Bug 729 - Solving SSH Weak MAC algorithm issue on APV 10.4.2.128 and APV10.7.0.15
Review Request #248 — Created May 13, 2024 and updated
| Information | |
|---|---|
| kevin.poh | |
| APV10 | |
| rel_apv_10_7 | |
| 729 | |
| Reviewers | |
| luhsuan, timlai | |
File edited:
1. usr/click/bin/openssh/openssh-8.8p1/myproposal.h
(on KEX_SERVER_MAC section: remove "umac-64-etm@openssh.com," , "hmac-sha1-etm@openssh.com," , "umac-64@openssh.com," , "hmac-sha1")
- usr/click/bin/openssh/build.sh
(add patch -p0 < ../weak_mac.patch, one line after patch -p1 < ../array_patch)
(note : weak_mac.patch created from the difference of original myproposal.h and edited myproposal.h)
Testing using vAPV and analyze the ssh session using Wireshark
-
-
branches/rel_apv_10_7/usr/click/bin/openssh/weak_mac.patch (Diff revision 1) remove all red lines due to blank space
-
branches/rel_apv_10_7/usr/click/bin/openssh/weak_mac.patch (Diff revision 1) also why we are not adding this to existing patch?
