[Bug 1197] Enhancement request to enable fips compatibility mode in OpenSSH

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue May 26 16:02:59 AEST 2015


https://bugzilla.mindrot.org/show_bug.cgi?id=1197

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au

--- Comment #8 from Darren Tucker <dtucker at zip.com.au> ---
You're pretty much on your own with third-party patches, but on the off
chance it helps someone here's a clue.

(In reply to kpimm from comment #7)
[...]
> Bad packet length 541477200.

$ perl -le 'printf "%x\n", 541477200'
20464950
$ perl -le 'printf "%c%c%c%c\n", 0x20, 0x46, 0x49, 0x50'
 FIP

Something is dumping the string " FIP" (at least) into the ssh
connection stream.  My guess is something in your FIPS code is
polluting file descriptor 2 assuming it's stderr, which it isn't in
this case.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list