Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-36648

SSH plugin : no matching cipher found - can't connect to server

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not A Defect
    • Icon: Minor Minor
    • ssh-plugin
    • SSH plugin 2.4

      Hello
      I'm not to able connect to some hosts via ssh plugin. Ssh plugin offers only the following ciphers:

      aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc

      But from security reasons server offers others.
      From sshd log:

      Jul 11 13:09:22 server auth|security:crit sshd[21561580]: fatal: no matching cipher found: client aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc server aes256-ctr,aes192-cbc,aes256-cbc [preauth]

      I've tested ssh-plugin the newest version from git (2.5-SNAPSHOT) with Jsch-1.53 but it doesn't work too.

      Best regards Piotr

          [JENKINS-36648] SSH plugin : no matching cipher found - can't connect to server

          dracorp created issue -

          dracorp added a comment -

          By default JRE provides weak or insufficient cryptographic algorithms*. I've installed JCE Unlimited Strength Jurisdiction Policy Files and I'm able to connect with any host.

          *) https://docs.oracle.com/javase/7/docs/technotes/guides/security/SunProviders.html#importlimits

          dracorp added a comment - By default JRE provides weak or insufficient cryptographic algorithms*. I've installed JCE Unlimited Strength Jurisdiction Policy Files and I'm able to connect with any host. *) https://docs.oracle.com/javase/7/docs/technotes/guides/security/SunProviders.html#importlimits
          dracorp made changes -
          Resolution New: Not A Defect [ 7 ]
          Status Original: Open [ 1 ] New: Closed [ 6 ]
          R. Tyler Croy made changes -
          Workflow Original: JNJira [ 173372 ] New: JNJira + In-Review [ 210214 ]

            Unassigned Unassigned
            dracorp dracorp
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: