<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>Hi,</div>
<div> </div>
<div>Looks like I rushed in to conclusions too early afterall :).</div>
<div> </div>
<div>
<div><span style="font-family:Courier New,Courier,monospace;">$ echo Host jpl0374.local >> ~/.ssh/config<br/>
$ echo Ciphers +aes128-cbc >> ~/.ssh/config<br/>
$ ssh ovms@jpl0374.local<br/>
The authenticity of host 'jpl0374.local (192.168.0.157)' can't be established.<br/>
RSA key fingerprint is SHA256:ySo795OLgEvIXqhzR+nh7wqy82ohg4Bw0rh0DE1bsC8.<br/>
Are you sure you want to continue connecting (yes/no)? yes<br/>
Warning: Permanently added 'jpl0374.local,192.168.0.157' (RSA) to the list of known hosts.<br/>
ovms@jpl0374.local's password: </span></div>
<div><span style="font-family:Courier New,Courier,monospace;">Welcome to the Open Vehicle Monitoring System (OVMS) - SSH Console<br/>
Firmware: 3.2.005-81-g00ab9db/ota_1/edge<br/>
Hardware: OVMS WIFI BLE BT cores=2 rev=ESP32/1</span></div>
<div><span style="font-family:Courier New,Courier,monospace;">OVMS# </span><br/>
</div>
</div>
<div> </div>
<div>I can't believe how did I miss this clear note...:</div>
<div> </div>
<div>
<p><em>A note about OpenSSH: with version 6.6, cipher aes128-cbc has been disabled by default and needs to be enabled manually, either on the command line:</em></p>
<blockquote>
<div><em><code>ssh -c aes128-cbc user@ip</code></em></div>
</blockquote>
<p><em>…or by adding a host entry to your ~/.ssh/config.</em></p>
</div>
<div> </div>
<div>Regards,</div>
<div>Jaunius</div>
<div>
<div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin:0 0 10px 0;"><b>Sent:</b> Sunday, October 27, 2019 at 7:49 PM<br/>
<b>From:</b> "Michael Balzer" <dexter@expeedo.de><br/>
<b>To:</b> ovmsdev@lists.openvehicles.com<br/>
<b>Subject:</b> Re: [Ovmsdev] SSH Access</div>
<div name="quoted-content">…or allow the cipher manually as shown in the documentation:<br/>
<br/>
<a href="https://docs.openvehicles.com/en/latest/userguide/console.html#ssh-console" target="_blank">https://docs.openvehicles.com/en/latest/userguide/console.html#ssh-console</a><br/>
<br/>
<div class="moz-cite-prefix">Am 27.10.19 um 18:45 schrieb Michael Balzer:</div>
<blockquote>Jaunius,<br/>
<br/>
I don't see your explanation… that note just tells you you can ssh via GSM into the module if your data plan supports it, which has btw been done successfully by some users and is considered useful.<br/>
<br/>
If you have correctly put your public key into the config store as documented, maybe you've missed the cipher deprecation issue.<br/>
You need to add a host entry to your ~/.ssh/config like this:<br/>
<br/>
<tt>> cat ~/.ssh/config</tt><br/>
<tt>Host dexze85.local</tt><br/>
<tt>Ciphers +aes128-cbc</tt><br/>
<br/>
Regards,<br/>
Michael<br/>
<br/>
<div class="moz-cite-prefix">Am 27.10.19 um 18:38 schrieb Jaunius Kapkan:</div>
<blockquote>
<div style="font-family: Verdana;font-size: 12.0px;">
<div>
<div>Okay, this explains it :)</div>
<div> </div>
<div><a href="https://raw.githubusercontent.com/openvehicles/Open-Vehicle-Monitoring-System-3/master/vehicle/OVMS.V3/knownissues.txt" target="_blank">https://raw.githubusercontent.com/openvehicles/Open-Vehicle-Monitoring-System-3/master/vehicle/OVMS.V3/knownissues.txt</a></div>
<div>
<pre>* SSH, TELNET, and WEBSERVER all register listeners for incoming calls. There
is a possible security issue here as those calls may come over cellular
networks (not just wifi). There is no firewalling of these calls. It seems
that the correct approach to this is to validate the destination IP to
make sure it is a wifi interface IP address; but this is not currently
