git - ssh_dispatch_run_fatal when trying to ssh repos to gitlab -
i'm trying access repositories official gitlab server. now, i'm getting error
ssh_dispatch_run_fatal: connection 104.210.2.228: no matching cipher found fatal: not read remote repository. please make sure have correct access rights , repository exists.
if try pull, clone, or ssh git@gitlab.com
.
i created new key , tested check if key problem same error persists.
some info of system:
$ lsb_release -a distributor id: ubuntu description: ubuntu 15.10 release: 15.10 codename: wily $ git --version git version 2.5.0 $ ssh -vvvt git@gitlab.com openssh_6.9p1 ubuntu-2ubuntu0.2, openssl 1.0.2d 9 jul 2015 debug1: reuserg configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 19: applying options * debug2: ssh_connect: needpriv 0 debug1: connecting gitlab.com [104.210.2.228] port 22. debug1: connection established. debug1: identity file /home/user/.ssh/id_rsa type 1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_rsa-cert type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_dsa type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_dsa-cert type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_ecdsa type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_ecdsa-cert type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_ed25519 type -1 debug1: key_load_public: no such file or directory debug1: identity file /home/user/.ssh/id_ed25519-cert type -1 debug1: enabling compatibility mode protocol 2.0 debug1: local version string ssh-2.0-openssh_6.9p1 ubuntu-2ubuntu0.2 debug1: remote protocol version 2.0, remote software version openssh_7.2p2 ubuntu-4ubuntu1 debug1: match: openssh_7.2p2 ubuntu-4ubuntu1 pat openssh* compat 0x04000000 debug2: fd 3 setting o_nonblock debug1: authenticating gitlab.com:22 'git' debug1: ssh2_msg_kexinit sent debug1: ssh2_msg_kexinit received debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-dss-cert-v00@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa,ssh-dss debug2: kex_parse_kexinit: blowfish-cbc,arcfour debug2: kex_parse_kexinit: blowfish-cbc,arcfour debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: zlib@openssh.com,zlib,none debug2: kex_parse_kexinit: zlib@openssh.com,zlib,none debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 debug2: kex_parse_kexinit: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: kex_parse_kexinit: none,zlib@openssh.com debug2: kex_parse_kexinit: none,zlib@openssh.com debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 ssh_dispatch_run_fatal: connection 104.210.2.228: no matching cipher found
it seems have error or difference versions of openssh, i'm not sure. pointers going on, , how fix appreciated.
no matching cipher found
means sever , client offers different ciphers.
client side:
debug2: kex_parse_kexinit: blowfish-cbc,arcfour
server side:
debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
the client side proposal not default values, because unsafe ciphers (disabled on sane server). should check /etc/ssh/ssh_config
, remove line
ciphers blowfish-cbc,arcfour
or similar (regardless how , why there). if need legacy ciphers connect legacy systems, there match block, can use
match legacy.hostmane ciphers blowfish-cbc,arcfour
Comments
Post a Comment