X2Go Bug report logs - #1202
kex error : no match for method mac algo client->server: server [hmac-sha2-256,hmac-sha2-512], client [hmac-sha1]

version graph

Package: x2goclient; Maintainer for x2goclient is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goclient is src:x2goclient.

Reported by: "J. M. van Bilsen" <jbilsen@xs4all.nl>

Date: Wed, 30 Aug 2017 19:20:02 UTC

Severity: normal

Found in version 4.0.5.1-1

Full log

🔗 View this message in rfc822 format

X-Loop: owner@bugs.x2go.org
Subject: Bug#1202: [X2Go-Dev] kex error : no match for method mac algo client->server: server [hmac-sha2-256, hmac-sha2-512], client [hmac-sha1]
Reply-To: Mihai Moldovan <ionic@ionic.de>, 1202@bugs.x2go.org
Resent-From: Mihai Moldovan <ionic@ionic.de>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: X2Go Developers <x2go-dev@lists.x2go.org>
X-Loop: owner@bugs.x2go.org
Resent-Date: Fri, 01 Sep 2017 07:00:02 +0000
Resent-Message-ID: <handler.1202.B1202.150424898029425@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: followup 1202
X-X2Go-PR-Package: x2goclient
X-X2Go-PR-Keywords: 
Received: via spool by 1202-submit@bugs.x2go.org id=B1202.150424898029425
          (code B ref 1202); Fri, 01 Sep 2017 07:00:02 +0000
Received: (at 1202) by bugs.x2go.org; 1 Sep 2017 06:56:20 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=3.0 tests=BAYES_40,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS autolearn=ham autolearn_force=no
	version=3.4.1
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 66F735DACF
	for <1202@bugs.x2go.org>; Fri,  1 Sep 2017 08:56:17 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id z_UZZN3vtRTz for <1202@bugs.x2go.org>;
	Fri,  1 Sep 2017 08:56:01 +0200 (CEST)
Received: from Root24.de (powered.by.root24.eu [5.135.3.88])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id B43095DA8C
	for <1202@bugs.x2go.org>; Fri,  1 Sep 2017 08:56:01 +0200 (CEST)
Received: from [10.20.16.17] (178.162.222.163.adsl.inet-telecom.org [178.162.222.163])
	by mail.ionic.de (Postfix) with ESMTPSA id 68B104F00325;
	Fri,  1 Sep 2017 08:56:01 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ionic.de; s=default;
	t=1504248961; bh=83hjpswPc5jBs7nfneog8+3GmdqEOfAEpW/qfPYmrjQ=;
	h=Subject:To:References:From:Cc:Date:In-Reply-To:From;
	b=YReL8tO+ardD8BW2XZiR9qhCoLAvucYY2DO8J6I9e1u5hCDGCuswpSYLVWwlGAWFw
	 uFMqR6ncAnzXTKhnn5oApDpj9/j8SyAyF9p50vel+l6vk2Kf62rYAD49i21FJSpv1S
	 2MkqGZZymiIO3BwG/SDkz+0FzjEMf9INq0/3VEls=
To: "J. M. van Bilsen" <jbilsen@xs4all.nl>
References: <1504120159.19175.0.camel@xs4all.nl>
 <0af688ae-c199-d3a0-b680-558c5e01cc92@ionic.de>
 <1504246514.2876.3.camel@xs4all.nl>
From: Mihai Moldovan <ionic@ionic.de>
Cc: 1202@bugs.x2go.org
Message-ID: <8109739e-7efc-6f94-8fa3-e9f9d446f8c6@ionic.de>
Date: Fri, 1 Sep 2017 08:56:00 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.1.1
MIME-Version: 1.0
In-Reply-To: <1504246514.2876.3.camel@xs4all.nl>
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="LkBNoJon68J4wqd7MxJ4rsJR5gaVEChVG"

[Message part 1 (text/plain, inline)]
Adding back the X2Go bugtracker, since this is valuable information for anyone
that might hit this issue.


On 09/01/2017 08:15 AM, J. M. van Bilsen wrote:
> that would be sufficient to tackle the problem. You are right I have to
> check if the package came from the mint or youre dist. Don worry I will
> be testing both but not this week. 
> 
> The reason I am looking for x2go is that we do not want to use other
> methods of remote connect. 

I'm happy to hear this. :)

I still don't feel good just closing bug reports without any work carried out.

More information: Linux Mint 18.1 seems to be based upon Ubuntu 16.04, and this
edition has x2goclient 4.0.5.1-1 available (exactly), so this seems to be a hit.
You're using very likely this version. So, now that we have this, I'm pretty
sure you're also on libssh 0.6.3-4.3, which is naturally based upon libssh 0.6.3.

The corresponding commit that introduced the SHA2-based MAC algorithms was
262c82ac0661bb0be46477006ed366e401c1620f (in libssh's source code repository.)

This commit first made it into libssh 0.7.0. Older libssh versions do not
include it and thus do not support SHA2-based MAC algorithms.

Given that Ubuntu 16.04 only ships libssh 0.6.3, that explains your trouble.


You basically have two options: either report this to Linux Mint and hope they
will update the update the libssh package for you and rebuild every package that
depends on it (including x2goclient), or build your own versions.

The first one is not likely to be successful, though I do not know Mint's update
philosophy. Debian and Ubuntu typically don't do such huge upgrades within a
released version line. If necessary, changes are backported to the older version
- but for libssh that might turn out to be quite complicated and not worth the
effort. Mint might be different, so it might be worth a shot to try.

The second one requires quite a lot of effort on your side, including staying up
to date and deploying self-modified packages.



Mihai


[signature.asc (application/pgp-signature, attachment)]

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Fri Oct 24 22:47:55 2025; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.