Using SSHD without any third-party JCE provider

[Marian Seitner <ma...@outlook.com>]

Hi,

is it possible to use SSHD without any third-party JCE provider?

I tried it but ran into the following problem:
2014-04-07 13:29:57,579 WARN  [NioProcessor-12] org.apache.sshd.client.session.ClientSessionImpl: (de) Exception caught

java.lang.IllegalStateException: Unable to negociate key exchange for 
encryption algorithms (client to server) (client:  / server: 
aes128-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc)


Regards,
Marian Seitner
 		 	   		  

Re: Using SSHD without any third-party JCE provider

[Guillaume Nodet <gn...@apache.org>]

2014-05-07 9:48 GMT+02:00 Marian Seitner <ma...@outlook.com>:

> Hi,
>
> is it possible to use SSHD without any third-party JCE provider?
>

Yes, though you need at least some JCE support.

>
> I tried it but ran into the following problem:
> 2014-04-07 13:29:57,579 WARN  [NioProcessor-12]
> org.apache.sshd.client.session.ClientSessionImpl: (de) Exception caught
>
> java.lang.IllegalStateException: Unable to negociate key exchange for
> encryption algorithms (client to server) (client:  / server:
>
> aes128-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc)
>

The client seems misconfigured somehow.
The default configuration for the client try to select supported ciphers.
It could be the case that none are supported, but afaik, the default JDK
installations should work fine for at least the 128 bit ciphers.
You can try adding BouncyCastle to your classpath and see if it changes
anything, but at the end, it depends on the JCE level of support from your
JRE.


>
>
> Regards,
> Marian Seitner
>