Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [] SSH ciphers on dev/


Sorry. It is com.jcraft.jsch that must be updated to 0.1.53, and since 0.1.51 can co-exist after an update, 0.1.51 must be actively removed. New Eclipse installation recomended.


        Ed Willink

On 02/10/2015 11:23, Denis Roy wrote:

If you've recently been unable to connect to Pure Git (not Gerrit) repos
using SSH, it's likely because we've disabled older ciphers that are now
considered insecure, or easy to break.

At Eclipse we can not risk running insecure ciphers, since our SSH ports
are open to the world[1]. These new cipher restrictions currently do not
apply to Gerrit, but I would expect Gerrit to follow suit shortly.

If you're using eGit, updating to the latest version will allow you to
use SSH safely.  Please see for more details.

Apologies for the short notice.  If you have any questions or concerns,
please don't hesitate to contact us at webmaster@xxxxxxxxxxx.


[1] Our plan is to completely shut off SSH access to dev/
on port 22 to greatly reduce our exposure. See
for details.

_______________________________________________ mailing list

IMPORTANT: Membership in this list is generated by processes internal to the Eclipse Foundation.  To be permanently removed from this list, you must contact emo@xxxxxxxxxxx to request removal.

No virus found in this message.
Checked by AVG -
Version: 2015.0.6140 / Virus Database: 4435/10742 - Release Date: 10/02/15

Back to the top