Project

General

Profile

Bug #75829

Remove unsupported replication ciphers

Added by Sebastien BLANCHET almost 2 years ago. Updated over 1 year ago.

Status:
Done
Priority:
No priority
Assignee:
Vladimir Vinogradenko
Category:
Middleware
Target version:
Seen in:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

FreeNAS-11.2U2 fails to replicate datasets to a previous version of FreeNAS (e.g FreeNAS-11.1u7 or FreeNAS-11.2u1) with fast cipher .

With fast cipher the error message is:

Failed: Unknown cipher type 'arcfour256,arcfour128,blowfish-cbc,aes128-ctr,aes192-ctr,aes256-ctr' 

It may be related to the openssh version: FreeNAS-11.2U2 uses openssh-portable-7.9.p1_1,1 instead of openssh-portable-7.5.p1_1,1 in FreeNAS-11.2U1 and FreeNAS-11.1U7

How to reproduce

  • Create a two virtual machine, one with FreeNAS-11.2U2 and the other with FreeNAS-11.2U1
  • Setup replication tasks between both machines

Workaround

  • Use standard cipher, but it takes more CPU

Related issues

Has duplicate FreeNAS - Bug #83268: "fast" cipher breaks replication between 11.2 serversClosed
Copied to FreeNAS - Bug #76179: FreeNAS 11.2U2 fails to replicate to previous version of FreeNAS with fast cipherDone

History

#1 Updated by Dru Lavigne almost 2 years ago

  • Assignee changed from Release Council to William Grzybowski

#2 Updated by William Grzybowski almost 2 years ago

  • Assignee changed from William Grzybowski to Vladimir Vinogradenko
  • Target version changed from Backlog to 11.2-U3

#3 Updated by Vladimir Vinogradenko almost 2 years ago

  • Status changed from Unscreened to Blocked
  • Reason for Blocked set to Waiting for feedback

William, arcfour256,arcfour128,blowfish-cbc ciphers have been removed completely in openssh 7.6, do we want to bring them back with a patch?

#5 Updated by Bug Clerk almost 2 years ago

  • Status changed from Unscreened to In Progress

#6 Updated by Bug Clerk almost 2 years ago

  • Status changed from In Progress to Ready for Testing

#7 Updated by Bug Clerk almost 2 years ago

  • Copied to Bug #76179: FreeNAS 11.2U2 fails to replicate to previous version of FreeNAS with fast cipher added

#8 Updated by Dru Lavigne almost 2 years ago

  • Subject changed from FreeNAS 11.2U2 fails to replicate to previous version of FreeNAS with fast cipher to Remove unsupported replication ciphers
  • Needs Doc changed from Yes to No
  • Needs Merging changed from Yes to No

#9 Updated by Vladimir Vinogradenko over 1 year ago

Acceptance Criteria

Replication from FN 11.2-U2 to any other FN with "fast" cipher should work

#12 Updated by Jeff Ervin over 1 year ago

60366
60375
60384

Test Passed FreeNAS-11.2-U2-INTERNAL98

Replicated (Fast Cipher setting) from FreeNAS Mini to VM (both on INTERNAL 98).

#13 Updated by Dru Lavigne over 1 year ago

  • Status changed from Passed Testing to Done

#14 Updated by Dru Lavigne over 1 year ago

  • Related to Bug #83268: "fast" cipher breaks replication between 11.2 servers added

#15 Updated by Dru Lavigne over 1 year ago

  • Related to deleted (Bug #83268: "fast" cipher breaks replication between 11.2 servers)

#16 Updated by Dru Lavigne over 1 year ago

  • Has duplicate Bug #83268: "fast" cipher breaks replication between 11.2 servers added

Also available in: Atom PDF