How to fix SFTP error – negotiation failed because diffie-hellman-group1-sha1 is not enabled

[ZappySys]

Problem: 

Sometime you may get following error when you use SFTP Connection manager

Negotiation failed. The client and server have no common key exchange algorithms. The server supports ‘diffie-hellman-group1-sha1’ which is weak and not enabled at the client.

Solution:

By default ZappySys do not enable certain insecure or weak algorithms or Ciphers. If you really want to enable those for whatever reason (e.g. you cant control server settings becuase owned by Vendor) then perform the following steps to enable algorithm /cipher listed in the error.

1. Open SFTP Connection. Configure all SFTP related settings (e.g. Host, Userid, Password)
2. Now goto SFTP Settings Tab
3. Under Key exchange algorithm enter word “any” (without double quotes). If you don’t want to enable all then enter specific ones separated by comma. List of all supported ciphers/algorithms found here
4. Now click Test

 

 

[Author]

Posts