Possible to remove options from kex algorithms

Advertisement

CharlesM
Joined:
Posts:
1

Possible to remove options from kex algorithms

Hello,

It is possible to configure WinSCP to not send "curve25519-sha256” and “curve25519-sha256@libssh.org" during client key exchange init?

Have SFTP server I cannot configure that admittedly is on the older side of things but cannot be updated. SFTP server requires user name and password to login. When I used WinSCP 6.5 to connect to SFTP server, the server will send FIN before the key exchange process is finished. When I use WinSCP 5.17.10, the sFTP exchange is fine and I can transfer files.

Built a python script that would send 2 packets to the SFTP server, "SSH-2.0-Python_Script" and configurable Key Exchange Init packet. Was able to determine that SFTP server does not like when kex algorithms string contains both "curve25519-sha256” and “curve25519-sha256@libssh.org", one or the other is fine but not both.

IT requirement is forcing me to use the latest version of WinSCP.

Is it possible to configure WinSCP 6.5 to only use one or neither string?

Regards,
Charles

Reply with quote

Advertisement

Advertisement

You can post new topics in this forum