X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type:content-transfer-encoding; q=dns; s=default; b=Kri
	7lcXGjyhDX7n7R7dwSBNXeKA1e+kHXjEjgaJNj6RVMZ6VzgHgtx300Cq/LQNLC9A
	xJoRyWb9IBQR/znZProqmJYvXjNyOYchpHYYDhPwTbsE2jIAzyZvMLsBwoEZPgPD
	OA3OcyP34AEltlYilF6yRvokvXs/FYZ780GSNGd8=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type:content-transfer-encoding; s=default; bh=YHD7Lb7yH
	T0GTZGpU6zrX2VoiqA=; b=Zn4fmYo8W8jjFxufmlz6LZSDZsH/oncLtYvdhG8Cn
	eag8cCKBftHAJ/Uh+A+yBJA38x+337IOYlGAN3dvXbOJnvZKRgZ7oprRfGS/sj7g
	wkEJ84AVuOsjJbzXHUY4iMSJxnXXPjEeuMU0VFKiqmg12TY48sYmRQAvIW64GVnC
	Uk=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-0.1 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2
X-HELO:	mail-wg0-f42.google.com
MIME-Version:	1.0
X-Received:	by 10.194.110.233 with SMTP id id9mr53308937wjb.22.1420552053665; Tue, 06 Jan 2015 05:47:33 -0800 (PST)
Date:	Tue, 6 Jan 2015 08:47:33 -0500
Message-ID:	<CAARiEzdZwOh8BrB0HpoFZ-Xz5Qcdiy_ARnhHf3jStgOOdRPrug@mail.gmail.com>
Subject:	SFTP Cipher Mismatch
From:	Chris Johnston <cojohnst AT gmail DOT com>
To:	Cygwin AT cygwin DOT com
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id t06Dlq66004598

Hello,

 I am attempting to set up Cygwin for Cisco’s Disaster Recovery System
(9. 1.2.10000-28) to run SFTP backups through. I have followed this
guide that I found through online searches
(https://supportforums.cisco.com/sites/default/files/legacy/0/3/2/41230-Cygwin%20Setup.pdf)
and think I have everything set up correctly. I can use Filezilla
through port 22 and the user account I set up through the Cygwin
terminal to access the server I’d like to back up to. However when I
attempt to set up the DRS on Cisco’s site I get an error message
saying that “Update Failed: Unable to access SFTP server. Please
ensure the Username and Password are correct.”

I know what you’re thinking, “This is a Cisco Question, this guy sent
to the wrong list”. Well I talked to Cisco TAC and after the run
around they said to reach out to you folks because our CUCM is sending
in aes-128-cbc, whereas Cygwin is replying back with aes-128-ctr,
which they say is a mismatch and causing my problem. I checked my
ssh_config and aes128-cbc is listed under Ciphers. Is there a way to
change how Cygwin is replying? When searching I haven’t found a clear
command that lets me change the default.  Cisco’s suggestion was...

To check if aes-128-cbc is enable , go to C:\cygwin\etc\sshd_config
and check if the following line is there:

Ciphers aes256-ctr,aes192-ctr,aes128-ctr,arcfour256,aes128-cbc

If the line is there make sure you have aes128-cbc in there

...There was not a line specifying aes128-cbc in SSHD_Config, but as I
understand it that means it would go to the default which was in the
SSH_Config, which did include aes128-cbc. Cisco’s suggestion of copy
and pasting that line in the sshd_config didn’t work. Any help would
be greatly appreciated.

All the best,

cojohnst

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -