From unknown Fri Apr 10 14:08:34 2026
X-Loop: owner@bugs.x2go.org
Subject: Bug#1202: [X2Go-Dev] kex error : no match for method mac algo client->server: server [hmac-sha2-256, hmac-sha2-512], client [hmac-sha1]
Reply-To: Mihai Moldovan <ionic@ionic.de>, 1202@bugs.x2go.org
Resent-From: Mihai Moldovan <ionic@ionic.de>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: X2Go Developers <x2go-dev@lists.x2go.org>
X-Loop: owner@bugs.x2go.org
Resent-Date: Fri, 01 Sep 2017 07:00:02 +0000
Resent-Message-ID: <handler.1202.B1202.150424898029425@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: followup 1202
X-X2Go-PR-Package: x2goclient
X-X2Go-PR-Keywords: 
Received: via spool by 1202-submit@bugs.x2go.org id=B1202.150424898029425
          (code B ref 1202); Fri, 01 Sep 2017 07:00:02 +0000
Received: (at 1202) by bugs.x2go.org; 1 Sep 2017 06:56:20 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=3.0 tests=BAYES_40,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS autolearn=ham autolearn_force=no
	version=3.4.1
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 66F735DACF
	for <1202@bugs.x2go.org>; Fri,  1 Sep 2017 08:56:17 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id z_UZZN3vtRTz for <1202@bugs.x2go.org>;
	Fri,  1 Sep 2017 08:56:01 +0200 (CEST)
Received: from Root24.de (powered.by.root24.eu [5.135.3.88])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id B43095DA8C
	for <1202@bugs.x2go.org>; Fri,  1 Sep 2017 08:56:01 +0200 (CEST)
Received: from [10.20.16.17] (178.162.222.163.adsl.inet-telecom.org [178.162.222.163])
	by mail.ionic.de (Postfix) with ESMTPSA id 68B104F00325;
	Fri,  1 Sep 2017 08:56:01 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ionic.de; s=default;
	t=1504248961; bh=83hjpswPc5jBs7nfneog8+3GmdqEOfAEpW/qfPYmrjQ=;
	h=Subject:To:References:From:Cc:Date:In-Reply-To:From;
	b=YReL8tO+ardD8BW2XZiR9qhCoLAvucYY2DO8J6I9e1u5hCDGCuswpSYLVWwlGAWFw
	 uFMqR6ncAnzXTKhnn5oApDpj9/j8SyAyF9p50vel+l6vk2Kf62rYAD49i21FJSpv1S
	 2MkqGZZymiIO3BwG/SDkz+0FzjEMf9INq0/3VEls=
To: "J. M. van Bilsen" <jbilsen@xs4all.nl>
References: <1504120159.19175.0.camel@xs4all.nl>
 <0af688ae-c199-d3a0-b680-558c5e01cc92@ionic.de>
 <1504246514.2876.3.camel@xs4all.nl>
From: Mihai Moldovan <ionic@ionic.de>
Cc: 1202@bugs.x2go.org
Message-ID: <8109739e-7efc-6f94-8fa3-e9f9d446f8c6@ionic.de>
Date: Fri, 1 Sep 2017 08:56:00 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.1.1
MIME-Version: 1.0
In-Reply-To: <1504246514.2876.3.camel@xs4all.nl>
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="LkBNoJon68J4wqd7MxJ4rsJR5gaVEChVG"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--LkBNoJon68J4wqd7MxJ4rsJR5gaVEChVG
Content-Type: multipart/mixed; boundary="JmTubS4GTKrgQuLFas5k6VT59PUanXc7L";
 protected-headers="v1"
From: Mihai Moldovan <ionic@ionic.de>
To: "J. M. van Bilsen" <jbilsen@xs4all.nl>
Cc: 1202@bugs.x2go.org
Message-ID: <8109739e-7efc-6f94-8fa3-e9f9d446f8c6@ionic.de>
Subject: Re: [X2Go-Dev] kex error : no match for method mac algo
 client->server: server [hmac-sha2-256, hmac-sha2-512], client [hmac-sha1]
References: <1504120159.19175.0.camel@xs4all.nl>
 <0af688ae-c199-d3a0-b680-558c5e01cc92@ionic.de>
 <1504246514.2876.3.camel@xs4all.nl>
In-Reply-To: <1504246514.2876.3.camel@xs4all.nl>

--JmTubS4GTKrgQuLFas5k6VT59PUanXc7L
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Adding back the X2Go bugtracker, since this is valuable information for a=
nyone
that might hit this issue.


On 09/01/2017 08:15 AM, J. M. van Bilsen wrote:
> that would be sufficient to tackle the problem. You are right I have to=

> check if the package came from the mint or youre dist. Don worry I will=

> be testing both but not this week.=20
>=20
> The reason I am looking for x2go is that we do not want to use other
> methods of remote connect.=20

I'm happy to hear this. :)

I still don't feel good just closing bug reports without any work carried=
 out.

More information: Linux Mint 18.1 seems to be based upon Ubuntu 16.04, an=
d this
edition has x2goclient 4.0.5.1-1 available (exactly), so this seems to be=
 a hit.
You're using very likely this version. So, now that we have this, I'm pre=
tty
sure you're also on libssh 0.6.3-4.3, which is naturally based upon libss=
h 0.6.3.

The corresponding commit that introduced the SHA2-based MAC algorithms wa=
s
262c82ac0661bb0be46477006ed366e401c1620f (in libssh's source code reposit=
ory.)

This commit first made it into libssh 0.7.0. Older libssh versions do not=

include it and thus do not support SHA2-based MAC algorithms.

Given that Ubuntu 16.04 only ships libssh 0.6.3, that explains your troub=
le.


You basically have two options: either report this to Linux Mint and hope=
 they
will update the update the libssh package for you and rebuild every packa=
ge that
depends on it (including x2goclient), or build your own versions.

The first one is not likely to be successful, though I do not know Mint's=
 update
philosophy. Debian and Ubuntu typically don't do such huge upgrades withi=
n a
released version line. If necessary, changes are backported to the older =
version
- but for libssh that might turn out to be quite complicated and not wort=
h the
effort. Mint might be different, so it might be worth a shot to try.

The second one requires quite a lot of effort on your side, including sta=
ying up
to date and deploying self-modified packages.



Mihai


--JmTubS4GTKrgQuLFas5k6VT59PUanXc7L--

--LkBNoJon68J4wqd7MxJ4rsJR5gaVEChVG
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=NxJ1
-----END PGP SIGNATURE-----

--LkBNoJon68J4wqd7MxJ4rsJR5gaVEChVG--
