看板FB_security
標 題Re: fatal: cipher_init: EVP_CipherInit: set key failed for aes128-cbc
發信站Sentex Communications (Tue Jul 30 16:38:05 2013)
轉信站ptt!csnews.cs.nctu!news.cs.nctu!.cs.nctucs.nctu!!freebsdfreebsd.org!ow
On 7/30/2013 8:01 AM, Garrett Wollman wrote:
> Am I the only person to be seeing this log message from sshd:
>
> fatal: cipher_init: EVP_CipherInit: set key failed for aes128-cbc [preauth]
> nice not to have my logs spammed with this. Currently running
> openssh-portable-6.2.p2_3,1, and I think it started with upgrade to
> 6.2.
There is an open PR which can be closed now at
http://www.freebsd.org/cgi/query-pr.cgi?pr=171809
which points to
http://lists.freebsd.org/pipermail/svn-src-head/2013-May/047921.html
Change the default in /etc/ssh/sshd_config to
UsePrivilegeSeparation yes
as it sounds like you have hardware crypto on the box and you are using
UsePrivilegeSeparation sandbox
which is broken
---Mike
--
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications,
[email protected]
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada
http://www.tancsa.com/
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"