DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 77CC3385DC2E
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject: OpenSSH_8.3p1, OpenSSL 1.1.1f  31 Mar 2020
Thread-Topic: OpenSSH_8.3p1, OpenSSL 1.1.1f  31 Mar 2020
Thread-Index: AdaLgOwt/p+7lYb8QEaP+GE1Nsu9uQ==
Date: Tue, 15 Sep 2020 17:00:19 +0000
Message-ID: <DM6PR08MB490730F0353698D6F9C6CF17EE200@DM6PR08MB4907.namprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: d8e12944-1375-4d19-6ab1-08d85998d38d
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Sep 2020 17:00:19.0544 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: VSZ9HhTDNwBV8i6NL69ri8SfBajk0blEdHpqXffAIWlWxWu282Iob3iKMQ+w8jen3VwxDBcAdO2L8fnaflb36w==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR08MB4985
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00, DKIMWL_WL_HIGH,
 DKIM_SIGNED, DKIM_VALID, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2,
 SPF_HELO_PASS, SPF_PASS, TRACKER_ID,
 TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
X-Content-Filtered-By: Mailman/MimeDel 2.1.29
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: "Everett, Tom \(Nokia - US/Westford\) via Cygwin" <cygwin AT cygwin DOT com>
Reply-To: "Everett, Tom \(Nokia - US/Westford\)" <tom DOT everett AT nokia DOT com>
Content-Type: text/plain; charset="utf-8"
Sender: "Cygwin" <cygwin-bounces AT cygwin DOT com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 08FH0q2A005679

I have tried to add kex to config files but I am still unable to get this to work. It was working at one point but I did not back it up or write instructions because I thought I would never have to touch it again, until I did 😊

Need help establishing the recipe again. Any help would be appreciated.


$ cygcheck -c Cygwin
Cygwin Package Information
Package              Version        Status
cygwin               3.1.7-1        OK


SSH Results:

debug1: Local version string SSH-2.0-OpenSSH_8.3
debug1: Remote protocol version 2.0, remote software version LiteSSH
debug1: no match: LiteSSH
…
…
debug1: kex: algorithm: (no match)
Unable to negotiate with 10.0.3.6 port 22: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1


$ ssh -Q kex
diffie-hellman-group1-sha1
diffie-hellman-group14-sha1
diffie-hellman-group14-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group-exchange-sha1
diffie-hellman-group-exchange-sha256
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
curve25519-sha256
curve25519-sha256 AT libssh DOT org
sntrup4591761x25519-sha512 AT tinyssh DOT org

$ ssh admin AT 10 DOT 0 DOT 3 DOT 6
Connection reset by 10.0.3.6 port 22

Complete listing:
$ ssh -vv -oHostKeyAlgorithms=+ssh-dss -oStrictHostKeyChecking=no admin AT 10 DOT 0 DOT 3 DOT 6
OpenSSH_8.3p1, OpenSSL 1.1.1f  31 Mar 2020
debug2: resolve_canonicalize: hostname 10.0.3.6 is address
debug2: ssh_connect_direct
debug1: Connecting to 10.0.3.6 [10.0.3.6] port 22.
debug1: Connection established.
debug1: identity file /home/tester/.ssh/id_rsa type -1
debug1: identity file /home/tester/.ssh/id_rsa-cert type -1
debug1: identity file /home/tester/.ssh/id_dsa type -1
debug1: identity file /home/tester/.ssh/id_dsa-cert type -1
debug1: identity file /home/tester/.ssh/id_ecdsa type -1
debug1: identity file /home/tester/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/tester/.ssh/id_ecdsa_sk type -1
debug1: identity file /home/tester/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /home/tester/.ssh/id_ed25519 type -1
debug1: identity file /home/tester/.ssh/id_ed25519-cert type -1
debug1: identity file /home/tester/.ssh/id_ed25519_sk type -1
debug1: identity file /home/tester/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /home/tester/.ssh/id_xmss type -1
debug1: identity file /home/tester/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.3
debug1: Remote protocol version 2.0, remote software version LiteSSH
debug1: no match: LiteSSH
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to 10.0.3.6:22 as 'admin'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256 AT libssh DOT org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c
debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01 AT openssh DOT com,ecdsa-sha2-nistp384-cert-v01 AT openssh DOT com,ecdsa-sha2-nistp521-cert-v01 AT openssh DOT com,sk-ecdsa-sha2-nistp256-cert-v01 AT openssh DOT com,ssh-ed25519-cert-v01 AT openssh DOT com,sk-ssh-ed25519-cert-v01 AT openssh DOT com,rsa-sha2-512-cert-v01 AT openssh DOT com,rsa-sha2-256-cert-v01 AT openssh DOT com,ssh-rsa-cert-v01 AT openssh DOT com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256 AT openssh DOT com,ssh-ed25519,sk-ssh-ed25519 AT openssh DOT com,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss
debug2: ciphers ctos: chacha20-poly1305 AT openssh DOT com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm AT openssh DOT com,aes256-gcm AT openssh DOT com
debug2: ciphers stoc: chacha20-poly1305 AT openssh DOT com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm AT openssh DOT com,aes256-gcm AT openssh DOT com
debug2: MACs ctos: umac-64-etm AT openssh DOT com,umac-128-etm AT openssh DOT com,hmac-sha2-256-etm AT openssh DOT com,hmac-sha2-512-etm AT openssh DOT com,hmac-sha1-etm AT openssh DOT com,umac-64 AT openssh DOT com,umac-128 AT openssh DOT com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm AT openssh DOT com,umac-128-etm AT openssh DOT com,hmac-sha2-256-etm AT openssh DOT com,hmac-sha2-512-etm AT openssh DOT com,hmac-sha1-etm AT openssh DOT com,umac-64 AT openssh DOT com,umac-128 AT openssh DOT com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib AT openssh DOT com,zlib
debug2: compression stoc: none,zlib AT openssh DOT com,zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: diffie-hellman-group14-sha1
debug2: host key algorithms: ssh-rsa
debug2: ciphers ctos: aes256-ctr
debug2: ciphers stoc: aes256-ctr
debug2: MACs ctos: hmac-sha1
debug2: MACs stoc: hmac-sha1
debug2: compression ctos: none
debug2: compression stoc: none
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug1: kex: algorithm: (no match)
Unable to negotiate with 10.0.3.6 port 22: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1

Thanks,

Thomas Everett
Nokia USA
1 Robbins Rd.
Westford, MA. 01886
1-978-320-3746
tom DOT everett AT nokia DOT com<mailto:tom DOT everett AT nokia DOT com>


--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple