asuswrt cannot connect over ssh #20361

glentakahashi · 2019-01-23T21:37:25Z

Home Assistant release with the issue:
0.86.0b3

Last working Home Assistant release (if known):
0.85.1

Operating environment (Hass.io/Docker/Windows/etc.):
Docker raspberrypi3-homeassistant

Component/platform:
https://www.home-assistant.io/components/asuswrt/

Description of problem:
the asuswrt component can no longer connect over ssh, instead throwing an error about X25519 not being supported on this version of openssl. This applies to both password and key authentication.

Problem-relevant configuration.yaml entries and (fill out even if it seems unimportant):

asuswrt:
  host: 192.168.1.1
  protocol: ssh
  username: user
  ssh_key: asuswrt.key

Traceback (if applicable):

2019-01-23 16:07:24 ERROR (MainThread) [homeassistant.setup] Error during setup of component asuswrt
Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/homeassistant/setup.py", line 145, in _async_setup_component
    hass, processed_config)
  File "/usr/local/lib/python3.6/site-packages/homeassistant/components/asuswrt.py", line 61, in async_setup
    await api.connection.async_connect()
  File "/usr/local/lib/python3.6/site-packages/aioasuswrt/connection.py", line 66, in async_connect
    self._client = await asyncssh.connect(self._host, **kwargs)
  File "/usr/local/lib/python3.6/site-packages/asyncssh/misc.py", line 182, in __await__
    return (yield from self._coro)
  File "/usr/local/lib/python3.6/site-packages/asyncssh/connection.py", line 5454, in connect
    conn, _ = yield from create_connection(None, host, port, **kwargs)
  File "/usr/local/lib/python3.6/site-packages/asyncssh/connection.py", line 5110, in create_connection
    yield from auth_waiter
  File "/usr/local/lib/python3.6/site-packages/asyncssh/connection.py", line 627, in data_received
    while self._inpbuf and self._recv_handler():
  File "/usr/local/lib/python3.6/site-packages/asyncssh/connection.py", line 847, in _recv_packet
    processed = handler.process_packet(pkttype, seq, packet)
  File "/usr/local/lib/python3.6/site-packages/asyncssh/packet.py", line 215, in process_packet
    self._packet_handlers[pkttype](self, pkttype, pktid, packet)
  File "/usr/local/lib/python3.6/site-packages/asyncssh/connection.py", line 1414, in _process_kexinit
    self._kex = get_kex(self, kex_alg)
  File "/usr/local/lib/python3.6/site-packages/asyncssh/kex.py", line 122, in get_kex
    return handler(alg, conn, hash_alg, *args)
  File "/usr/local/lib/python3.6/site-packages/asyncssh/kex_ecdh.py", line 47, in __init__
    self._priv = ecdh_class(*args)
  File "/usr/local/lib/python3.6/site-packages/asyncssh/crypto/curve25519.py", line 31, in __init__
    self._priv_key = x25519.X25519PrivateKey.generate()
  File "/usr/local/lib/python3.6/site-packages/cryptography/hazmat/primitives/asymmetric/x25519.py", line 39, in generate
    _Reasons.UNSUPPORTED_EXCHANGE_ALGORITHM
cryptography.exceptions.UnsupportedAlgorithm: X25519 is not supported by this version of OpenSSL.

Additional information:

The text was updated successfully, but these errors were encountered:

jabesq · 2019-01-24T11:29:34Z

Same issue with Hass.io raspberrypi3 Operating environment

kennedyshead · 2019-01-24T13:48:04Z

OpenSSL is not a part of HASS, however what is the output of openssl version -a

ltjessem · 2019-01-24T14:14:21Z

I'm getting the same error after upgrading from 0.85.1 to 0.86.0, downgrading back to 0.85.1 works right away.

cgarwood · 2019-01-24T14:17:59Z

Not sure if related, but do any of you also use HomeKit? There was a homekit component update that upgraded a cryptography package: #20325

armata007 · 2019-01-24T14:22:41Z

I have the same error but do not use homekit. Downgrading helped

jabesq · 2019-01-24T15:59:58Z

Issue still present with 0.86.1

mmatesic01 · 2019-01-24T16:15:24Z

I confirm that on 0.86.1 the issue exists. It didn't on 0.85.1.

vinmar1 · 2019-01-24T16:16:16Z

Running Hassio on RPi3B+ Same issue, asuswrt died going from 0.85.1 to 0.86.0 says invalid configuration. I never got telnet to work but ssh has be pretty solid and going back to 0.85.1 fixes it immediately. I tried telnet again before falling back and it's still broken as well. I have ssh access only available by LAN in my router config to eliminate outside access so I'm not using a key.

In my configuration.yaml

asuswrt:
host: 192.168.1.1
username: my-login-id
password: my-password
protocol: ssh
port: 22

adas4190 · 2019-01-24T17:14:02Z

Same here. It is annoying that it it broken again.

pszewello · 2019-01-24T18:15:56Z

Same here :)

somar05 · 2019-01-24T19:21:01Z

Same. Downgrade and working again.

adas4190 · 2019-01-24T19:54:37Z

I belive it is very popular component and device tracking system and I don't understand why it is getting broken almost every time there is update. I love HA regardles but it make life hard sometimes especially when there is a lot of automation based on device tracking.

Is there any workaround?? (apart of downgrading - I like lovelace :))

vinmar1 · 2019-01-24T20:46:24Z

I belive it is very popular component and device tracking system and I don't understand why it is getting broken almost every time there is update. I love HA regardles but it make life hard sometimes especially when there is a lot of automation based on device tracking.

Is there any workaround?? (apart of downgrading - I like lovelace :))

You could temporarily use bluetooth as a tracker if you have it available but for me it just doesn't have the range, I have a big house so WiFi made more sense.

adas4190 · 2019-01-24T21:27:37Z

Same here 😁

mikenabhan · 2019-01-24T21:29:54Z

I am having the same issue.

adas4190 · 2019-01-24T22:25:50Z

Unfortunetely I cannot find better presence tracker than asuswrt - when it is working 😉

MajorGlory78 · 2019-01-24T22:33:33Z

Same issue here. Using SSH, not using a key. Just user/pass as it is all only accesible from LAN.

Junho83 · 2019-01-24T23:18:43Z

same problem.

Jefe2 · 2019-01-25T01:00:06Z

Same here. AsusWRT worked on 0.85.1, quit working upon upgrading to 0.86.1
RPi3B+, HassOS, SSH key.

bereska · 2019-01-25T04:07:14Z

same here, ok on 0.85.1, stopped working on 0.86.1, rpi3b+, docker, ssh

nphil · 2019-01-25T05:52:47Z

same issue here, using ssh key to log in

adas4190 · 2019-01-25T10:41:56Z

Telnet is broken aswell... at least for me

kennedyshead · 2019-01-25T11:03:55Z

For telnet I'd have to see your logs, please open an issue here: github.com/kennedyshead/aioasuswrt/issues/

For the ssh issue I'm 90% sure it have to do wit ssh-key and running in docker. A temporary solution would be to login without key for now and re-enable it when the problem in Hassio is solved.

ltjessem · 2019-01-25T11:13:17Z

Several people in this thread, including me, are not using ssh_key.

ltjessem · 2019-01-25T11:43:43Z

I just tried switching to telnet to eliminate OpenSSL from the picture and got the following:

Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/homeassistant/components/device_tracker/__init__.py", line 173, in async_setup_platform
    hass, {DOMAIN: p_config})
  File "/usr/local/lib/python3.6/site-packages/homeassistant/components/device_tracker/asuswrt.py", line 20, in async_get_scanner
    await scanner.async_connect()
  File "/usr/local/lib/python3.6/site-packages/homeassistant/components/device_tracker/asuswrt.py", line 37, in async_connect
    data = await self.connection.async_get_connected_devices()
  File "/usr/local/lib/python3.6/site-packages/aioasuswrt/asuswrt.py", line 171, in async_get_connected_devices
    dev = await self.async_get_wl()
  File "/usr/local/lib/python3.6/site-packages/aioasuswrt/asuswrt.py", line 107, in async_get_wl
    lines = await self.connection.async_run_command(_WL_CMD)
  File "/usr/local/lib/python3.6/site-packages/aioasuswrt/connection.py", line 91, in async_run_command
    await self.async_connect()
  File "/usr/local/lib/python3.6/site-packages/aioasuswrt/connection.py", line 113, in async_connect
    await self._reader.readuntil(b'login: ')
  File "/usr/local/lib/python3.6/asyncio/streams.py", line 578, in readuntil
    raise IncompleteReadError(chunk, None)
asyncio.streams.IncompleteReadError: 0 bytes read on a total of None expected bytes

kennedyshead · 2019-01-25T11:49:41Z

I just tried switching to telnet to eliminate OpenSSL from the picture and got the following:

Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/homeassistant/components/device_tracker/__init__.py", line 173, in async_setup_platform
    hass, {DOMAIN: p_config})
  File "/usr/local/lib/python3.6/site-packages/homeassistant/components/device_tracker/asuswrt.py", line 20, in async_get_scanner
    await scanner.async_connect()
  File "/usr/local/lib/python3.6/site-packages/homeassistant/components/device_tracker/asuswrt.py", line 37, in async_connect
    data = await self.connection.async_get_connected_devices()
  File "/usr/local/lib/python3.6/site-packages/aioasuswrt/asuswrt.py", line 171, in async_get_connected_devices
    dev = await self.async_get_wl()
  File "/usr/local/lib/python3.6/site-packages/aioasuswrt/asuswrt.py", line 107, in async_get_wl
    lines = await self.connection.async_run_command(_WL_CMD)
  File "/usr/local/lib/python3.6/site-packages/aioasuswrt/connection.py", line 91, in async_run_command
    await self.async_connect()
  File "/usr/local/lib/python3.6/site-packages/aioasuswrt/connection.py", line 113, in async_connect
    await self._reader.readuntil(b'login: ')
  File "/usr/local/lib/python3.6/asyncio/streams.py", line 578, in readuntil
    raise IncompleteReadError(chunk, None)
asyncio.streams.IncompleteReadError: 0 bytes read on a total of None expected bytes

Have you set port 23?

ltjessem · 2019-01-25T11:55:39Z

Yes I am, here's the relevant config, sorry I forgot to include that:

asuswrt:
  host: 192.168.1.1
  protocol: telnet
  username: admin
  password: ***
  port: 23

device_tracker:
  - platform: asuswrt
    interval_seconds: 60
    consider_home: 600
    new_device_defaults:
      track_new_devices: false

olskar · 2019-01-25T16:20:52Z

@glentakahashi Oh i see :)

pixeldublu · 2019-01-25T16:36:51Z

+1

jokerigno · 2019-01-25T18:09:37Z

Same error on 0.86.2

kennedyshead · 2019-01-25T20:06:01Z

Could someone please test pip install https://github.com/kennedyshead/aioasuswrt/archive/master.zip and check if that version works in your installation. (for SSH bug)

gabe565 · 2019-01-25T20:18:49Z

Could someone please test pip install https://github.com/kennedyshead/aioasuswrt/archive/master.zip and check if that version works in your installation. (for SSH bug)

That seems to have fixed the cryptography.exceptions.UnsupportedAlgorithm error for me. The 1.1.18 release looks like it will fix.

Edit: Did this fix for anybody else? I had duplicated the asuswry.py component and had it as a custom component called asuswrt2.py and it had seemed to be working, but now I am not sure it's fixed. If I name it to asuswrt.py as a custom component to override the original, I start getting errors again.

Junho83 · 2019-01-25T23:30:47Z

Is this problem solved?

adas4190 · 2019-01-25T23:39:14Z

How can I try that fix on hassos? Sorry but I don't know how to use it.
It doesn't work on hassos terminal

olskar · 2019-01-26T09:19:39Z

It should be fixed, it is merged so hopefully we can get a 0.86.3 release soon with this included.

