Curl compiled with libssh2 - for Sparc Solaris 10

Abbott, Mark MAbbott at bgcpartners.com
Thu Jan 24 15:18:38 CET 2019


Specifically these are the Algo/Ciphers/MACs which we are being restricted on the SFTP servers we download from, as of
March 10th.

Right now we're dead in the water in respect of maintaining those automated curl downloads from our Solaris 10 boxes
without a version of curl which uses libssh2 1.8.0 or later, so please if anyone can assist and let us know that something
will be available in the v. short term that would be amazing.


Key Exchange Algorithms

*         curve25519-sha256

*         curve25519-sha256 at libssh.org<mailto:curve25519-sha256 at libssh.org>

*         diffie-hellman-group18-sha512

*         diffie-hellman-group14-sha256

*         diffie-hellman-group16-sha512

*         diffie-hellman-group-exchange-sha256

*         ecdh-sha2-nistp256

*         ecdh-sha2-nistp384

*         ecdh-sha2-nistp521

Ciphers

*         chacha20-poly1305 at openssh.com<mailto:chacha20-poly1305 at openssh.com>

*         aes256-gcm at openssh.com<mailto:aes256-gcm at openssh.com>

*         aes128-gcm at openssh.com<mailto:aes128-gcm at openssh.com>

*         aes256-ctr

*         aes192-ctr

*         aes128-ctr

MACs

*         hmac-sha2-512-etm at openssh.com<mailto:hmac-sha2-512-etm at openssh.com>

*         hmac-sha2-256-etm at openssh.com<mailto:hmac-sha2-256-etm at openssh.com>

*         umac-128-etm at openssh.com<mailto:umac-128-etm at openssh.com>

*         hmac-sha2-512

*         hmac-sha2-256



We have the latest packages available from the "unstable" release tree installed.... But libssh2/1.4.2  is the problem...

If CURL is re-compiled with libssh2  1.8.0  the problem goes away immediately... but with 1.4.2 it just can't complete
negotiation with the above MAC/Cipher/KeyEx restrictions.

root at lonsett-p1 / # pkginfo | grep curl | grep CSW
application CSWcurl                          curl - A command line tool and library for client-side URL transfers
application CSWlibcurl4                      libcurl4 - Library for client-side URL transfers, libcurl.so.4
application CSWlibcurl4-feature              libcurl4_feature - Full-features library for client-side URL transfers superseding libcurl.so.4

root at lonsett-p1 / # curl -V
curl 7.63.0 (sparc-sun-solaris2.10) libcurl/7.63.0 OpenSSL/1.0.2o zlib/1.2.8 brotli/1.0.2 c-ares/1.10.0 libidn2/2.0.4 libpsl/0.19.1 (+libidn2/2.0.4) libssh2/1.4.2 nghttp2/1.30.0 librtmp/2.3
Release-Date: 2018-12-12
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz brotli TLS-SRP HTTP2 UnixSockets HTTPS-proxy PSL Metalink


Thanks Again,

Mark


From: users [mailto:users-bounces+mabbott=bgcpartners.com at lists.opencsw.org] On Behalf Of CMH via users
Sent: 24 January 2019 14:01
To: users at lists.opencsw.org
Cc: CMH
Subject: Re: Curl compiled with libssh2 - for Sparc Solaris 10

I would very interested in this as well.

Hello Open CSW Team,

Please can you I beg one of you to compile a version of CURL for Solaris Sparc 10 using
libssh2 1.8.0 or later.

The current "unstable" repository version still uses libssh2 v1.4.2 and  unfortunately we
are being restricted by the  MACs/Key Algos & Ciphers for SFTP connectivity next month
and I've only managed to get it working on Fedora at home which has curl built with
1.8.0 libssh2 - so this is the key.

Doesn't matter so much which version of Curl is compiled It just has to be compiled
with 1.8.0 libssh2.

If you could help me here I would be v. v. grateful.

