no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 while accessing the TEA shell from ssh client
book
Article ID: KB0071468
calendar_today
Updated On:
Products
Versions
TIBCO Enterprise Administrator (TEA)
-
Description
Unable to negotiate with ::1 port 2222: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1
In this case, the client and server were unable to agree on the key exchange algorithm. The server offered only a single method diffie-hellman-group1-sha1. OpenSSH supports this method, but does not enable it by default because is weak and within theoretical range of the so-called Logjam attack.
Issue/Introduction
no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 while accessing the TEA shell from ssh client
Environment
ALL
Resolution
First, please upgrade your TEA to the highest version that still works with your BW/Adapter or other applications.
For the case of the above error message, OpenSSH can be configured to enable the diffie-hellman-group1-sha1 key exchange algorithm (or any other that is disabled by default) using the KexAlgorithms option - either on the
2. Or in the ~/.ssh/config file: Uncomment the below line in the ssh_config file present under ~/.ssh/config (user's configuration) /etc/ssh/ (system-wide configuration) ------------ MACs hmac-md5,hmac-sha1,umac-64@openssh.com ------------
Add the below two lines at the end of the ssh_config file: ------------ HostkeyAlgorithms ssh-dss,ssh-rsa KexAlgorithms +diffie-hellman-group1-sha1 ------------
Please contact TIBCO support if you still have questions.