git - ssh_dispatch_run_fatal when trying to ssh repos to gitlab -


i'm trying access repositories official gitlab server. now, i'm getting error

ssh_dispatch_run_fatal: connection 104.210.2.228: no matching cipher found fatal: not read remote repository.  please make sure have correct access rights , repository exists. 

if try pull, clone, or ssh git@gitlab.com.

i created new key , tested check if key problem same error persists.

some info of system:

$ lsb_release -a distributor id:    ubuntu description:    ubuntu 15.10 release:    15.10 codename:    wily  $ git --version git version 2.5.0  $ ssh -vvvt git@gitlab.com openssh_6.9p1 ubuntu-2ubuntu0.2, openssl 1.0.2d 9 jul 2015 debug1: reuserg configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 19: applying options * debug2: ssh_connect: needpriv 0 debug1: connecting gitlab.com [104.210.2.228] port 22. debug1: connection established. debug1: identity file /home/user/.ssh/id_rsa type 1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_rsa-cert type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_dsa type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_dsa-cert type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_ecdsa type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_ecdsa-cert type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_ed25519 type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_ed25519-cert type -1 debug1: enabling compatibility mode protocol 2.0 debug1: local version string ssh-2.0-openssh_6.9p1 ubuntu-2ubuntu0.2 debug1: remote protocol version 2.0, remote software version openssh_7.2p2 ubuntu-4ubuntu1 debug1: match: openssh_7.2p2 ubuntu-4ubuntu1 pat openssh* compat 0x04000000 debug2: fd 3 setting o_nonblock debug1: authenticating gitlab.com:22 'git' debug1: ssh2_msg_kexinit sent debug1: ssh2_msg_kexinit received debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-dss-cert-v00@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa,ssh-dss debug2: kex_parse_kexinit: blowfish-cbc,arcfour debug2: kex_parse_kexinit: blowfish-cbc,arcfour debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: zlib@openssh.com,zlib,none debug2: kex_parse_kexinit: zlib@openssh.com,zlib,none debug2: kex_parse_kexinit:  debug2: kex_parse_kexinit:  debug2: kex_parse_kexinit: first_kex_follows 0  debug2: kex_parse_kexinit: reserved 0  debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 debug2: kex_parse_kexinit: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: kex_parse_kexinit: none,zlib@openssh.com debug2: kex_parse_kexinit: none,zlib@openssh.com debug2: kex_parse_kexinit:  debug2: kex_parse_kexinit:  debug2: kex_parse_kexinit: first_kex_follows 0  debug2: kex_parse_kexinit: reserved 0  ssh_dispatch_run_fatal: connection 104.210.2.228: no matching cipher found 

it seems have error or difference versions of openssh, i'm not sure. pointers going on, , how fix appreciated.

no matching cipher found

means sever , client offers different ciphers.

client side:

debug2: kex_parse_kexinit: blowfish-cbc,arcfour 

server side:

debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com 

the client side proposal not default values, because unsafe ciphers (disabled on sane server). should check /etc/ssh/ssh_config , remove line

ciphers blowfish-cbc,arcfour 

or similar (regardless how , why there). if need legacy ciphers connect legacy systems, there match block, can use

match legacy.hostmane   ciphers blowfish-cbc,arcfour 

Comments

Popular posts from this blog

sequelize.js - Sequelize group by with association includes id -

android - Robolectric "INTERNET permission is required" -

java - Android raising EPERM (Operation not permitted) when attempting to send UDP packet after network connection -