Thanks,

Mark
________________________________
CONFIDENTIAL
An electronic communication(s)/message(s), including its contents and attachments, if any, may contain privileged or confidential information, or may be otherwise protected by work product immunity or other legal rules. No confidentiality or privilege is waived by any erroneously transmitted communication. Accessing, copying or re-using of information by non-intended or non-authorized recipients is prohibited. If you are not the named recipient please notify the sender and immediately delete this communication. You may not disseminate, distribute, or forward this message or disclose its contents to anybody else. Copyright and any other intellectual property rights in its contents are the sole property of BGC Partners Inc. and its affiliates (collectively, "BGC," "we," or "us").

MAY CONTAIN ERRORS AND/OR VIRUSES
Electronic communications/messages cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of such transmission. If verification is required, please request a hard-copy version.

Although we routinely screen for viruses, recipients should check this communications/message and any attachments for viruses. We make no representation or warranty as to the absence of viruses in this e-mail or any attachments. Please note that, to ensure regulatory compliance and for the protection of our customers and business, we may monitor and read e-mails sent to and from server(s) used by us.

INFORMATION PURPOSES ONLY
The information contained in this electronic communication/message and any attachments is for information purposes, and should not be regarded as an offer to sell, or a solicitation of an offer to buy, any security in any jurisdiction where such an offer or solicitation would be in violation of any local laws. It does not constitute a recommendation or take into account the particular investment objectives, financial conditions, or needs of specific investors. Any prices or data contained herein are indicative and do not represent where the underlying instrument(s) may trade in the market at any given point in time, nor does such price(s) represent a determination of the underlying value of a particular instrument(s). This information may be changed at any time without notice or obligation to update. BGC accepts no liability for any loss (whether direct, indirect or consequential) that may arise from any use of the information contained herein or derived herefrom. Reliance may not be placed on trade confirmations issued other than by our Operations Department.

RETENTION
Please note that any electronic communications/messages conducted within or through BGC systems is subject to monitoring, review, retention, and external production.

BGC Financial LP is a broker-dealer registered with the U.S. Securities and Exchange, a member of FINRA and a member of SIPC.

BGC Financial LP is a member of the National Futures Association as a swap firm and a futures commission merchant.

BGC Derivatives Markets LP is a swap execution facility registered with the Commodity Futures Trading Commission.

BGC Brokers LP ("BGCB") is authorised and regulated by the Financial Conduct Authority ("FCA"). BGCB is a Limited Partnership formed under the laws of England (under Limited Partnership Act 1907 LP011453) and its VAT registration number is 577 406809. BGCB's registered office is at 12 Endeavour Square, London, E20 1JN. For any issues arising from this email please reply to the sender.

BGCB appears on the FCA register under no 454814. The FCA register appears at www.fca.org.uk/register<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.fca.org.uk_register&d=DwMF-g&c=3v6EBbtpnn9A7jIZYjOw6KN7Pe17WoimzcinOq2Xztg&r=h1BgflT2I7NyYPzaLZCy6lFcAOsJtijy_yb0p-xhBKE&m=6UhvTGJT4oaYbplOYIiAEB1wmtNeCWlXduRCMKiydyY&s=HLBtG5Vs2yr3LkPoLujS2pwquiIjikdY9D3t2f0eAVA&e=>. The FCA is a financial services industry regulator in the United Kingdom and is located at 12 Endeavour Square, London, E20 1JN.

An individuals' personal data under the GDPR - For further information about the way BGC entities (and relevant affiliates) within the European Economic Area (EEA) use your personal data please see our Third Party Privacy Notice at www.bgcpartners.com/notices/<http://www.bgcpartners.com/notices/> or at such other place as we may provide notice of from time to time.
Marketing within the European Economic Area - BGC entities within the EEA may contact you about industry news, offers and information relating to their products and services which they think would be of interest to you. You can tell them you do not wish to receive such communications by contacting them at DPM at bgcpartners.com<mailto:DPM at bgcpartners.com>.
For additional disclosures, please visit http://www.bgcpartners.com/disclaimers/



--

Systems Since 1948

Craig M. Houck ><>

Tech Hub/Computer Center

   3rd Floor 332

     607 777 6827

We are only as good as the problems we solve!

