X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 7967D385DC25
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1587299505;
	bh=pVP/AhOjrKuE83oBkV/CEVj5KlTHKAv+/8ldqaJOVJg=;
	h=References:In-Reply-To:Date:Subject:To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	From;
	b=CXngFNJILtORc4mPDy686XuuUM4jXeDT+cbcsDj7Y2PyhZ+oAT6smWDCBLerbufqW
	vLDhNZ9N4a6YiHG/1KSNbLjQ8lvESErqgkUdEyEMEtMjLZrh5VDRzz5e06sb8Akbzl
	It0LqnV/DthEgBfkMNpi9J2RQKqvmX6K+KErY6tM=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 871293858D31
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20161025;
	h=x-gm-message-state:mime-version:references:in-reply-to:from:date
	:message-id:subject:to;
	bh=KZ+n383qp11a7Lm189aGsfo922m7u6qY9RWlhjDwB/g=;
	b=C1HmxEf2EhJ0gwbO+VVzhQduZu92KvFiaH6186TZHbUjNB5r1A/tOJq8qcDEZqqmpv
	t1VdOufoX4OnnS9ur6dmCks4PXQ/6fJfL2R+XHVzlV2CSxxGkE6HK52lpekhqOLI7456
	tBEJwk8Rwqpps9M6l9PPPV7uRj3Vp/PuIegGensuP7ld+YgbNVZjHmH4fXm8l1XVY9Cy
	oB4itXWKR1/9b+MZKFEYg2tgeQOF5lAMji4n8ps7DigdnhjPOUzYV1v8ttJrshAFFnLt
	0hRV9P/gK8MNCMqh0p/ua8oMyN20JkkmzKzg0Lki+T4WKv99Ix8LLlhWsGTyP/L106ZI
	h9Jw==
X-Gm-Message-State:	AGi0PuZDbvhlTYhkYDi3auwm3oYpnu4GFsV54lsaBEILJ10R1yzg5age
	F4BeHmgz+uRZfUY6t3bbDVDpGcMuQInaenQGxtmyHnuvgWI=
X-Google-Smtp-Source:	APiQypI8pr5PPmutk74uvayWupLdUJAMUWC1KYsbRPcehUZZkRnfKzjmYP6TWwPWqofFb+1cWpNc9thKmJqZ7RmXh2o=
X-Received:	by 2002:a1f:3649:: with SMTP id d70mr7687059vka.12.1587299499729;
	Sun, 19 Apr 2020 05:31:39 -0700 (PDT)
MIME-Version:	1.0
References:	<CAPJ9Yc-qyZCVUKiBrRN7_Qm0Fx5bmujBE6iefk2Jp93HsJj9SA AT mail DOT gmail DOT com>
In-Reply-To:	<CAPJ9Yc-qyZCVUKiBrRN7_Qm0Fx5bmujBE6iefk2Jp93HsJj9SA@mail.gmail.com>
Date:	Sun, 19 Apr 2020 20:31:28 +0800
Message-ID:	<CAK+zucnzzzdVoT=eKXyzJ6yuAy5NK6FUc54a_u7VqEfDAStVNA@mail.gmail.com>
Subject:	Re: latest openssh can not connect to older server
To:	cygwin AT cygwin DOT com
X-Spam-Status:	No, score=-2.0 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, HTML_MESSAGE,
	RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
	TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-Content-Filtered-By:	Mailman/MimeDel 2.1.29
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<http://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Sharuzzaman Ahmat Raslan via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	Sharuzzaman Ahmat Raslan <sharuzzaman AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 03JCWB9G012521

Hi.

New OpenSSH client will not connect to server that use SHA1.

Please refer to this: https://www.openssh.com/legacy.html

You should configure your old server to use more modern cipher

Thank you

On Sun, 19 Apr 2020, 8:13 pm David Balažic via Cygwin, <cygwin AT cygwin DOT com>
wrote:

> Hi!
>
> I tried to backup some files from my server with scp and failed:
>
> $ scp  -v  root AT the DOT server:/root/a.file  .
> Executing: program /usr/bin/ssh host the.server, user root, command
> scp -v -f /root/a.file
> OpenSSH_8.2p1, OpenSSL 1.1.1f  31 Mar 2020
> debug1: Connecting to the.server [192.168.1.11] port 22.
> debug1: Connection established.
> debug1: identity file /home/stein/.ssh/id_rsa type -1
> debug1: identity file /home/stein/.ssh/id_rsa-cert type -1
> debug1: identity file /home/stein/.ssh/id_dsa type -1
> debug1: identity file /home/stein/.ssh/id_dsa-cert type -1
> debug1: identity file /home/stein/.ssh/id_ecdsa type -1
> debug1: identity file /home/stein/.ssh/id_ecdsa-cert type -1
> debug1: identity file /home/stein/.ssh/id_ecdsa_sk type -1
> debug1: identity file /home/stein/.ssh/id_ecdsa_sk-cert type -1
> debug1: identity file /home/stein/.ssh/id_ed25519 type -1
> debug1: identity file /home/stein/.ssh/id_ed25519-cert type -1
> debug1: identity file /home/stein/.ssh/id_ed25519_sk type -1
> debug1: identity file /home/stein/.ssh/id_ed25519_sk-cert type -1
> debug1: identity file /home/stein/.ssh/id_xmss type -1
> debug1: identity file /home/stein/.ssh/id_xmss-cert type -1
> debug1: Local version string SSH-2.0-OpenSSH_8.2
> debug1: Remote protocol version 2.0, remote software version
> dropbear_2011.54
> debug1: no match: dropbear_2011.54
> debug1: Authenticating to the.server:22 as 'root'
> debug1: SSH2_MSG_KEXINIT sent
> debug1: SSH2_MSG_KEXINIT received
> debug1: kex: algorithm: (no match)
> Unable to negotiate with 192.168.1.11 port 22: no matching key
> exchange method found. Their offer:
> diffie-hellman-group1-sha1,diffie-hellman-group14-sha1
>
>
> I tried OpenSSH_8.0p1-2 which is still available in the cygwin
> setup-x86_64.exe wizard and that version works fine.
> (the version above is 8.2.p1-1 in the setup wizard)
>
> Regards,
> David
> --
> Problem reports:      https://cygwin.com/problems.html
> FAQ:                  https://cygwin.com/faq/
> Documentation:        https://cygwin.com/docs.html
> Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple
>
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -