Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8164963

InvalidAlgorithmParameterException prime size issue after JDK upgrade with JSCH libraries

XMLWordPrintable

      Submitter hits exception after upgrading to 7u95 or later

      Connection established
      Remote version string: SSH-2.0-Sun_SSH_1.1.3
      Local version string: SSH-2.0-JSCH-0.1.53
      CheckCiphers:
      aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-ctr,arcfour,arcfour128,arcfour256
      aes256-ctr is not available.
      aes192-ctr is not available.
      aes256-cbc is not available.
      aes192-cbc is not available.
      CheckKexes:
      diffie-hellman-group14-sha1,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521
      CheckSignatures: ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
      SSH_MSG_KEXINIT sent
      SSH_MSG_KEXINIT received
      kex: server:
      gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
      kex: server: ssh-rsa,ssh-dss
      kex: server:
      aes128-ctr,aes128-cbc,arcfour,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc
      kex: server:
      aes128-ctr,aes128-cbc,arcfour,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc
      kex: server: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
      kex: server: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
      kex: server: none,zlib
      kex: server: none,zlib
      kex: server: en-CA,es-MX,en-US,es,fr,fr-CA,i-default
      kex: server: en-CA,es-MX,en-US,es,fr,fr-CA,i-default
      kex: client:
      ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
      kex: client:
      ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
      kex: client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc
      kex: client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc
      kex: client: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96
      kex: client: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96
      kex: client: none
      kex: client: none
      kex: client:
      kex: client:
      kex: server->client aes128-ctr hmac-md5 none
      kex: client->server aes128-ctr hmac-md5 none
      SSH_MSG_KEX_DH_GEX_REQUEST(1024<2048<2048) sent
      expecting SSH_MSG_KEX_DH_GEX_GROUP
      Disconnecting from xx.xx.xx.xx port 22
      com.jcraft.jsch.JSchException: Session.connect:
      java.security.InvalidAlgorithmParameterException: Prime size must be multiple
      of 64, and can only range from 512 to 1024 (inclusive), or 2048
             at com.jcraft.jsch.Session.connect(Session.java:558)
             at com.jcraft.jsch.Session.connect(Session.java:183)
             at SFTPClientTest.main(SFTPClientTest.java:43)



      JSCH library used. More info on that here :
      1. What does JSCH 0.1.53 refer to?
      http://www.jcraft.com/jsch/
      JSch allows you to connect to an sshd server and use port forwarding, X11
      forwarding, file transfer, etc., and you can integrate its functionality into
      your own Java programs.

      2. Purpose/use of JSCH 0.1.53 connection to remote SSH server machine?
      -> Yes, to make FTP over SSH.

      3. What debugging lines have been added to the JSCH code ?
      -> Nothing.

      4. How was JAR file recompiled?
      -->> it's FOSS(Free open source s/w) downloaded from the link mentioned
      above.

            coffeys Sean Coffey
            shadowbug Shadow Bug
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: