SSH Algorithm negotiation fail

Toad Edge
1

Hi,

When I try to SSH through toad edge, I get the following error in toad: “Cannot establish SSH connection: Algorithm negotiation fail”. On my SSH server, I see the following error:
Oct 17 04:33:44 xxxxxx sshd[17039]: fatal: Unable to negotiate with xxx.xxx.xxx.xxx port 61450: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]

When I enable these kex, it generates failures and warnings in my ssh security scan (https://github.com/arthepsy/ssh-audit):
(kex) diffie-hellman-group1-sha1 – [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
(kex) diffie-hellman-group-exchange-sha1 – [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
(kex) diffie-hellman-group14-sha1 – [warn] using weak hashing algorithm

diffie-hellman-group14-sha1 is only a warning at least, but still not great.

Do you have any plans on updating your SSH client library to support more recent algorithms?

Note: I am using out toad edge 2.0.3 on Mac OSX 10.14.

Thanks,
Chris

2

Hi, we have created issue for this, we have to reproduce it first, we will let you know about the progress.
thanks
br.
Miroslav Stanik

3

Any update on this?

4

Found the fix. Add below lines in your java.security file .

security.provider.4=com.sun.crypto.provider.SunJCE
security.provider.5=sun.security.jgss.SunProvider
security.provider.6=com.sun.security.sasl.Provider
security.provider.7=org.jcp.xml.dsig.internal.dom.XMLDSigRI
security.provider.8=sun.security.smartcardio.SunPCSC

And remove all MD5 strings from that file.