Eclipse Community Forums: Target Management » RSE ssh connections FAIL unless remotes' sshd

Home » Eclipse Projects » Target Management » RSE ssh connections FAIL unless remotes' sshd_config has weak Ciphers/MACs ? Why?

Show: Today's Messages :: Show Polls :: Message Navigator

RSE ssh connections FAIL unless remotes' sshd_config has weak Ciphers/MACs ? Why? [message #1696261]

Sun, 24 May 2015 17:15

Bob Devanna

Messages: 5
Registered: May 2015

Junior Member

I'm setting up Eclipse Luna as a new IDE for a small team.

It's an all-Linux environment, and site-to-site comms are typically SSH, with ciphers, macs & kexalgorithms tightened up -- using elliptical ciphers and higher bit algos in general.

On the Eclipse end of things, I've setup its Remote System Explorer (RSE) toolkit for access to/across multiple sites.

I've found that unless I 'dumb down' the remotes' sshd_config, to include weaker "Ciphers+=aes128-ctr" & "MACs+=hmac-md5", Eclipse RSE fails on the connection.

With those ^^ config opts, the connection opens without error; without those opts, no connection.

I suspect (?) this has to do with Java's encryption layer / config, but don't know.

Is this a missing/wrong CONFIG issue on my end, or a limitation of Eclipse?

Cheers,

Bob

Report message to a moderator

Re: RSE ssh connections FAIL unless remotes' sshd_config has weak Ciphers/MACs ? Why? [message #1696656 is a reply to message #1696261]

Wed, 27 May 2015 16:31

Martin Oberhuber

Messages: 1007
Registered: July 2009

Senior Member

Hi Bob,

Eclipse comes with com.jcraft.jsch_0.1.51 for its SSH support, and some newer algorithms (including ECC) have only been added in 0.1.52:
http://www.jcraft.com/jsch/ChangeLog

see here for the complete list of algorithms supported in Jsch:
http://www.jcraft.com/jsch/

If you think that JSch should support even different Ciphers, I suggest you sign up on the JSch mailing list:
https://lists.sourceforge.net/lists/listinfo/jsch-users

If you think that Eclipse should update to JSch-0.1.52, I suggest that you file a bug against Platform/Team where you argue why this is necessary:
https://bugs.eclipse.org/bugs/enter_bug.cgi?component=Team&product=Platform&version=4.5

Thanks
Martin

Report message to a moderator