Page 1 of 1
TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...
Posted: Thu 04 Aug 2016 14:03
by Zalzero
We're using the simplest way of connection to FTP servers using SecureBridge as described in topic
viewtopic.php?f=27&t=21779.
However, when we tried to connect to a new SFTP server, TScSSHClient.Connect fails and gives the exception EScError with message 'Server does not support diffie-hellman-group1-sha1 for keyexchange'.
We're using version 6.5.8 on Delphi 2010.
How can I make the connection work? Do we need a newer version of SecureBridge?
Best Regards
Mattias
Edit: Hit the Submit-button too early by mistake
Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...
Posted: Thu 04 Aug 2016 14:20
by Zalzero
I'm really sorry. I was at a lower version than 6.5.8.
After upgrading I get another message from the exception: 'The negotiation of encryption algorithm is failed'
Still would appreciate a solution, though.
BR
Mattias
Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...
Posted: Thu 04 Aug 2016 14:57
by ViktorV
This error can be raised if set client encryption algorithms have no compliance with server algorithms,. The server may also use CTR cipher. Support for CTR encryption mode was added in SecureBridge version 6.6.9. Please make sure you are using SecureBridge versions 6.6.9 or higher.
To solve the problem, set the TScSSHClient.CiphersClient and CiphersServer properties to the 'blowfish-ctr,blowfish-cbc,aes128-ctr,aes128-cbc,cast128-cbc,cast128-ctr,aes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,3des-cbc,3des-ctr' value.
Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...
Posted: Fri 05 Aug 2016 06:08
by Zalzero
Thank you Viktor!
We will upgrade and try again.
BR
Mattias
Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...
Posted: Fri 05 Aug 2016 08:17
by ViktorV
Thank you for being interested in our products.
When you get any results concerning this question, please let us know.
Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...
Posted: Fri 05 Aug 2016 12:40
by Zalzero
Hi Viktor.
Upgrading to version 7.1.2 solved the problem. No need to set the Ciphers* properties either, which is great as we don't want to know any more details about severs than address, (port,) user and password

.
Thanks for your help!
Mattias
Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...
Posted: Fri 05 Aug 2016 12:56
by ViktorV
It is good to see that the problem has been solved.
Feel free to contact us if you have any further questions about SecureBridge.