Hi. I'm trying to use my sftp client on solaris 9 to connect to an sftp server. ssh is installed correctly and I can see my pub/priv key files in the ~/.ssh directory. When I run sftp -v <target> I get:

bash-2.05# sftp -v retsdsa.merlin.mb.ca
Connecting to retsdsa.merlin.mb.ca...
debug1: SSH args "ssh -oProtocol = 2 -s -oForwardAgent = no -oForwardX11 = no -v retsdsa.merlin.mb.ca sftp"
SSH Version Sun_SSH_1.0, protocol versions 1.5/2.0.
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: ssh_connect: getuid 0 geteuid 0 anon 0
debug1: Connecting to retsdsa.merlin.mb.ca [216.73.78.6] port 22.
debug1: Allocated local port 1023.
debug1: Connection established.
debug1: Bad RSA1 key file /export/home/root/.ssh/id_rsa.
debug1: identity file /export/home/root/.ssh/id_rsa type 3
debug1: identity file /export/home/root/.ssh/id_dsa type 3
debug1: Remote protocol version 2.0, remote software version CoreFTP-0.1.2
debug1: no match: CoreFTP-0.1.2
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-Sun_SSH_1.0
debug1: sent kexinit: diffie-hellman-group1-sha1
debug1: sent kexinit: ssh-rsa,ssh-dss
debug1: sent kexinit: aes128-cbc,blowfish-cbc,3des-cbc,rijndael128-cbc
debug1: sent kexinit: aes128-cbc,blowfish-cbc,3des-cbc,rijndael128-cbc
debug1: sent kexinit: hmac-sha1,hmac-md5
debug1: sent kexinit: hmac-sha1,hmac-md5
debug1: sent kexinit: none
debug1: sent kexinit: none
debug1: sent kexinit:
debug1: sent kexinit:
debug1: send KEXINIT
debug1: done
debug1: wait KEXINIT
debug1: got kexinit: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1
debug1: got kexinit: ssh-rsa
debug1: got kexinit: aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc@lysator.liu.se
debug1: got kexinit: aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc@lysator.liu.se
debug1: got kexinit: hmac-sha1,hmac-md5,none
debug1: got kexinit: hmac-sha1,hmac-md5,none
debug1: got kexinit: none,none
debug1: got kexinit: none,none
debug1: got kexinit:
debug1: got kexinit:
debug1: first kex follow: 0
debug1: reserved: 0
debug1: done
debug1: kex: server->client unable to decide common locale
debug1: kex: server->client aes128-cbc hmac-sha1 none
debug1: kex: client->server unable to decide common locale
debug1: kex: client->server aes128-cbc hmac-sha1 none
debug1: Sending SSH2_MSG_KEXDH_INIT.
debug1: bits set: 489/1024
debug1: Wait SSH2_MSG_KEXDH_REPLY.
debug1: Got SSH2_MSG_KEXDH_REPLY.
debug1: Host 'retsdsa.merlin.mb.ca' is known and matches the RSA host key.
debug1: Found key in /export/home/root/.ssh/known_hosts:2
debug1: bits set: 495/1024
debug1: ssh_rsa_verify: signature correct
debug1: Wait SSH2_MSG_NEWKEYS.


As you can see, I'm stuck at "Wait SSH2_MSG_NEWKEYS". Any suggestions?

Sean

p.s. I tried the connection from a windows box using coreftp and sftp connects fine. So my server account is good.

I can tell from the above that it's complaining that my keys are bad. How can that be? These are they keys that were created during the ssh install.

Okay, I solved the problem. My version of OpenSSL was too low.