Handle OpenSSL::Cipher::CipherError

Our current net/ssh is petty outdated, so it is possible not being
able to connect to certain SSH servers.

lib/metasploit/framework/login_scanner/ssh.rb

@@ -78,7 +78,7 @@ module Metasploit
                 opt_hash
               )
             end
-          rescue ::EOFError, Net::SSH::Disconnect, Rex::ConnectionError, ::Timeout::Error => e
+          rescue OpenSSL::Cipher::CipherError, ::EOFError, Net::SSH::Disconnect, Rex::ConnectionError, ::Timeout::Error => e
             result_options.merge!(status: Metasploit::Model::Login::Status::UNABLE_TO_CONNECT, proof: e)
           rescue Net::SSH::Exception
             result_options.merge!(status: Metasploit::Model::Login::Status::INCORRECT, proof: e)

modules/auxiliary/scanner/ssh/karaf_login.rb

@@ -111,12 +111,17 @@ class Metasploit3 < Msf::Auxiliary
       )
       case result.status
         when Metasploit::Model::Login::Status::SUCCESSFUL
-          print_brute :level => :good, :ip => ip, :msg => "Success: '#{result.credential}')"
+          print_brute :level => :good, :ip => ip, :msg => "Success: '#{result.credential}'"
           credential_core = create_credential(credential_data)
           credential_data[:core] = credential_core
           create_credential_login(credential_data)
         when Metasploit::Model::Login::Status::UNABLE_TO_CONNECT
-          vprint_brute :level => :verror, :ip => ip, :msg => "Could not connect: #{result.proof}"
+          if /key length too short/i === result.proof.message
+            vprint_brute :level => :verror, :ip => ip, :msg => "Could not connect to Apache Karaf: #{result.proof} (net/ssh out of date)"
+          else
+            vprint_brute :level => :verror, :ip => ip, :msg => "Could not connect to Apache Karaf: #{result.proof}"
+          end
+
           scanner.ssh_socket.close if scanner.ssh_socket && !scanner.ssh_socket.closed?
           invalidate_login(credential_data)
         when Metasploit::Model::Login::Status::INCORRECT