Jc2k · 2019-01-26T13:56:02Z

Note that the underlying root cause of this is that HASS.io uses alpine:3.8 which is based on musl libc and not glibc. This means manylinux1 wheels do not work. So while cryptography==2.3.1 is installed and does actually support X25519, the way HASS.io builds it (against an old alpine version of openssl) means some features get turned off. On Debian and Ubuntu the manylinux1 wheel is used, so all the features of cryptography==2.3.1 are present and accounted for.

ZetaPhoenix · 2019-01-26T22:13:55Z

Seeing this in 0.86.2 still.

wzaatar · 2019-01-27T02:03:42Z

+1, alas. Not using key, plain SSH username/password.

File "/usr/local/lib/python3.6/site-packages/cryptography/hazmat/primitives/asymmetric/x25519.py", line 39, in generate _Reasons.UNSUPPORTED_EXCHANGE_ALGORITHM
cryptography.exceptions.UnsupportedAlgorithm: X25519 is not supported by this version of OpenSSL.

inverse · 2019-01-27T10:11:28Z

@olskar did this make it into the .3 release? The release notes state otherwise.

olskar · 2019-01-27T12:35:18Z

@inverse does not seen to be in .3 no. Not sure how fixes qualify into hotfix releases. @balloob probably knows :)

wzaatar · 2019-01-27T15:51:38Z

I confirm that the issue is still present in .3. Just updated and rebooted.

bereska · 2019-01-27T16:11:33Z

not in .3, frustrating this major bug is being ignored

kennedyshead · 2019-01-27T17:59:47Z

Put https://github.com/kennedyshead/home-assistant/blob/20d929b3883c4ce374dfa6dd93caebede5792bd4/homeassistant/components/asuswrt.py in custom_components reboot and try again

wzaatar · 2019-01-27T18:27:27Z

Put https://github.com/kennedyshead/home-assistant/blob/20d929b3883c4ce374dfa6dd93caebede5792bd4/homeassistant/components/asuswrt.py in custom_components reboot and try again

Hi @kennedyshead. I tried as per your advice and rebooted, but the error is still there.

kennedyshead · 2019-01-27T18:40:00Z

Ok, then we need to wait for the hassio fix of openssl. Not sure why libnacl dont work.

Edit: now I get it, there has been a change i asyncssh to use pyCA instead of libnacl. You could use an earlier version of asyncssh if you know howto.

wzaatar · 2019-01-27T19:05:52Z

Thanks, @kennedyshead. I'd rather not "cook" too much my prod Hassio installation. Will wait for the official fix.

Schocker360 · 2019-01-27T19:34:04Z

Is it possible this didn't make it into the build because the status of this issue is set to "Closed"?

craigcarps · 2019-01-28T02:52:33Z

Both SSH and Telnet not working with 86.3, hopefully 86.4 comes out with a fix for ASUSWRT. Until then I'll manually have to do what my presence detection automation was setup to do.

Hopefully it gets resolved quickly

yuqiuyi99 · 2019-01-28T19:33:11Z

me too，not work in 0.86.3

kennedyshead · 2019-01-28T19:50:51Z

Please lock this issue, it is taken cared of in hassio!

Note that the underlying root cause of this is that HASS.io uses alpine:3.8 which is based on musl libc and not glibc. This means manylinux1 wheels do not work. So while cryptography==2.3.1 is installed and does actually support X25519, the way HASS.io builds it (against an old alpine version of openssl) means some features get turned off. On Debian and Ubuntu the manylinux1 wheel is used, so all the features of cryptography==2.3.1 are present and accounted for.

Schocker360 · 2019-01-29T02:47:23Z

Please lock this issue, it is taken cared of in hassio!

Note that the underlying root cause of this is that HASS.io uses alpine:3.8 which is based on musl libc and not glibc. This means manylinux1 wheels do not work. So while cryptography==2.3.1 is installed and does actually support X25519, the way HASS.io builds it (against an old alpine version of openssl) means some features get turned off. On Debian and Ubuntu the manylinux1 wheel is used, so all the features of cryptography==2.3.1 are present and accounted for.

