Hi All.
I have the following "[Could not connect to SFTP server at "sftp://".] [Could not connect to SFTP server at "".] [Algorithm negotiation fail" , when i try to create SFTP connection. I know that The error "Algorithm negotiation fail" typically occurs when there is a mismatch between the encryption algorithms supported by the client and the server during the secure file transfer protocol (SFTP) connection negotiation process.
Can you tell me about the algorithms that Celego can support for:
Key Exchange, Server Host Key, Encryption, and MAC?
thanks
I dont know if this is still an issue for you, but for anyone (like me) finding this in the future, Celigo does not support ed25519 / EdDSA encryption algorithms on the sftp connection. The remote server should at least support ssh-rsa encryption.
Thanks @@basvanditzhuijzen-Bas-van-Ditzhuijzen" rel="nofollow noreferrer">Bas van Ditzhuijzen.
For your response, i still have the same problem my friend.
Hello @azizayoujil
Below are the list of the supported algorithms used by our SFTP middleware for key exchanges, server host keys. We are upgrading our SFTP middleware which will fix this issue and is planned to release on June 8th, 2023.
Please note that,
- Entries in bold text are legacy protocols like SHA-1 or DSA that we had to enable for backwards compatibility
- Algorithms in italics are that we can’t fully support yet.
Key Exchange Algorithms:
- cure25519-sha256
- curve25519-sha256@libssh.org
- ecdh-sha2-nistp256
- ecdh-sha2-nistp384
- ecdh-sha2-nistp521
- diffie-hellman-group-exchange-sha256
- diffie-hellman-group16-sha512
- diffie-hellman-group18-sha512
- diffie-hellman-group14-sha256
- diffie-hellman-group-exchange-sha1
- diffie-hellman-group1-sha1
- diffie-hellman-group14-sha1
Host Key Algorithms
- ssh-ed25519
- ecdsa-sha2-nistp256
- ecdsa-sha2-nistp384
- ecdsa-sha2-nistp521
- rsa-sha2-512
- rsa-sha2-256
- ssh-rsa
- ssh-dss
Server/Client Encryption Algorithms:
- aes128-ctr
- aes192-ctr
- aes256-ctr
- aes128-gcm@openssh.com
- aes256-gcm@openssh.com
- aes256-cbc
- aes192-cbc
- aes128-cbc
- 3des-ctr
- 3des-cbc
- blowfish-cbc
Server/Client MAC Algorithms:
- hmac-sha2-256-etm@openssh.com
- hmac-sha2-512-etm@openssh.com
- hmac-sha1-etm@openssh.com
- hmac-sha2-256
- hmac-sha2-512
- hmac-sha1
- hmac-sha1-96
- hmac-md5-9
- hmac-md5
Thanks @pridhvi-Pridhvi" rel="nofollow noreferrer">Pridhvi.