topic Re: Upgrading SecureShell breaks SSH in Operating System - HP-UX

Upgrading SecureShell breaks SSH

marvin51796 — Mon, 03 Apr 2017 16:25:29 GMT

I was told by a vendor that i must upgrade my SecureShell to version 7.3 and OpenSSL to the latest version, but when i install SecureShell all of SSH function stops. I downloaded the depot from HPE, I am running 11vi3 on a BL860c patched with QPK2016.

Any Help would be appreciated, thanks

Re: Upgrading SecureShell breaks SSH

Bill Hassell — Mon, 03 Apr 2017 20:44:45 GMT

HP only supplies Secure Shell 7.03.003
(https://h20392.www2.hpe.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA)

and Open SSL is 1.0.2
(https://community.hpe.com/t5/forums/replypage/board-id/itrc-155/message-id/19727)

Where did you obtain the new products?
A lot of open source packges are available but may not follow HP standards for installation trees.

>> SSH function stops...

Can you provide the error messages and the commands you used?
Does it fail for sftp? scp? ssh?
What do you see in syslog.log?
Have you run ssh -vvv to another system to trace the negotiation?

Re: Upgrading SecureShell breaks SSH

marvin51796 — Tue, 04 Apr 2017 12:18:43 GMT

I got both patches from HPE ,but i only installed the SecureShell depot. The catch to this is it works fine on my test box, but i dont know what to look at to find out why it is breaking the producation server.

Thanks

Re: Upgrading SecureShell breaks SSH

marvin51796 — Tue, 04 Apr 2017 13:56:01 GMT

I also found out that there is FIPS_OPENSSL loaded on the producation boxes and NOT in the test boxes..I am not sure what this is or why its loaded.

Re: Upgrading SecureShell breaks SSH

Charles2018 — Tue, 26 Jun 2018 08:51:09 GMT

I want to get the SecureShell to version 7.3 and OpenSSL to the latest version, I downloaded the SecureShell depot from HPE, but not downloaded Openssl depot yet , I am running 11vi1 on a hp RP7420,.

Any Help would be appreciated, thanks

Re: Upgrading SecureShell breaks SSH

Bill Hassell — Fri, 29 Jun 2018 15:17:04 GMT

You will need OpenSSL as SSH depends on it.

Re: Upgrading SecureShell breaks SSH

H.Merijn Brand (procura — Thu, 05 Jul 2018 09:15:36 GMT

You can find OpenSSL 1.0.2n and OpenSSH 7.6p1 depots for HP-UX 11.31 (11iv3) on my site.

Re: Upgrading SecureShell breaks SSH

H.Merijn Brand (procura — Thu, 05 Jul 2018 09:18:48 GMT

You can find OpenSSL 1.0.2n and OpenSSH 7.6p1 for HP-UX 11.11 PA-RISC2 on my site