Community discussions

MikroTik App
 
doush
Long time Member
Long time Member
Topic Author
Posts: 665
Joined: Thu Jun 04, 2009 3:11 pm

SSH Client Cannot Connect UBNT devices

Fri Jan 31, 2014 1:39 pm

SSH Client cannot connect AirOS v5.5.8 devices also few other SNR switches.

Seems like a cipher problem on the RouterOS side.

[admin@MikroTik] > /sys ssh 10.20.2.8
DH_compute_key failed err: error:05066066:lib(5):func(102):reason(102)

[Ticket#2014012866000869]

Mikrotik Team ?
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 27129
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia
Contact:

Re: SSH Client Cannot Connect UBNT devices

Fri Jan 31, 2014 1:46 pm

Looks like their DH key strength is too low. RouterOS doesn't allow such low security level.
 
edmuxas
just joined
Posts: 1
Joined: Wed Oct 26, 2011 11:48 am

Re: SSH Client Cannot Connect UBNT devices

Fri Jan 31, 2014 4:55 pm

UBNT has upgraded dropbear from used v0.51 to v2013.59 version. Here is dropbear change log (https://matt.ucc.asn.au/dropbear/CHANGES). Do you think newer dropbear version started to use weaker keys to "increase" security level?

One of the lines say that blowfish is disabled by default. Is it what RouterOS is using?

Thanks!
 
doush
Long time Member
Long time Member
Topic Author
Posts: 665
Joined: Thu Jun 04, 2009 3:11 pm

Re: SSH Client Cannot Connect UBNT devices

Fri Jan 31, 2014 8:19 pm

UBNT has upgraded dropbear from used v0.51 to v2013.59 version. Here is dropbear change log (https://matt.ucc.asn.au/dropbear/CHANGES). Do you think newer dropbear version started to use weaker keys to "increase" security level?

One of the lines say that blowfish is disabled by default. Is it what RouterOS is using?

Thanks!
Mikrotik ?
 
planetcaravan
Member Candidate
Member Candidate
Posts: 267
Joined: Tue Aug 25, 2009 5:33 pm

Re: SSH Client Cannot Connect UBNT devices

Fri Mar 07, 2014 8:01 pm

I've noticed the problem is on a particular Ubiquiti build.
Here is what I have on Ubiquiti
Firmware Version: XW.v5.5.6
Build Number: 18861

Dropbear server v2013.58
On previous build (17762) SSH problem was not present!