SSH connection fails after update to 13.1.4 (OD-2630)
Long Yang Paffrath opened 4 weeks ago

Hello,

After updating my onedev instance to 13.1.4, I am unable to push or pull using SSH. Could this be related to #OD-2623?

Git generates the following error:

2025-12-11 20:22:21.707 [info] Connection closed by xxx.xxx.xxx.xxx port 22
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

and ssh -v produces the following log:

debug1: OpenSSH_10.0p2, LibreSSL 3.3.6
debug1: Reading configuration data /Users/xxx/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files
debug1: /etc/ssh/ssh_config line 54: Applying options for *
debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
debug1: Connecting to xxx.de port 22.
debug1: Connection established.
debug1: identity file /Users/xxx/.ssh/id_rsa type -1
debug1: identity file /Users/xxx/.ssh/id_rsa-cert type -1
debug1: identity file /Users/xxx/.ssh/id_ecdsa type -1
debug1: identity file /Users/xxx/.ssh/id_ecdsa-cert type -1
debug1: identity file /Users/xxx/.ssh/id_ecdsa_sk type -1
debug1: identity file /Users/xxx/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /Users/xxx/.ssh/id_ed25519 type 3
debug1: identity file /Users/xxx/.ssh/id_ed25519-cert type -1
debug1: identity file /Users/xxx/.ssh/id_ed25519_sk type -1
debug1: identity file /Users/xxx/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /Users/xxx/.ssh/id_xmss type -1
debug1: identity file /Users/xxx/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_10.0
debug1: Remote protocol version 2.0, remote software version APACHE-SSHD-2.16.0
debug1: compat_banner: no match: APACHE-SSHD-2.16.0
debug1: Authenticating to xxx.de:22 as 'git'
debug1: load_hostkeys: fopen /Users/xxx/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: mlkem768x25519-sha256
debug1: kex: host key algorithm: rsa-sha2-512
debug1: kex: server->client cipher: [email protected] MAC: <implicit> compression: none
debug1: kex: client->server cipher: [email protected] MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
Connection closed by xxx.xxx.xxx.xxx port 22

Additionally my ondev logs are full of these warnings:

2025-12-11 20:13:44,936 WARN  [sshd-SshServer[2aabb65e](port=6611)-nio2-thread-9] o.a.s.s.session.ServerSessionImpl exceptionCaught(ServerSessionImpl[null@/10.0.2.100:44228])[state=Opened] SecurityException: class "org.bouncycastle.crypto.EncapsulatedSecretGenerator"'s signer information does not match signer information of other classes in the same package
2025-12-11 20:15:28,318 WARN  [sshd-SshServer[2aabb65e](port=6611)-nio2-thread-1] o.a.s.s.session.ServerSessionImpl exceptionCaught(ServerSessionImpl[null@/10.0.2.100:44696])[state=Opened] SecurityException: class "org.bouncycastle.crypto.EncapsulatedSecretGenerator"'s signer information does not match signer information of other classes in the same package
2025-12-11 20:16:31,126 WARN  [sshd-SshServer[2aabb65e](port=6611)-nio2-thread-4] o.a.s.s.session.ServerSessionImpl exceptionCaught(ServerSessionImpl[null@/10.0.2.100:54944])[state=Opened] SecurityException: class "org.bouncycastle.crypto.EncapsulatedSecretGenerator"'s signer information does not match signer information of other classes in the same package
2025-12-11 20:19:17,857 WARN  [sshd-SshServer[2aabb65e](port=6611)-nio2-thread-13] o.a.s.s.session.ServerSessionImpl exceptionCaught(ServerSessionImpl[null@/10.0.2.100:39674])[state=Opened] SshException: Unable to negotiate key exchange for server host key algorithms (client: ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa,ssh-dss / server: rsa-sha2-512,rsa-sha2-256)
issue 1/1
Type
Bug
Priority
Major
Assignee
Affected Versions
13.1.4
Labels
No labels
Issue Votes (0)
Watchers (2)
Reference
OD-2630
Please wait...
Connection lost or session expired, reload to recover
Page is in error, reload to recover