Details
-
Type:
Improvement
-
Status:
Fix Committed
-
Priority:
Unknown
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 10.20.0, 11.2.0-client
-
Component/s: Chef Client, Chef Solo, Knife
-
Labels:
Description
Please update Net::SSH dependency to version 2.5.2
The current version of Chef depends on Net::SSH 2.2.2 which only supports
limited HMAC algorithms for transport (MD5 and SHA1 family). For certain
clients, we require newer algorithms (HMAC SHA2 family), which are
supported in Net-SSH 2.5.2. Connecting to nodes, which have transport
HMAC limited to these algorithms is currently not possible.
Reference for available HMAC algorithms in Net::SSH:
net-ssh-2.2.2/lib/net/ssh/transport/hmac.rb
net-ssh-2.5.2/lib/net/ssh/transport/hmac.rb
net-ssh 2.5.0 would add support for ECDSA too (
CHEF-2977).