Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated pom.xml by upgrading the jsch plugin to V0.1.55 #18

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dev-medha-io
Copy link

JENKINS-56031 - SSH plugin fails intermittently because of issue with JSch plugin
Upgrading to latest version of Jsch (v0.1.55) which fixes the underlying issue.

JENKINS-56031 - SSH plugin rains intermittently with because of issue with JSch
@jeffret-b
Copy link

@jvz Could you review also?

@jeffret-b
Copy link

@ljader, just pinging you hoping you'll see this. This PR is a follow-on to earlier work I did in releasing the jsch plugin version 0.1.55. I think it would be good to incorporate this change into the ssh-plugin. It should easily take care of issues some people have seen.

@oleg-nenashev
Copy link
Member

@ljader Hi, are you still interested in maintaining this plugin? If not, would it be fine if I put it for adoption?

@monksy
Copy link
Contributor

monksy commented Aug 29, 2023

So jch the official version doesn't support private newer private key files and it also tries to force the usage of ssh-rsa from the public key. (No longer supported anymore )

New recommended approach: Theres a fork of jsch. JSch is wildly abandonware at the moment:

https://github.com/mwiede/jsch

From the fork

As of the 0.2.0 release, the RSA/SHA1 signature algorithm is disabled by default.

SHA1 is no longer considered secure by the general cryptographic community and this JSch fork strives to maintain secure choices for default algorithms that it will utilize.
This also follows the lead of the OpenSSH project in which they disabled RSA/SHA1 signatures by default as of [OpenSSH release 8.8](https://www.openssh.com/txt/release-8.8).

@jvz

@MarkEWaite MarkEWaite mentioned this pull request Oct 13, 2023
5 tasks
@ptsneves
Copy link

Any reason this is not merged?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants