Supportability of WinSCP with SAP after SFTP weak Key Exchange Algorithm Disablement
Hi everyone,
We have some automated functions that connect using WinSCP v5.9.6 to a SAP Successfactors SFTP server and they've recently communicated that they will be making some changes early next year by disabling support for "diffie-hellman-group-exchange-sha1" and only allowing clients with certain Ciphers, MACs and KEX Ciphers to be able to connect to their SFTP server. Here is a link to their article: https://web.archive.org/web/20230401073411/https://userapps.support.sap.com/sap/support/knowledge/en/3084768
So would anyone know if WinSCP Client version 5.9.6 (Build 7601) will be able to support this and still be able to connect to SAP's SFTP server? If not then what would be the best course of action? do I need to specifically change a configuration in the client or download the latest WinSCP client version or something else?
I'm not very familiar with ciphers and algorithms, but from what I've been reading here https://winscp.net/eng/docs/ui_login_kex, and from what I've checked on the config of our WinSCP client, it appears it will be ok without needing to do a thing but would be great if someone could cross-check this to confirm with me.
Thanks,
Surya
We have some automated functions that connect using WinSCP v5.9.6 to a SAP Successfactors SFTP server and they've recently communicated that they will be making some changes early next year by disabling support for "diffie-hellman-group-exchange-sha1" and only allowing clients with certain Ciphers, MACs and KEX Ciphers to be able to connect to their SFTP server. Here is a link to their article: https://web.archive.org/web/20230401073411/https://userapps.support.sap.com/sap/support/knowledge/en/3084768
So would anyone know if WinSCP Client version 5.9.6 (Build 7601) will be able to support this and still be able to connect to SAP's SFTP server? If not then what would be the best course of action? do I need to specifically change a configuration in the client or download the latest WinSCP client version or something else?
I'm not very familiar with ciphers and algorithms, but from what I've been reading here https://winscp.net/eng/docs/ui_login_kex, and from what I've checked on the config of our WinSCP client, it appears it will be ok without needing to do a thing but would be great if someone could cross-check this to confirm with me.
Thanks,
Surya