Secure Shell - Celestial Software Forum

SSH2 Keep Alive does not work

Neil Colvin — Mon, 19 May 2025 10:37:50 +0000

A SSH2 connection that works perfectly consistently times out after 20 minutes even though KeepAlive is set for the connection.

New SSH vulnerability: CVE-2023-48795

Todd Andrews — Fri, 22 Dec 2023 22:20:09 +0000

I do not know if Absolute Telnet is impacted by this. I'm just passing the info along as I've been getting news alerts about it.

CVE Record | CVE

NVD - CVE-2023-48795

AWS instance failed to connect / ED25519

Brian Hemesath — Sat, 18 Nov 2023 00:06:10 +0000

I'm hoping you can help me get connected to a new AWS instance. I am able to connect to it with Putty. I submitted a ticket to AWS support; I pasted a couple things from their response (happy to share the entire response if it is relevant): (a) AWS recommend use a client that supports a compatible algorithm, such as ssh-ed25519 or ecdsa-sha2-nistp256 (b) your SSH client must support a rsa-sha2-256 or rsa-sha2-512 signature It appears my version of Absolute Telnet (11.38) has both of these items, and from what I can tell, the default SSH2 connection/config enables them. Thanks in advance for any insight you can provide.

SSH into Cisco switch with a new IOS-XE version

Scott Workman — Thu, 09 Nov 2023 15:42:34 +0000

I am having difficulty using Absolute Telnet version 11.38 to SSH into a Cisco switch running a newer IOS-XE version. When I first attempted to connect Absolute Telnet reported ""disconnected: failed to negotiate client to server MAC algorithm". I then updated the switch to allow hmac-sha2-512. This initially appears to work as I am then prompted for login credentials which is successful. However, immediately after authenticating I receive a "Remote Server Disconnected Unexpectedly" message. The switch logging shows this error associated with my attempt: "%SSH-3-BAD_PACK_LEN: Bad packet length 1081710372" I have tried various combinations of encryption and mac settings on both Absolute Telnet and on the Cisco switch but can't seem to get past this bad packet length error. I am able to use other clients, such as Putty, to connect. Does anyone have any suggestions on how to get past this? Thanks in advance.

After new install server I can not connect

Joszja de Weerdt — Fri, 26 Aug 2022 15:30:35 +0000

I can connect with Putty and with SFTP (WinSCP) It returns the following error LSP: e70f1aa0-ab8b-11cf-8c-a3-0-80-5f-48-a1-92 (MSAFD Tcpip ) Match Success! SSH - PacketDecoder RECEIVED: 5353482D322E302D4F70656E5353485F382E397031205562756E74752D330D0A SSH - Sending version: 5353482D322E302D312E3831207373686C69623A204162736F6C75746554656C6E65740D0A SSH - calling SetOutVersion SSH - OutState is READY_TO_SEND_KEXINIT SSH - PrepareKexPacket SSH - supported kex algs SSH - diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 SSH - supported hostkey algs SSH - ssh-rsa,ssh-dss SSH - supported encryption algs SSH - aes128-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc,3des-ctr SSH - supported mac algs SSH - hmac-sha2-512,hmac-sha2-256,hmac-sha1 SSH - supported compression algs SSH - none,zlib@openssh.com,zlib SSH - MessageEnd SSH - Sending SSH_MSG_KEXINIT (495 bytes, seq nr 0) Data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etOutKexInitPacketSent SSH - OutState is DOING_OUT_KEX SSH - PacketDecoder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eceived SSH_MSG_KEXINIT (1068 bytes, seq nr 0) Data: 14DADC549C0EC386A342905371EF18A0FE00000109637572766532353531392D7368613235362C637572766532353531392D736861323536406C69627373682E6F72672C656364682D736861322D6E697374703235362C656364682D736861322D6E697374703338342C656364682D736861322D6E697374703532312C736E747275703736317832353531392D736861353132406F70656E7373682E636F6D2C6469666669652D68656C6C6D616E2D67726F75702D65786368616E67652D7368613235362C6469666669652D68656C6C6D616E2D67726F757031362D7368613531322C6469666669652D68656C6C6D616E2D67726F757031382D7368613531322C6469666669652D68656C6C6D616E2D67726F757031342D736861323536000000397273612D736861322D3531322C7273612D736861322D3235362C65636473612D736861322D6E697374703235362C7373682D656432353531390000006C63686163686132302D706F6C7931333035406F70656E7373682E636F6D2C6165733132382D6374722C6165733139322D6374722C6165733235362D6374722C6165733132382D67636D406F70656E7373682E636F6D2C6165733235362D67636D406F70656E7373682E636F6D0000006C63686163686132302D706F6C7931333035406F70656E7373682E636F6D2C6165733132382D6374722C6165733139322D6374722C6165733235362D6374722C6165733132382D67636D406F70656E7373682E636F6D2C6165733235362D67636D406F70656E7373682E636F6D000000D5756D61632D36342D65746D406F70656E7373682E636F6D2C756D61632D3132382D65746D406F70656E7373682E636F6D2C686D61632D736861322D3235362D65746D406F70656E7373682E636F6D2C686D61632D736861322D3531322D65746D406F70656E7373682E636F6D2C686D61632D736861312D65746D406F70656E7373682E636F6D2C756D61632D3634406F70656E7373682E636F6D2C756D61632D313238406F70656E7373682E636F6D2C686D61632D736861322D3235362C686D61632D736861322D3531322C686D61632D73686131000000D5756D61632D36342D65746D406F70656E7373682E636F6D2C756D61632D3132382D65746D406F70656E7373682E636F6D2C686D61632D736861322D3235362D65746D406F70656E7373682E636F6D2C686D61632D736861322D3531322D65746D406F70656E7373682E636F6D2C686D61632D736861312D65746D406F70656E7373682E636F6D2C756D61632D3634406F70656E7373682E636F6D2C756D61632D313238406F70656E7373682E636F6D2C686D61632D736861322D3235362C686D61632D736861322D3531322C686D61632D73686131000000156E6F6E652C7A6C6962406F70656E7373682E636F6D000000156E6F6E652C7A6C6962406F70656E7373682E636F6D00000000000000000000000000 SSH - Will act on first key exchange method packet SSH - Sending SSH_MSG_DISCONNECT (53 bytes, seq nr 1) Data: 0100000003000000266661696C656420746F206E65676F746961746520686F7374206B657920616C676F726974686D00000002656E disconnected: failed to negotiate host key algorithm Is there a solution?

