DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 5D5A23858D3C
Message-ID: <5a0a9d55-5913-4851-a8d0-abdf6693da94@Shaw.ca>
Date: Tue, 28 Nov 2023 16:37:54 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Cygwin 3.4.9 - how to install ssh-keygen
Content-Language: en-CA
To: cygwin@cygwin.com
References: <cba6d8a9769ab61ef5e724607d0f32761b3f9308.camel@gmx.li>
 <cb49e2b78a4818e090b169cc88bfc497024b4d60.camel@gmx.li>
 <PH0PR16MB47825F25F55C915BD9505A75F5B8A@PH0PR16MB4782.namprd16.prod.outlook.com>
 <c1b9a9ba0d3c386dd2350e20a4b0013b7e5697de.camel@gmx.li>
 <87jzq5y8nc.fsf@Gerda.invalid>
 <4ae9d8388563c8b6c82801815b9c12ab9fca7081.camel@gmx.at>
 <02eb842d-e2c7-4536-9602-67475d1804a7@Shaw.ca>
 <06a79feabf5e8906c14a02f2396212a80af9e6d9.camel@gmx.at>
Organization: Inglis
In-Reply-To: <06a79feabf5e8906c14a02f2396212a80af9e6d9.camel@gmx.at>
Precedence: list
From: Brian Inglis via Cygwin <cygwin@cygwin.com>
Reply-To: cygwin@cygwin.com
Cc: Brian Inglis <Brian.Inglis@Shaw.ca>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: cygwin-bounces+archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit

