couldn't match all kex parts

[arnsterling]

From Kali Linux to opencanary honeypot

ssh user@192.168.101.108
Received disconnect from 192.168.101.108 port 22:3: couldn't match all kex parts
Disconnected from 192.168.101.108 port 22

This is on the latest build from github.
In the previous thread there were recommendations to update Twisted and add /etc/ssh/moduli
So I have taken the following steps:

apt-get update && apt-get upgrade
git clone https://github.com/thinkst/opencanary.git
cd opencanary
nano setup.py

#change from
'Twisted==19.10.0',
'pyasn1==0.4.5',
'cryptography==3.0',

#change to
'Twisted==22.4.0',
'pyasn1==0.4.5',
'cryptography==37.0.2',

nano Dockerfile.latest

#change from
RUN pip install -r requirements.txt

#change to
RUN apt-get update && apt-get install -y sudo && pip install -r requirements.txt

sudo docker build -t opencanary -f Dockerfile.latest .
sudo docker images

curl https://github.com/thinkst/opencanary/files/834087/moduli.txt > moduli

mkdir confv1
cp data/twistd.pid confv1/twistd.pid && cp data/'twistd 2.pid' confv1/'twistd 2.pid'
cd confv1
nano opencanary.conf
#insert opencanary config file

sudo docker run -it --name opencanaryv5 --net=ipcanarynet --ip 192.168.101.108 -p 80:80 -p 21:21 -p 22:22 -p 69:69 -v /home/itadmin/opencanary/logs:/usr/share/logs -v /home/itadmin/opencanary/confv1:/root -v /home/itadmin/opencanary/moduli:/etc/ssh/moduli opencanary /bin/bash

cd /root && opencanaryd --start

I've mounted the updated moduli file and cat /etc/ssh/moduli works
Everything runs and works. However from kali linux I cannot SSH.
I can SSH from debian 10 and from windows.
I can ftp from kali linux to the opencanary honeypot but I cannot SSH to the opencanary honeypot from kali even after updating twisted, cryptography, and adding the moduli file.

[jayjb]

Hi @arnsterling,

Thanks for reporting this. I'll look into it and get back to you.

[brunohenriquy]

Having the same issue. Any news about it @jayjb ?

[jayjb]

Hi @brunohenriquy (and @arnsterling),

Sorry for the delay. We are currently in a update cycle which should be sorted in the next few weeks. Once that is sorted, we will be revisiting all the Opencanary issues and trying to get them sorted for you.

[brunohenriquy]

Awesome, thank you @jayjb!

[emmanuel-thinkst]

Hi @arnsterling

Sorry for the late response. We have added a change to try to resolve the issue you are having. All tests from our side pass.
Please pull the latest changes from our master branch and run our opencanary. And please feel free to reopen the issue with replication steps should the error persist for you.

Thank You.