Topic "No support for key exchange with SHA-2?"

Author Message
Gatak

Guest


I have configured OpenSSH with the following:

Code:
Ciphers         aes256-cbc,aes192-cbc,aes256-ctr,aes192-ctr
MACs            hmac-sha1,hmac-sha2-256,hmac-sha2-512
KexAlgorithms   ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256


This works well with Putty (0.62 x64) and VX Connectbot (Android 4.2/4.3), but not with WinSCP (5.2.3). I get the following error: Couldn't agree on key exchange algorithm.
Advertisements
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24993
Location: Prague, Czechia
Please attach a full log file showing the problem, using both the latest version of WinSCP (5.2.4 beta) and PuTTY (0.62)

To generate log file, enable logging, log in to your server and do the operation and only the operation that causes the error. Submit the log with your post as an attachment. Note that passwords and passphrases not stored in the log. You may want to remove other data you consider sensitive though, such as host names, IP addresses, account names or file names (unless they are relevant to the problem). If you do not want to post the log publicly, you may email it to me. You will find my address (if you log in) in my forum profile. Please include link back to this topic in your email. Also note in this topic that you have emailed the log.
_________________
Martin Prikryl
Gatak

Guest


Here are the logs. Not sure if I posted something I shouldn't - i.e. SSH keys visible?
putty.log (19.47 KB) [Download]

Description: Log output from connecting to a SSH2 server with SHA-2.

WinSCP.log (4.34 KB) [Download]

Description: Log output (debug 2) from connecting to a SSH2 server with SHA-2.

martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24993
Location: Prague, Czechia
Thanks.

This issue has been added to the tracker:
https://winscp.net/tracker/show_bug.cgi?id=1067

Can you send me an email, so I can send you back a dev version of WinSCP for testing? Please include link back to this topic in your email. Also note in this topic that you have sent the email. Thanks.

You will find my address (if you log in) in my forum profile.
Gatak

Guest


Thanks. I have sent you the email now.
Advertisements

You can post new topics in this forum






Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!

Donate

About donations

$9   $19   $49   $99

About donations

Recommend

WinSCP Privacy Policy

WinSCP License