TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...

Discussion of open issues, suggestions and bugs regarding network security and data protection solution - SecureBridge
Post Reply
Zalzero
Posts: 4
Joined: Thu 04 Aug 2016 13:57

TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...

Post by Zalzero » Thu 04 Aug 2016 14:03

We're using the simplest way of connection to FTP servers using SecureBridge as described in topic viewtopic.php?f=27&t=21779.

However, when we tried to connect to a new SFTP server, TScSSHClient.Connect fails and gives the exception EScError with message 'Server does not support diffie-hellman-group1-sha1 for keyexchange'.

We're using version 6.5.8 on Delphi 2010.

How can I make the connection work? Do we need a newer version of SecureBridge?

Best Regards
Mattias

Edit: Hit the Submit-button too early by mistake

Zalzero
Posts: 4
Joined: Thu 04 Aug 2016 13:57

Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...

Post by Zalzero » Thu 04 Aug 2016 14:20

I'm really sorry. I was at a lower version than 6.5.8.
After upgrading I get another message from the exception: 'The negotiation of encryption algorithm is failed'

Still would appreciate a solution, though.

BR
Mattias

ViktorV
Devart Team
Posts: 3168
Joined: Wed 30 Jul 2014 07:16

Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...

Post by ViktorV » Thu 04 Aug 2016 14:57

This error can be raised if set client encryption algorithms have no compliance with server algorithms,. The server may also use CTR cipher. Support for CTR encryption mode was added in SecureBridge version 6.6.9. Please make sure you are using SecureBridge versions 6.6.9 or higher.
To solve the problem, set the TScSSHClient.CiphersClient and CiphersServer properties to the 'blowfish-ctr,blowfish-cbc,aes128-ctr,aes128-cbc,cast128-cbc,cast128-ctr,aes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,3des-cbc,3des-ctr' value.

Zalzero
Posts: 4
Joined: Thu 04 Aug 2016 13:57

Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...

Post by Zalzero » Fri 05 Aug 2016 06:08

Thank you Viktor!

We will upgrade and try again.

BR
Mattias

ViktorV
Devart Team
Posts: 3168
Joined: Wed 30 Jul 2014 07:16

Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...

Post by ViktorV » Fri 05 Aug 2016 08:17

Thank you for being interested in our products.
When you get any results concerning this question, please let us know.

Zalzero
Posts: 4
Joined: Thu 04 Aug 2016 13:57

Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...

Post by Zalzero » Fri 05 Aug 2016 12:40

Hi Viktor.

Upgrading to version 7.1.2 solved the problem. No need to set the Ciphers* properties either, which is great as we don't want to know any more details about severs than address, (port,) user and password :).

Thanks for your help!
Mattias

ViktorV
Devart Team
Posts: 3168
Joined: Wed 30 Jul 2014 07:16

Re: TScSSHClient.Connect gives exception EScError with message 'Server does not support diffie-hellman-group1 ...

Post by ViktorV » Fri 05 Aug 2016 12:56

It is good to see that the problem has been solved.
Feel free to contact us if you have any further questions about SecureBridge.

Post Reply