On 2023-11-27 00:46, Matthias@gmx.at wrote:
> Am Sonntag, dem 26.11.2023 um 12:21 -0700 schrieb Brian Inglis via Cygwin:
>> On 2023-11-26 10:12, Matthias--- via Cygwin wrote:
>>> Am Samstag, dem 25.11.2023 um 19:45 +0100 schrieb ASSI via Cygwin:
>>>> Matthias--- via Cygwin writes:
>>>>> Yes - That's the reason in my VM too:
>>>>>      strace ssh-keygen -A
>>>>>      --- Process 8280 loaded C:\Windows\System32\ntmarta.dll at 00007ffcbc790000
>>>>>      --- Process 8280 thread 12528 created
>>>>>      --- Process 8280 thread 15124 created
>>>>>      --- Process 8280 thread 3324 created
>>>>>      --- Process 8280, exception c0000005 at 0000000000000000
>>>>>      --- Process 8280 thread 12528 exited with status 0x0
>>>>>      --- Process 8280 loaded C:\Windows\System32\kernel.appcore.dll at 00007ffcbb550000
>>>>>      --- Process 8280 thread 13908 exited with status 0xc0000005
>>>>>      --- Process 8280 thread 3324 exited with status 0xc0000005
>>>>>      --- Process 8280 exited with status 0xc0000005
>>>>>      Segmentation fault
>>
>>>> I'm fairly certain that this is not Cygwin's ssh-keygen…
>>
>>> I believe it is Cygwin's ssh-keygen because it is loading cygwin dlls too:
>>>      strace /usr/bin/ssh-keygen.exe -A
>>>      --- Process 14116 created
>>>      --- Process 14116 loaded C:\Windows\System32\ntdll.dll at 00007ffcbff90000
>>>      --- Process 14116 loaded C:\Windows\System32\kernel32.dll at 00007ffcbe610000
>>>      --- Process 14116 loaded C:\Windows\System32\KernelBase.dll at 00007ffcbd710000
>>>      --- Process 14116 loaded C:\Windows\System32\apphelp.dll at 00007ffcbaea0000
>>>      --- Process 14116 loaded C:\cygwin64\bin\cygcrypto-3.dll at 00000003ff8c0000
>>>      --- Process 14116 loaded C:\cygwin64\bin\cygwin1.dll at 00007ffc74c90000
>>>      --- Process 14116 loaded C:\cygwin64\bin\cyggcc_s-seh-1.dll at 00000003ff790000
>>>      --- Process 14116 loaded C:\cygwin64\bin\cygz.dll at 00000003feb50000
>>>          1       1 [main] ssh-keygen (14116) **********************************************
>>>        279     280 [main] ssh-keygen (14116) Program name: C:\cygwin64\bin\ssh-keygen.exe
>>> (windows pid
>>>      14116)
>>>        190     470 [main] ssh-keygen (14116) OS version:   Windows NT-10.0
>>>        125     595 [main] ssh-keygen (14116) **********************************************
>>>      --- Process 14116 loaded C:\Windows\System32\advapi32.dll at 00007ffcbfac0000
>>>      :
>>>      --- Process 14116 loaded C:\Windows\System32\ntmarta.dll at 00007ffcbc790000
>>>      --- Process 14116 thread 15044 created
>>>      --- Process 14116 thread 10544 created
>>>      --- Process 14116 thread 13588 created
>>>      --- Process 14116, exception c0000005 at 0000000000000000
>>>      --- Process 14116 thread 15044 exited with status 0x0
>>>      --- Process 14116 thread 10544 exited with status 0xc0000005
>>>      --- Process 14116 thread 14316 exited with status 0xc0000005
>>>      --- Process 14116 exited with status 0xc0000005
>>>      Segmentation fault
>>>
>>> The Windows OpenSSH-Client is also installed in my VM:
>>>      strace /cygdrive/C/Windows/System32/OpenSSH/ssh-keygen.exe -A
>>>      --- Process 12532 created
>>>      --- Process 12532 loaded C:\Windows\System32\ntdll.dll at 00007ffcbff90000
>>>      --- Process 12532 loaded C:\Windows\System32\kernel32.dll at 00007ffcbe610000
>>>      --- Process 12532 loaded C:\Windows\System32\KernelBase.dll at 00007ffcbd710000
>>>      --- Process 12532 loaded C:\Windows\System32\apphelp.dll at 00007ffcbaea0000
>>>      :
>>>      --- Process 12532 loaded C:\Windows\System32\winrnr.dll at 00007ffc77150000
>>>      ssh-keygen: generating new host keys: RSA DSA ECDSA ED25519
>>>      --- Process 12532 unloaded DLL at 00007ffc77110000
>>>      :
>>>      and all keys are created in C:\ProgramData\ssh
>>>
>>> So it looks like cygwin ssh-keygen.exe have a problem :(
>>> BTW: similar Segmentation faults I have with "strace /usr/sbin/sshd.exe --help" as well as with
>>> "strace /usr/bin/ssh.exe --help".
>>> Both are loading cygwin dlls like cygcrypt-2.dll or cygiconv-2.dll as well as Windows dlls like
>>> ntdll.dll or kernel32.dll.
>>>
>>> Any hints?
>>
>> That intercept does not run under strace on my Win 10 latest patches system.
>> My strace shows DHCP contacted before running gethostname, then keygens.
>>
>> Does this system run a legacy A/V?
>>
>> Add to BLODA? - legacy embedded security provider interface:
>>
>> https://learn.microsoft.com/en-us/previous-versions/windows/embedded/aa939264(v=winembedded.5)?redirectedfrom=MSDN

> A/V is Antivirus? My VM is running Avira. Deactivating it haven't impact on ssh-keygen. I still have
> an Segmentation fault.

Does the cygcheck, ldd, or strace still show ntmarta?

If so, then it is likely the intercept might be installed and need uninstalled 
to deactivate!

If you are running Avira Free, I get:

	https://www.avira.com/en/free-antivirus-windows

"System Requirements

Your device is not compatible

Operating systems

Microsoft Windows 7 Service Pack 1 or above with the newest updates, hotfixes, 
and service packs installed

RAM

2 GB of RAM or more

Disk Space

Minimum 2 GB of free disk space (additional space for temporary and quarantine 
files needed)

CPU type

Intel Pentium 4 / AMD Athlon 64 Processor or faster (with support for the SSE2 
instructions set)

Browser:

Internet Explorer 11 or newer

Additional requirements

To install, you’ll need administrator rights, an internet connection, and a web 
browser. For automatic antivirus updates and optimal malware detection, you’ll 
need an internet connection"

So you should try that page from the system with issues, and try something else 
if you get the same response, as it appears that is pretty old code running, or 
just try something newer like MS Windows Security/Defender/etc.

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple