avnerw74 opened a new issue, #577: URL: https://github.com/apache/mina-sshd/issues/577
### Version 2.11.0 ### Bug description .ALLOW_DHG1_KEX_FALLBACK doesn't seem to work ### Actual behavior Hi, I am trying to connect to the server using: sftp -oKexAlgorithms=diffie-hellman-group1-sha1 In the code, I have added the following configuration, to allow DHG1 algorithm with min key size 1024: CoreModuleProperties.ALLOW_DHG1_KEX_FALLBACK.set(sshd, true); CoreModuleProperties.PROP_DHGEX_SERVER_MIN_KEY.set(sshd, 1024); However, when I try to connect to it, I am still getting Error: _Unable to negotiate with xxx.xxx.xxx.xxx port 10022: no matching key exchange method found. Their offer: curve25519-sha256,curve25519-sha...@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256,diffie-hellman-group18-sha512,diffie-hellman-group17-sha512,diffie-hellman-group16-sha512,diffie-hellman-group15-sha512,diffie-hellman-group14-sha256,ext-info-s_ Is the fallback still supported? Am I missing anything? ### Expected behavior I was expecting to be able to connect with diffie-hellman-group1-sha1 KEX algorithm. ### Relevant log output _No response_ ### Other information _No response_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org For additional commands, e-mail: dev-h...@mina.apache.org