RSA3072

Daniel Jost — Thu, 14 Apr 2022 18:04:26 +0000

I haven't been able to use Absolute with SSH key auth - I get invalid passphrase but it works with the windows baked in SSH client without a problem. The key length is 3072 on the key I have is that the issue? Thanks

Automate running shell command

Joel Wilcox — Mon, 15 Oct 2018 22:56:59 +0000

I'm trying to automate a connection to do the following: Login to a linux server automatically and run 2 simple commands. I need to cd to a directory and then run a bash script. I've been playing with it for an hour or so and I can't seem to find where this can be done. I've got the login part down. I just don't see where I can input the 2 other commands. Sorry if this is a dumb question. Thank you in advance.

Forwarding Keys (Authentication Agent Forwarding)

John — Thu, 19 Jul 2018 02:23:41 +0000

Hello, I have a license for Absolutetelnet and use it daily. I've setup a bastion server in AWS and I'm trying to get key forwarding to work. I got it working on Putty, no problem: 1. Convert .pem to .ppk with Puttygen. 2. Add private key ppk of bastion and any server I might connect to after, TO pagent. 3. Enable "Allow agent forwarding" in Putty config. 4. SSH to bastion 5. SSH from bastion to host in private subnet. 6. Success. I'm at a loss with as to how to complete this in Absolutetelnet. Authentication tab -> Use RSA/DSA key to login -> can only specify one .pem key! Forwarding tab -> Authentication Agent Forwarding is enabled. I even tried combining all necessary private keys into a single .pem. No such luck. Has anyone got this working? Thanks! John

Slow Connecting

Bob Ricci — Wed, 11 Jul 2018 06:43:34 +0000

I have noticed that on a new server with Centos 7.x it takes 30 seconds for a login prompt to pop up. I don't use keys - don't know how. Never tried with your application that I have owned for MANY years. I am still using version 6.28 just because there was no need to upgrade. We also had an issue that if trying the upgrade (at that time) it would not allow me to go back to the old version. I have other containers using Virtuozzo that don't have CentOS 7.x. It isn't a DNS issue. Hostnames resolve instantly as do IP's. Staying on point -- does version 10.16 (?) use a different method to connect such as SSH 2? TLS or new handshake methods that I've not been accustomed to using? Times change and I've lived in a cancer hospital with a daughter for 11 years and I know that I am out-dated. My business is in shambles and I am starting over. So what's the cause, if known, for slow connecting to a new server?

Smartcard authentication failing

Derek — Thu, 15 Oct 2015 14:47:09 +0000

Hello we are testing out the software to see if we can use it for smartcard authentication to our servers. Whenever attempting to use smartcard authentication it fails normally but when running ssh in debug mode it works. Any suggestions?