----------------------------------------------------------------------
CONFIDENTIAL 
An electronic communication(s)/message(s), including its contents and attachments, if any, may contain privileged or confidential information, or may be otherwise protected by work product immunity or other legal rules.  No confidentiality or privilege is waived by any erroneously transmitted communication.  Accessing, copying or re-using of information by non-intended or non-authorized recipients is prohibited.  If you are not the named recipient please notify the sender and immediately delete this communication.  You may not disseminate, distribute, or forward this message or disclose its contents to anybody else. Copyright and any other intellectual property rights in its contents are the sole property of BGC Partners Inc.  and its affiliates (collectively, “BGC,” “we,” or “us”).

MAY CONTAIN ERRORS AND/OR VIRUSES
Electronic communications/messages cannot be guaranteed to be secure or error-free.  The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of such transmission.  If verification is required, please request a hard-copy version.

Although we routinely screen for viruses, recipients should check this communications/message and any attachments for viruses.  We make no representation or warranty as to the absence of viruses in this e-mail or any attachments.  Please note that, to ensure regulatory compliance and for the protection of our customers and business, we may monitor and read e-mails sent to and from server(s) used by us.
 
INFORMATION PURPOSES ONLY
The information contained in this electronic communication/message and any attachments is for information purposes, and should not be regarded as an offer to sell, or a solicitation of an offer to buy, any security in any jurisdiction where such an offer or solicitation would be in violation of any local laws.  It does not constitute a recommendation or take into account the particular investment objectives, financial conditions, or needs of specific investors.  Any prices or data contained herein are indicative and do not represent where the underlying instrument(s) may trade in the market at any given point in time, nor does such price(s) represent a determination of the underlying value of a particular instrument(s).  This information may be changed at any time without notice or obligation to update.  BGC accepts no liability for any loss (whether direct, indirect or consequential) that may arise from any use of the information contained herein or derived herefrom.  Reliance may not be placed on trade confirmations issued other than by our Operations Department. 

RETENTION
Please note that any electronic communications/messages conducted within or through BGC systems is subject to monitoring, review, retention, and external production.

BGC Financial LP is a broker-dealer registered with the U.S. Securities and Exchange, a member of FINRA and a member of SIPC.

BGC Financial LP is a member of the National Futures Association as a swap firm and a futures commission merchant.   

BGC Derivatives Markets LP is a swap execution facility registered with the Commodity Futures Trading Commission.

BGC Brokers LP ("BGCB") is authorised and regulated by the Financial Conduct Authority ("FCA"). BGCB is a Limited Partnership formed under the laws of England (under Limited Partnership Act 1907 LP011453) and its VAT registration number is 577 406809. BGCB's registered office is at 12 Endeavour Square, London, E20 1JN. For any issues arising from this email please reply to the sender.

BGCB appears on the FCA register under no 454814. The FCA register appears at www.fca.org.uk/register.  The FCA is a financial services industry regulator in the United Kingdom and is located at 12 Endeavour Square, London, E20 1JN.

An individuals’ personal data under the GDPR - For further information about the way BGC entities (and relevant affiliates)  within the European Economic Area (EEA) use your personal data please see our Third Party Privacy Notice at www.bgcpartners.com/notices/ or at such other place as we may provide notice of from time to time.
Marketing within the European Economic Area - BGC entities within the EEA may contact you about industry news, offers and information relating to their products and services which they think would be of interest to you. You can tell them you do not wish to receive such communications by contacting them at DPM at bgcpartners.com.
For additional disclosures, please visit http://www.bgcpartners.com/disclaimers/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/users/attachments/20190124/032acb48/attachment-0001.html>


More information about the users mailing list