Re: [cp-patches] DiffieHellman and RSA

[Casey Marshall]

On Sep 27, 2005, at 5:44 PM, Thomas Fitzsimmons wrote:

> OK, your latest fixes get Eclipse a little farther.  Now I'm seeing
> this:
>
> org.eclipse.team.internal.ccvs.ssh2.CVSSSH2ServerConnection 
> $SSH2IOException: verify: false
> [...]
> Any idea?

Yeah, and this is where I could get to trying to run a stand-alone  
shell. There's a bug in our RSA signature class, apparently, so the  
server's signature is being rejected in the SSH key exchange.

It's baffling. From what I can tell the RSA decryption is correct (I  
get the correct binary structure out of the signature) but the hashes  
(SHA1) are different. I've even confirmed that SHA-1 isn't the  
problem, because I get the same hash if I run SHA-1 on the data by hand.