New-SSHSession not working against certain ciphers
See original GitHub issueHi,
I’ve inherited and environment of ESXi hosts where thy are running a special list of ciphers in sshd_config of each ESXi host. The list is below
KexAlgorithms ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256
HostKeyAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,rsa-sha2-512
I cannot establish SSH connection using new-sshsession from posh-ssh 2.3.0, PS 5.1 and Windows 2019 server. As soon as I comment out these lines I am able to connect. Is there anything that can be done for POSH-SSH to support the algo’s above?
Thanks, ionut
Issue Analytics
- State:
- Created 3 years ago
- Reactions:1
- Comments:17 (10 by maintainers)
Top Results From Across the Web
Disable weak ciphers on ESXi using PowerCLI
Hi All, Is there a way to disable the weak ciphers on ESXi using PowerCLI ? ... #check status of SSH servcie, start...
Read more >How to Troubleshoot SSH Protocol Issues
To resolve this issue, you need to customize the supported ciphers in your SSH client. Solutions. Clearing Out Host Keys from Known Hosts....
Read more >13.6 ssh Command Line Options
Specifies one or more (comma-separated) encryption algorithms supported by the client. The cipher used for a given session is the cipher highest in...
Read more >SSH: How to disable weak ciphers?
How to disable a weak ssh cipher,100% working tested on Fedora 29. The problem: Nessus report my samba4 server use not strong ciphers...
Read more >How to allow or block TLS and SSH ciphers using the ...
DPI-SSL – Cipher X is no longer a part of the TLS context and is not a part of the client advertised ciphers...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Yes
Sent from my iPhone
@darkoperator Oh I see. I’ll have to reach out to the vendor then since its cloud hosed. Thanks!