看板FB_security
標 題Re: fatal: cipher_init: EVP_CipherInit: set key failed for aes128-cbc
發信站NCTU CS FreeBSD Server (Tue Jul 30 16:57:50 2013)
轉信站ptt!csnews.cs.nctu!news.cs.nctu!.cs.nctucs.nctu!!freebsdfreebsd.org!ow
[Cc added, bdrewery@ who is the maintainer of security/openssh-portable]
<<On Tue, 30 Jul 2013 08:38:05 -0400, Mike Tancsa <
[email protected]> said:
> http://lists.freebsd.org/pipermail/svn-src-head/2013-May/047921.html
> Change the default in /etc/ssh/sshd_config to
No /etc/ssh here; this is ports openssh, not base (which doesn't exist
in my world).
> UsePrivilegeSeparation yes
> as it sounds like you have hardware crypto on the box and you are using
> UsePrivilegeSeparation sandbox
> which is broken
However, this fix does work (in /usr/local/etc/ssh/sshd_config).
Apparently security/openssh-portable needs a fix similar to the base
system head/crypto/openssh r251088.
-GAWollman
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"