalink)
References <whEUF-6oX-1@gated-at.bofh.it> <whFe2-6vV-15@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On 01/08/18 03:57, Dan Ritter wrote:
> On Tue, Jul 31, 2018 at 11:38:34AM -0400, Karen Lewellen wrote:
>> Hi everyone,
>> While the question seems simple, at least to me, the reason behind it is
>> complicated.  so I am hoping to focus on the question first.
>> During the dh key exchange process, where do the user dh key packets come
>> from software wise?
> 
> You generate a private/public key pair with ssh-keygen, and send
> the public key over to your destination in advance, so that they
> can recognize you.

Yes, but that's not the dh (Diffie-Hellman) key. Diffie-Hellman key
exchange is to generate a one-time session key that is discarded after
the session is finished.

>> I have a problem now where each place I try to visit using my ssh client,
>> and my sftp one, I am getting a dh key exchange failure.
>> using the -v command  is not shedding light on the issue.
>> I am using the same client now to reach another  service, but here  we use a
>> different port from port 22.
>> the error started on the 29th of June, and the company providing my dsl
>> service did claim to have a service issue on that day.
>> However they do not speak Linux let alone anything else Unusual.
>> Thoughts?
> 
> 
> Are you having problems SSHing to all servers that you try, or
> just to one in particular?
> 
> If it's just one, and that one uses a port other than 22, it's
> likely that your DSL company started filtering that port on the
> 29th. 

If it was a simple port filtering issue, then you'd get something like
'Connection Refused' or 'Destination unreachable' or 'Connection timed
out' - you wouldn't get as far as dh key exchange.

I'm not an expert in this, so might have some details wrong, but I think
the gist of it is right. Happy to be corrected.

Richard

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

a dh keys question? Karen Lewellen <klewellen@shellworld.net> - 2018-07-31 17:40 +0200
  Re: a dh keys question? Dan Ritter <dsr@randomstring.org> - 2018-07-31 18:00 +0200
    Re: a dh keys question? Karen Lewellen <klewellen@shellworld.net> - 2018-07-31 18:10 +0200
      Re: a dh keys question? Dan Ritter <dsr@randomstring.org> - 2018-07-31 18:40 +0200
        Re: a dh keys question? Karen Lewellen <klewellen@shellworld.net> - 2018-07-31 19:10 +0200
          Re: a dh keys question? Dan Ritter <dsr@randomstring.org> - 2018-07-31 21:40 +0200
            Re: a dh keys question? Karen Lewellen <klewellen@shellworld.net> - 2018-08-01 00:00 +0200
              Re: a dh keys question? Joe <joe@jretrading.com> - 2018-08-01 09:30 +0200
    Re: a dh keys question? Richard Hector <richard@walnut.gen.nz> - 2018-08-01 04:00 +0200
      Re: a dh keys question? Dan Purgert <dan@djph.net> - 2018-08-01 12:30 +0200
        Re: a dh keys question? Karen Lewellen <klewellen@shellworld.net> - 2018-08-01 21:00 +0200
          Re: a dh keys question? Dan Purgert <dan@djph.net> - 2018-08-01 21:30 +0200
            Re: a dh keys question? john doe <johndoe65534@mail.com> - 2018-08-01 22:00 +0200
            Re: a dh keys question? Dan Ritter <dsr@randomstring.org> - 2018-08-01 22:40 +0200
              Re: a dh keys question? Dan Purgert <dan@djph.net> - 2018-08-01 23:30 +0200
              Re: a dh keys question? Karen Lewellen <klewellen@shellworld.net> - 2018-08-02 00:00 +0200
                Re: a dh keys question? Dan Purgert <dan@djph.net> - 2018-08-02 02:40 +0200
                Re: a dh keys question? Karen Lewellen <klewellen@shellworld.net> - 2018-08-02 02:50 +0200
                Re: a dh keys question? Dan Purgert <dan@djph.net> - 2018-08-02 03:20 +0200
                Re: a dh keys question? Karen Lewellen <klewellen@shellworld.net> - 2018-08-02 03:30 +0200
                Re: a dh keys question? Dan Purgert <dan@djph.net> - 2018-08-02 12:30 +0200
                Re: a dh keys question? Peter Wiersig <peter@friesenpeter.de> - 2018-08-04 06:50 +0200

csiph-web