Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [eclipse.org-committers] SSH ciphers on dev/git.eclipse.org

Hi

Sorry. It is com.jcraft.jsch that must be updated to 0.1.53, and since 0.1.51 can co-exist after an update, 0.1.51 must be actively removed. New Eclipse installation recomended.

    Regards

        Ed Willink

On 02/10/2015 11:23, Denis Roy wrote:
Greetings,

If you've recently been unable to connect to Pure Git (not Gerrit) repos
using SSH, it's likely because we've disabled older ciphers that are now
considered insecure, or easy to break.

At Eclipse we can not risk running insecure ciphers, since our SSH ports
are open to the world[1]. These new cipher restrictions currently do not
apply to Gerrit, but I would expect Gerrit to follow suit shortly.

If you're using eGit, updating to the latest version will allow you to
use SSH safely.  Please see http://eclip.se/478690 for more details.

Apologies for the short notice.  If you have any questions or concerns,
please don't hesitate to contact us at webmaster@xxxxxxxxxxx.

Denis




[1] Our plan is to completely shut off SSH access to dev/git.eclipse.org
on port 22 to greatly reduce our exposure. See http://eclip.se/452549
for details.


_______________________________________________
eclipse.org-committers mailing list
eclipse.org-committers@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/eclipse.org-committers

IMPORTANT: Membership in this list is generated by processes internal to the Eclipse Foundation.  To be permanently removed from this list, you must contact emo@xxxxxxxxxxx to request removal.


-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2015.0.6140 / Virus Database: 4435/10742 - Release Date: 10/02/15





Back to the top