Mitigate SSH terapin vulnerability on AG sysconfig port 65519. (CVE-2023-48795)

STEP1: Setup synconfig peer with itself.

AN(config)#synconfig peer AG1 192.168.100.176
STEP2: Try to ssh port 65519.

AN# /ca/bin/ssh -vv -p 65519 192.168.100.176

OpenSSH_7.5p1, OpenSSL 1.0.2t  10 Sep 2019

debug1: Reading configuration data /ca/conf/ssh_config

debug1: /ca/conf/ssh_config line 20: Applying options for *
debug2: resolving "192.168.100.176" port 65519

debug2: ssh_connect_direct: needpriv 0

debug1: Connecting to 192.168.100.176 [192.168.100.176] port 65519.

debug1: Connection established.

debug1: key_load_public: No such file or directory

debug1: identity file /export/test/.ssh/id_rsa type -1

debug1: key_load_public: No such file or directory

debug1: identity file /export/test/.ssh/id_rsa-cert type -1

debug1: key_load_public: No such file or directory

debug1: identity file /export/test/.ssh/id_dsa type -1

debug1: key_load_public: No such file or directory

debug1: identity file /export/test/.ssh/id_dsa-cert type -1

debug1: key_load_public: No such file or directory

debug1: identity file /export/test/.ssh/id_ecdsa type -1

debug1: key_load_public: No such file or directory

debug1: identity file /export/test/.ssh/id_ecdsa-cert type -1

debug1: key_load_public: No such file or directory

debug1: identity file /export/test/.ssh/id_ed25519 type -1

debug1: key_load_public: No such file or directory

debug1: identity file /export/test/.ssh/id_ed25519-cert type -1

debug1: Enabling compatibility mode for protocol 2.0

debug1: Local version string SSH-2.0-OpenSSH_7.5

debug1: Remote protocol version 2.0, remote software version ArrayOS

debug1: no match: ArrayOS

debug2: fd 3 setting O_NONBLOCK

debug1: Authenticating to 192.168.100.176:65519 as 'test'

debug1: SSH2_MSG_KEXINIT sent

debug1: SSH2_MSG_KEXINIT received

debug2: local client KEXINIT proposal

debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c

debug2: host key algorithms: ssh-rsa-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519

debug2: ciphers ctos: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc

debug2: ciphers stoc: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc

debug2: MACs ctos: umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1

debug2: MACs stoc: umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1

debug2: compression ctos: none,zlib@openssh.com,zlib

debug2: compression stoc: none,zlib@openssh.com,zlib

debug2: languages ctos:

debug2: languages stoc:

debug2: first_kex_follows 0

debug2: reserved 0

debug2: peer server KEXINIT proposal

debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1

debug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256

debug2: ciphers ctos: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com

debug2: ciphers stoc: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com

debug2: MACs ctos: umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1

debug2: MACs stoc: umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1

debug2: compression ctos: none,zlib@openssh.com

debug2: compression stoc: none,zlib@openssh.com

debug2: languages ctos:

debug2: languages stoc:

debug2: first_kex_follows 0

debug2: reserved 0

debug1: kex: algorithm: curve25519-sha256

debug1: kex: host key algorithm: rsa-sha2-512

debug1: kex: server->client cipher: aes128-ctr MAC: umac-64@openssh.com compression: none

debug1: kex: client->server cipher: aes128-ctr MAC: umac-64@openssh.com compression: none

debug1: expecting SSH2_MSG_KEX_ECDH_REPLY

debug1: Server host key: ssh-rsa SHA256:659lv67+B/FZJu8M4hWjrgsXuVbEsRLljCEkN/7TrtM

debug1: Host '[192.168.100.176]:65519' is known and matches the RSA host key.

debug1: Found key in /export/test/.ssh/known_hosts:1

debug2: set_newkeys: mode 1

debug1: rekey after 4294967296 blocks

debug1: SSH2_MSG_NEWKEYS sent

debug1: expecting SSH2_MSG_NEWKEYS

debug1: SSH2_MSG_NEWKEYS received

debug2: set_newkeys: mode 0

debug1: rekey after 4294967296 blocks

debug2: key: /export/test/.ssh/id_rsa (0x0)

debug2: key: /export/test/.ssh/id_dsa (0x0)

debug2: key: /export/test/.ssh/id_ecdsa (0x0)

debug2: key: /export/test/.ssh/id_ed25519 (0x0)

debug1: SSH2_MSG_EXT_INFO received

debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521>

debug2: service_accept: ssh-userauth

debug1: SSH2_MSG_SERVICE_ACCEPT received

debug1: Authentications that can continue: publickey,password

debug1: Next authentication method: publickey

debug1: Trying private key: /export/test/.ssh/id_rsa

debug1: Trying private key: /export/test/.ssh/id_dsa

debug1: Trying private key: /export/test/.ssh/id_ecdsa

debug1: Trying private key: /export/test/.ssh/id_ed25519

debug2: we did not send a packet, disable method

debug1: Next authentication method: password
STEP3: Verified there is no -etm or chacha20 kex.