如何解决：ssh“连接损坏”错误

Question 1

我也遇到过这个问题。

我可以解决这个问题ssh -c [email protected]

Answer

我也遇到过这个问题。

我可以解决这个问题ssh -c [email protected]

Question 2

这回答的麦克·奎因完全拯救了我。我想补充一点背景信息来澄清一下。

更明确的答案示例可能是：

ssh -c [email protected] [email protected]

其中-c是cipher_spec来自 SSH 手册 ( man ssh)：

-c cipher_spec
 Selects the cipher specification for encrypting the
 session.  cipher_spec is a comma‐separated list of 
 ciphers listed in order of preference.  See the Ciphers 
 key‐word in ssh_config(5) for more information.

man 5 ssh_config并按照 SSH_config 手册（）中的建议进行操作：

       Ciphers
               Specifies  the  ciphers allowed and their order of
               preference.  Multiple ciphers must be  comma‐separated. 
               If  the  specified list begins with a ‘+’
               character, then the specified ciphers will be  
               appended  to  the  default  set instead of replacing
               them.  If the specified list  begins  with  a  ‘‐’
               character,  then  the specified ciphers (including
               wildcards) will be removed from  the  default  set
               instead  of replacing them.  If the specified list
               begins with a ‘^’ character,  then  the  specified
               ciphers  will be placed at the head of the default
               set.

               The supported ciphers are:

                     3des‐cbc
                     aes128‐cbc
                     aes192‐cbc
                     aes256‐cbc
                     aes128‐ctr
                     aes192‐ctr
                     aes256‐ctr
                     aes128‐[email protected]
                     aes256‐[email protected]
                     chacha20‐[email protected]

               The default is:

                     chacha20‐[email protected],
                     aes128‐ctr,aes192‐ctr,aes256‐ctr,
                     aes128‐[email protected],aes256‐[email protected]

               The list of available ciphers may also be obtained
               using "ssh ‐Q cipher".

在配置中使用可以是：

Host host.example.com
        Port 22
        User user
        Ciphers [email protected]

Answer

这回答的麦克·奎因完全拯救了我。我想补充一点背景信息来澄清一下。

更明确的答案示例可能是：

ssh -c [email protected] [email protected]

其中-c是cipher_spec来自 SSH 手册 ( man ssh)：

-c cipher_spec
 Selects the cipher specification for encrypting the
 session.  cipher_spec is a comma‐separated list of 
 ciphers listed in order of preference.  See the Ciphers 
 key‐word in ssh_config(5) for more information.

man 5 ssh_config并按照 SSH_config 手册（）中的建议进行操作：

       Ciphers
               Specifies  the  ciphers allowed and their order of
               preference.  Multiple ciphers must be  comma‐separated. 
               If  the  specified list begins with a ‘+’
               character, then the specified ciphers will be  
               appended  to  the  default  set instead of replacing
               them.  If the specified list  begins  with  a  ‘‐’
               character,  then  the specified ciphers (including
               wildcards) will be removed from  the  default  set
               instead  of replacing them.  If the specified list
               begins with a ‘^’ character,  then  the  specified
               ciphers  will be placed at the head of the default
               set.

               The supported ciphers are:

                     3des‐cbc
                     aes128‐cbc
                     aes192‐cbc
                     aes256‐cbc
                     aes128‐ctr
                     aes192‐ctr
                     aes256‐ctr
                     aes128‐[email protected]
                     aes256‐[email protected]
                     chacha20‐[email protected]

               The default is:

                     chacha20‐[email protected],
                     aes128‐ctr,aes192‐ctr,aes256‐ctr,
                     aes128‐[email protected],aes256‐[email protected]

               The list of available ciphers may also be obtained
               using "ssh ‐Q cipher".

在配置中使用可以是：

Host host.example.com
        Port 22
        User user
        Ciphers [email protected]

Question 3

对于那些寻求实际解释和服务器端修复的人来说：

看起来像Oracle 发布修复了水龟攻击于 2024 年 2 月 1 日在他们的 openssh-server 软件包中。更新后的软件包版本是openssh-server-8.0p1-19.el8_9.2.x86_64。

将 openssh-server 降级到版本8.0p1-19.el8_8将恢复更新并且 SSH 将再次工作，尽管这可能不明智。

我认为最明智的解决方案是禁用CHACHA20-POLY1305密码，如这邮政。

由于以下（其他）错误，我仍然无法通过 SSH 进入我们的 OL 服务器：

Corrupted MAC on input.
ssh_dispatch_run_fatal: Connection to A.B.C.D port 22: message authentication code incorrect

我还禁用了AES-*-CTR密码，例如

# cat /etc/crypto-policies/policies/modules/TERRAPIN.pmod
cipher@ssh = -CHACHA20* -AES-*-CTR
ssh_etm = 0

# update-crypto-policies --set DEFAULT:TERRAPIN
# systemctl restart sshd

这将导致自动密码检测，aes128-gcm应该足够安全

$ ssh -v <client>
...
debug1: kex: server->client cipher: [email protected] MAC: <implicit> compression: none
debug1: kex: client->server cipher: [email protected] MAC: <implicit> compression: none

2024 年 2 月 16 日更新：Oracle 发布了针对此问题的修复程序，包裹openssh-server-8.0p1-19.0.1.el8_9.2.x86_64

可以通过如下方式恢复此解决方法：

# rm /etc/crypto-policies/policies/modules/TERRAPIN.pmod
# update-crypto-policies --set DEFAULT
# systemctl restart sshd

Answer