@kennedyshead When you say it is taken care of in Hassio are you saying they updated to use glibc and in the next release it should be fixed? I'm just not quite sure if you are saying 1. It's not a bug 2. It is a bug and there is a work around out there or 3. It's fixed in the next (or a future release).

cgarwood added the integration: asuswrt label Jan 24, 2019

JayOne73 mentioned this issue Jan 24, 2019

ASUSWRT error in Hassio 86.1 #20385

Closed

kennedyshead mentioned this issue Jan 24, 2019

Openssl-version dont have X25519 home-assistant/supervisor#903

Closed

kennedyshead mentioned this issue Jan 25, 2019

Bumps aioasuswrt #20432

Merged

4 tasks

ghost added the in progress label Jan 25, 2019

fabaff closed this as completed in #20432 Jan 25, 2019

ghost removed the in progress label Jan 25, 2019

Jc2k mentioned this issue Jan 27, 2019

asuswrt still not working ssh using user/pass login 0.86.3 #20513

Closed

home-assistant locked as resolved and limited conversation to collaborators Jan 29, 2019

asuswrt cannot connect over ssh #20361

asuswrt cannot connect over ssh #20361

Comments

glentakahashi commented Jan 23, 2019

jabesq commented Jan 24, 2019

kennedyshead commented Jan 24, 2019

ltjessem commented Jan 24, 2019 • edited Loading

cgarwood commented Jan 24, 2019

armata007 commented Jan 24, 2019

jabesq commented Jan 24, 2019

mmatesic01 commented Jan 24, 2019

vinmar1 commented Jan 24, 2019

adas4190 commented Jan 24, 2019

pszewello commented Jan 24, 2019

somar05 commented Jan 24, 2019

adas4190 commented Jan 24, 2019

vinmar1 commented Jan 24, 2019

adas4190 commented Jan 24, 2019

mikenabhan commented Jan 24, 2019

adas4190 commented Jan 24, 2019

MajorGlory78 commented Jan 24, 2019

Junho83 commented Jan 24, 2019

Jefe2 commented Jan 25, 2019

bereska commented Jan 25, 2019

nphil commented Jan 25, 2019

adas4190 commented Jan 25, 2019 • edited Loading

kennedyshead commented Jan 25, 2019

ltjessem commented Jan 25, 2019

ltjessem commented Jan 25, 2019

kennedyshead commented Jan 25, 2019

ltjessem commented Jan 25, 2019

olskar commented Jan 25, 2019

pixeldublu commented Jan 25, 2019

jokerigno commented Jan 25, 2019

kennedyshead commented Jan 25, 2019

gabe565 commented Jan 25, 2019 • edited Loading

Junho83 commented Jan 25, 2019

adas4190 commented Jan 25, 2019 • edited Loading

olskar commented Jan 26, 2019

Jc2k commented Jan 26, 2019 • edited Loading

ZetaPhoenix commented Jan 26, 2019

wzaatar commented Jan 27, 2019

inverse commented Jan 27, 2019

olskar commented Jan 27, 2019

wzaatar commented Jan 27, 2019

bereska commented Jan 27, 2019

kennedyshead commented Jan 27, 2019

wzaatar commented Jan 27, 2019

kennedyshead commented Jan 27, 2019 • edited Loading

wzaatar commented Jan 27, 2019

Schocker360 commented Jan 27, 2019

craigcarps commented Jan 28, 2019

yuqiuyi99 commented Jan 28, 2019

kennedyshead commented Jan 28, 2019 • edited Loading

Schocker360 commented Jan 29, 2019

ltjessem commented Jan 24, 2019 •

edited

Loading

adas4190 commented Jan 25, 2019 •

edited

Loading

gabe565 commented Jan 25, 2019 •

edited

Loading

adas4190 commented Jan 25, 2019 •

edited

Loading

Jc2k commented Jan 26, 2019 •

edited

Loading

kennedyshead commented Jan 27, 2019 •

edited

Loading

kennedyshead commented Jan 28, 2019 •

edited

Loading