unable to connect to FUSE ESB 4.2.0-fuse-02-00 via ssh

[ciand7]

Using latest FUSE ESB 4.2.0-fuse-02-00.

When I try to connect to smx via ssh, I get ssh error:

===

no matching cipher found: client aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,[e-mail],aes128-ctr,aes192-ctr,aes256-ctr server

===

jdk 1.6.0_18 and 1.6.0_20 x64 RedHat

Previous FUSE ESB version 4.2.0-fuse-01-00 works fine.

[tranchida]

Same problem for me

[mikebevz]

The same problem on Windows Server 2008, FUSE ESB 4.2.0-fuse-02-0 run as service using bundled wrapper.

[olli_poyry_ext-olli.poyry]

Check this on http://fusesource.com/wiki/display/ProdInfo/FUSEESBv4.2.0ReleaseNotes:

1. FELIX-2361 : Ubuntu no longer ships with support for the required ciphers for our SSH connection. In order to allow SSH login to the container, you need to download and configure Bouncycastle as a security provider as explained in http://felix.apache.org/site/65-deploying-security-providers.html

I copied bcprov-jdk16-145.jar to lib from http://www.bouncycastle.org/latest_releases.html and added this line to ec/config.properties

org.apache.felix.karaf.security.providers = org.bouncycastle.jce.provider.BouncyCastleProvider

Note that the default user is smx/smx instead of karaf/karaf

Olli Pöyry

Helsinki, Finland

[olli_poyry_ext-olli.poyry]

Apparently a better solution is to edit bin/servicemix with -Djava.ext.dirs="$/jre/lib/ext instead of $/lib/ext

With the BouncyCastle solution explained in http://felix.apache.org/site/65-deploying-security-providers.html I got karaf ssh shell working, but then my application's Camel https: fetch bumped into javax.net.ssl.SSLKeyException: RSA premaster secret error.

See:

https://issues.apache.org/jira/browse/KARAF-124

https://issues.apache.org/jira/browse/KARAF-86

Olli