Archived Forum PostQuestion:
Hi,
We are using Cilkat since many years, after SSH server update on a embedded machine, we are no more able to connect ( ActiveX with VBS ) this one. It did look like the Chilkat SSH client isnt able to find a agreement about the cypher to be used with the old chilkat version. I updated the Chilkat software - since then we still have failures - but they changed >> see log below. Looks like finding a agreement on encryption/MAC/compression took place ... but then at the end we find a timeout
sshDhGex: Socket operation timeout. Failed to read KEX_DH_GEX_REQUEST response
Any idea welcome - thx Michael
Connect_SFtp:
DllDate: Mar 11 2016
ChilkatVersion: 9.5.0.56
UnlockPrefix: xxxxxxxxxxx /not public
Username: xxxxxxxxxx /not public
Architecture: Little Endian; 32-bit
Language: ActiveX
VerboseLogging: 1
SftpVersion: 0
connectInner:
hostname: 172.21.88.21
port: 22
sshConnect:
connectSocket:
domainOrIpAddress: 172.21.88.21
port: 22
connectTimeoutMs: 10000
connect_ipv6_or_ipv4:
This is an IPV4 numeric address.
Domain to IP address resolution not needed.
getAddressInfo:
(leaveContext)
connecting to IPV4 address...
ipAddress: 172.21.88.21
createSocket:
Setting SO_SNDBUF size
sendBufSize: 262144
Setting SO_RCVBUF size
recvBufSize: 4194304
(leaveContext)
connect:
Waiting for the connect to complete...
ck_getsockname_ipv4:
(leaveContext)
myIP: 172.21.45.1
myPort: 4644
socket connect successful.
(leaveContext 16ms)
(leaveContext 32ms)
(leaveContext 32ms)
Established TCP/IP connection with SSH server
Turning on TCP_NODELAY.
(leaveContext 32ms)
sshSetupConnection:
clientIdentifier: SSH-2.0-PuTTY_Release_0.66
Sending client identifier...
Done sending client identifier.
Reading server version...
initialDataFromSshServer: SSH-2.0-unknown
serverVersion: SSH-2.0-unknown
build_kexInit:
preferRsaHostKeyAlgorithm: 1
(leaveContext)
sendMessageInOnePacket:
(leaveContext)
KeyExchangeAlgs:
algorithm: curve25519-sha256@libssh.org
algorithm: ecdh-sha2-nistp256
algorithm: ecdh-sha2-nistp384
algorithm: ecdh-sha2-nistp521
algorithm: diffie-hellman-group-exchange-sha256
algorithm: diffie-hellman-group14-sha1
(leaveContext)
HostKeyAlgs:
algorithm: ssh-rsa
(leaveContext)
EncCS:
algorithm: chacha20-poly1305@openssh.com
algorithm: aes128-ctr
algorithm: aes192-ctr
algorithm: aes256-ctr
algorithm: aes128-gcm@openssh.com
algorithm: aes256-gcm@openssh.com
(leaveContext)
EncSC:
algorithm: chacha20-poly1305@openssh.com
algorithm: aes128-ctr
algorithm: aes192-ctr
algorithm: aes256-ctr
algorithm: aes128-gcm@openssh.com
algorithm: aes256-gcm@openssh.com
(leaveContext)
MacCS:
algorithm: umac-64-etm@openssh.com
algorithm: umac-128-etm@openssh.com
algorithm: hmac-sha2-256-etm@openssh.com
algorithm: hmac-sha2-512-etm@openssh.com
algorithm: hmac-sha1-etm@openssh.com
algorithm: umac-64@openssh.com
algorithm: umac-128@openssh.com
algorithm: hmac-sha2-256
algorithm: hmac-sha2-512
algorithm: hmac-sha1
(leaveContext 16ms)
MacSC:
algorithm: umac-64-etm@openssh.com
algorithm: umac-128-etm@openssh.com
algorithm: hmac-sha2-256-etm@openssh.com
algorithm: hmac-sha2-512-etm@openssh.com
algorithm: hmac-sha1-etm@openssh.com
algorithm: umac-64@openssh.com
algorithm: umac-128@openssh.com
algorithm: hmac-sha2-256
algorithm: hmac-sha2-512
algorithm: hmac-sha1
(leaveContext)
CompCS:
algorithm: none
algorithm: zlib@openssh.com
(leaveContext)
CompSC:
algorithm: none
algorithm: zlib@openssh.com
(leaveContext)
LangCS:
(leaveContext)
LangSC:
(leaveContext)
ChosenIncomingEncryption: aes256-ctr
ChosenOutgoingEncryptoin: aes256-ctr
ChosenIncomingMac: hmac-sha2-256
ChosenOutgoingMac: hmac-sha2-256
ChosenIncomingCompression: zlib@openssh.com
ChosenOutgoingCompression: zlib@openssh.com
ChosenKexAlgorithm: diffie-hellman-group-exchange-sha256
choose_hostkey_algorithm:
preferRsaHostKeyAlgorithm: 1
(leaveContext)
ChosenHostKeyAlgorithm: ssh-rsa
numBits: 256
pbits: 4096
Using GEX Group.
Sending KEX_DH_GEX_REQUEST...
pbits: 4096
sendMessageInOnePacket:
(leaveContext 16ms)
Failed to read 1st block_size bytes..
sshDhGex: Socket operation timeout.
Failed to read KEX_DH_GEX_REQUEST response
(leaveContext 31047ms)
(leaveContext 31094ms)
Failed.
(leaveContext 31109ms)
IsConnected:
DllDate: Mar 11 2016
ChilkatVersion: 9.5.0.56
UnlockPrefix: xxxxxxxxxxx /not public
Username: xxxxxxxxxxx /not public
Architecture: Little Endian; 32-bit
Language: ActiveX
VerboseLogging: 1
SftpVersion: 0
(leaveContext)
Thanks Michael,
Assuming this is an SSH server I can reach (at 172.21.88.21), I'll be happy to test it directly and work out the problems. (Given that it's just the Connect, this can be worked on without needing any account..)
I'm not able to reach 172.21.88.21, and therefore I'm not able to test it..
Hi Michael,
Did you ever find a solution to this issue, we're running into the exact same problem after a server upgrade.
Make sure to test with the very latest version of Chilkat (v9.5.0.69, or .68)
My original answer was from over a year ago. I suspect the problem has been resolved for quite some time.