IETF Logo Mail Archive

Re: [Curdle] RFC 8308 on Extension Negotiation in the Secure Shell (SSH) Protocol

Peter Gutmann <pgut001@cs.auckland.ac.nz> Wed, 21 March 2018 05:49 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: curdle@ietfa.amsl.com
Delivered-To: curdle@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2E2D12D941 for <curdle@ietfa.amsl.com>; Tue, 20 Mar 2018 22:49:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=auckland.ac.nz
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QteTVUjnwbTH for <curdle@ietfa.amsl.com>; Tue, 20 Mar 2018 22:49:05 -0700 (PDT)
Received: from mx4-int.auckland.ac.nz (mx4-int.auckland.ac.nz [130.216.125.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41AFE12D7E6 for <curdle@ietf.org>; Tue, 20 Mar 2018 22:49:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=auckland.ac.nz; i=@auckland.ac.nz; q=dns/txt; s=mail; t=1521611345; x=1553147345; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=7GCt5YSiSUUOalDGSpYvfjq03NaYWDRR0OzkD1898sw=; b=DPVX7CuIyYP4W2t5Xqn25VEb0JLNrNG0FfrvdhkUL8U30L7SWFQrCYtW F5iNEmVJLXdKEO/Fxp7tCiDVzfq/vrTmvkbWy/7Er27hqykhuzULKlFgw R0ua5NXWamOlf7R+nhk9fvvgA2ZKsW06LfPeU7GKYPumbSOJMRAhWFKap wgpx/ezrHsDMMc3OufWUNHkeTgz1hzzmJYiGhcDG2K1Tb1AYtJPghv+b4 azCOvSvuTx9CACcseqlO1W74lz2L2FPz72Be3Q4f1IfapSqzM3mTYZap8 3tK5hef2hXISEEWj5iEWvA1WvH+vdltzLxiS410kuLX/Kr9MSZySDGohW A==;
X-IronPort-AV: E=Sophos;i="5.48,338,1517828400"; d="scan'208";a="4885413"
X-Ironport-HAT: MAIL-SERVERS - $RELAYED
X-Ironport-Source: 10.6.2.4 - Outgoing - Outgoing
Received: from exchangemx.uoa.auckland.ac.nz (HELO uxcn13-ogg-c.UoA.auckland.ac.nz) ([10.6.2.4]) by mx4-int.auckland.ac.nz with ESMTP/TLS/AES256-SHA; 21 Mar 2018 18:48:59 +1300
Received: from uxcn13-ogg-d.UoA.auckland.ac.nz (10.6.2.5) by uxcn13-ogg-c.UoA.auckland.ac.nz (10.6.2.24) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Wed, 21 Mar 2018 18:48:58 +1300
Received: from uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.25]) by uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.25]) with mapi id 15.00.1263.000; Wed, 21 Mar 2018 18:48:58 +1300
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: denis bider <denisbider.ietf@gmail.com>
CC: "curdle@ietf.org" <curdle@ietf.org>
Thread-Topic: [Curdle] RFC 8308 on Extension Negotiation in the Secure Shell (SSH) Protocol
Thread-Index: AQHTv9DqTztCRMPgtUCAF40z/7haeKPY3waBgAAapACAATcpaQ==
Date: Wed, 21 Mar 2018 05:48:57 +0000
Message-ID: <1521611321502.90637@cs.auckland.ac.nz>
References: <20180319222314.9400DB810E0@rfc-editor.org> <1521538833144.57449@cs.auckland.ac.nz>, <CADPMZDAaJkjwhW8NnSgn=a82VKEdf0uhTbNHcWyqWUjEXFvzKw@mail.gmail.com>
In-Reply-To: <CADPMZDAaJkjwhW8NnSgn=a82VKEdf0uhTbNHcWyqWUjEXFvzKw@mail.gmail.com>
Accept-Language: en-NZ, en-GB, en-US
Content-Language: en-NZ
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [130.216.158.4]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/7JlFAxV8J2L6gzMgesIL9pv9k6E>
Subject: Re: [Curdle] RFC 8308 on Extension Negotiation in the Secure Shell (SSH) Protocol
X-BeenThere: curdle@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "List for discussion of potential new security area wg." <curdle.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/curdle>, <mailto:curdle-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/curdle/>
List-Post: <mailto:curdle@ietf.org>
List-Help: <mailto:curdle-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/curdle>, <mailto:curdle-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Mar 2018 05:49:12 -0000

denis bider <denisbider.ietf@gmail.com> writes:

>That depends - which extensions do you have in mind to test? In what way in
>particular would you like to test them?

It was actually meant for both of the new RFCs, the RSA one to regression-test
that nothing has broken since versions based on the drafts were written (e.g.
in regard to fixed- vs variable-length RSA blocks :-), the extension one just
to check that extensions sent and received are correctly handled without
anything choking.  The actual extension doesn't matter, just the message flow
handling.

>If you are looking for "server-sig-algs", this is by now fairly widely
>implemented in e.g. the latest versions of OpenSSH, and Bitvise SSH Server
>and Client versions 7.xx.

OK, I'll see if I can set up a recent OpenSSH to bounce some messages off.  I
just want to make sure that both RSA and extension messages are handled
correctly.

Peter.

v2.23.0 | Report a Bug | By Email