done.</pre>
</div>
<div>
<div style="margin: 10.0px 5.0px 5.0px 10.0px;padding: 10.0px 0 10.0px 10.0px;border-left: 2.0px solid rgb(195,217,229);">
<div style="margin: 0 0 10.0px 0;"><b>Sent:</b> Sunday, October 27, 2019 at 7:33 PM<br/>
<b>From:</b> "Jaunius Kapkan" <a class="moz-txt-link-rfc2396E" href="mailto:jaunius@gmx.com" onclick="parent.window.location.href='mailto:jaunius@gmx.com'; return false;" target="_blank"><jaunius@gmx.com></a><br/>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:ovmsdev@lists.openvehicles.com" onclick="parent.window.location.href='mailto:ovmsdev@lists.openvehicles.com'; return false;" target="_blank">ovmsdev@lists.openvehicles.com</a><br/>
<b>Subject:</b> [Ovmsdev] SSH Access</div>
<div>
<div style="font-family: Verdana;font-size: 12.0px;">
<div>Hi,</div>
<div> </div>
<div>I have been strugling getting SSH working for some time now. Tried both password access and key auth. I think the same issue was discussed before for V3, but I have not seen the final rezolution. </div>
<div> </div>
<div>Verbose output from client side:</div>
<div> </div>
<div>debug1: Local version string SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3<br/>
debug1: Remote protocol version 2.0, remote software version wolfSSHv1.1.0<br/>
debug1: no match: wolfSSHv1.1.0<br/>
debug1: Authenticating to 192.168.0.157:22 as 'ovms'<br/>
debug1: SSH2_MSG_KEXINIT sent<br/>
Connection closed by 192.168.0.157 port 22<br/>
</div>
<div>Regards,</div>
<div>Jaunius</div>
</div>
_______________________________________________ OvmsDev mailing list <a class="moz-txt-link-abbreviated" href="mailto:OvmsDev@lists.openvehicles.com" onclick="parent.window.location.href='mailto:OvmsDev@lists.openvehicles.com'; return false;" target="_blank">OvmsDev@lists.openvehicles.com</a> <a href="http://lists.openvehicles.com/mailman/listinfo/ovmsdev" target="_blank">http://lists.openvehicles.com/mailman/listinfo/ovmsdev</a></div>
</div>
</div>
</div>
</div>
<fieldset class="mimeAttachmentHeader"> </fieldset>
<pre class="moz-quote-pre">_______________________________________________
OvmsDev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OvmsDev@lists.openvehicles.com" onclick="parent.window.location.href='mailto:OvmsDev@lists.openvehicles.com'; return false;" target="_blank">OvmsDev@lists.openvehicles.com</a>
<a class="moz-txt-link-freetext" href="http://lists.openvehicles.com/mailman/listinfo/ovmsdev" target="_blank">http://lists.openvehicles.com/mailman/listinfo/ovmsdev</a>
</pre>
</blockquote>
<pre class="moz-signature">--
Michael Balzer * Helkenberger Weg 9 * D-58256 Ennepetal
Fon 02333 / 833 5735 * Handy 0176 / 206 989 26
</pre>
<fieldset class="mimeAttachmentHeader"> </fieldset>
<pre class="moz-quote-pre">_______________________________________________
OvmsDev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OvmsDev@lists.openvehicles.com" onclick="parent.window.location.href='mailto:OvmsDev@lists.openvehicles.com'; return false;" target="_blank">OvmsDev@lists.openvehicles.com</a>
<a class="moz-txt-link-freetext" href="http://lists.openvehicles.com/mailman/listinfo/ovmsdev" target="_blank">http://lists.openvehicles.com/mailman/listinfo/ovmsdev</a>
</pre>
</blockquote>
<pre class="moz-signature">--
Michael Balzer * Helkenberger Weg 9 * D-58256 Ennepetal
Fon 02333 / 833 5735 * Handy 0176 / 206 989 26
</pre>
_______________________________________________ OvmsDev mailing list OvmsDev@lists.openvehicles.com <a href="http://lists.openvehicles.com/mailman/listinfo/ovmsdev" target="_blank">http://lists.openvehicles.com/mailman/listinfo/ovmsdev</a></div>
</div>
</div>
</div></div></body></html>