Algorithm negotiation fail

Aziz Ayoujil Strategic Partner

• February 28, 2023 09:59

Hi All.
I have the following "[Could not connect to SFTP server at "sftp://".] [Could not connect to SFTP server at "".] [Algorithm negotiation fail" , when i try to create SFTP connection. I know that The error "Algorithm negotiation fail" typically occurs when there is a mismatch between the encryption algorithms supported by the client and the server during the secure file transfer protocol (SFTP) connection negotiation process.

Can you tell me about the algorithms that Celego can support for:
Key Exchange, Server Host Key, Encryption, and MAC?
thanks

0

• 

  Bas van Ditzhuijzen Strategic Partner NetSuite Integration Whiz Salesforce Integration Whiz

  • May 30, 2023 07:13

  

  

  

  

  

  I dont know if this is still an issue for you, but for anyone (like me) finding this in the future, Celigo does not support ed25519 / EdDSA encryption algorithms on the sftp connection. The remote server should at least support ssh-rsa encryption.

  0
• 

  Aziz Ayoujil Strategic Partner

  • May 30, 2023 15:31

  

  

  

  

  

  

  

  

  Thanks @Bas van Ditzhuijzen.
  For your response, i still have the same problem my friend.

  0
• 

  Pridhvi Product Manager

  • June 08, 2023 12:18
  • Edited

  

  

  Hello Aziz Ayoujil

  Below are the list of the supported algorithms used by our SFTP middleware for key exchanges, server host keys. We are upgrading our SFTP middleware which will fix this issue and is planned to release on June 8th, 2023.

  Please note that,

  1. Entries in bold text are legacy protocols like SHA-1 or DSA that we had to enable for backwards compatibility
  2. Algorithms in italics are that we can’t fully support yet.

  Key Exchange Algorithms:

  • cure25519-sha256
  • curve25519-sha256@libssh.org
  • ecdh-sha2-nistp256
  • ecdh-sha2-nistp384
  • ecdh-sha2-nistp521
  • diffie-hellman-group-exchange-sha256
  • diffie-hellman-group16-sha512
  • diffie-hellman-group18-sha512
  • diffie-hellman-group14-sha256
  • diffie-hellman-group-exchange-sha1
  • diffie-hellman-group1-sha1
  • diffie-hellman-group14-sha1

  Host Key Algorithms

  • ssh-ed25519
  • ecdsa-sha2-nistp256
  • ecdsa-sha2-nistp384
  • ecdsa-sha2-nistp521
  • rsa-sha2-512
  • rsa-sha2-256
  • ssh-rsa
  • ssh-dss

  Server/Client Encryption Algorithms:

  • aes128-ctr
  • aes192-ctr
  • aes256-ctr
  • aes128-gcm@openssh.com
  • aes256-gcm@openssh.com
  • aes256-cbc
  • aes192-cbc
  • aes128-cbc
  • 3des-ctr
  • 3des-cbc
  • blowfish-cbc

  Server/Client MAC Algorithms:

  • hmac-sha2-256-etm@openssh.com
  • hmac-sha2-512-etm@openssh.com
  • hmac-sha1-etm@openssh.com
  • hmac-sha2-256
  • hmac-sha2-512
  • hmac-sha1
  • hmac-sha1-96
  • hmac-md5-9
  • hmac-md5

  0
• 

  Aziz Ayoujil Strategic Partner

  • June 08, 2023 15:16

  

  

  

  

  

  

  

  

  Thanks Pridhvi.

   

  0

Please sign in to leave a comment.