Smartty – Cannot connect: LIBSSH2 returned LIBSSH2_ERROR_KEX_FAILURE

[bucketsharpie]

Hi I am having trouble connecting to newly updated pfSense 2.3.2-RELEASE

I get an error: Cannot connect: LIBSSH2 returned LIBSSH2_ERROR_KEX_FAILURE with smartty.

There was a recent change in pfSenses SSH server i believe

https://doc.pfsense.org/index.php/2.3.2_New_Features_and_Changes#SSH_Daemon

Is there a way to fix this on smartty?

[gammamu]

I think your issue is this: The PFSense release doc states that “disabled some older, weaker algorithms” then enumerates what is currently being used.

In my experience, SmarTTY won’t work on anything newer or more secure than diffie-hellman-group-exchange-sha1 with hmac-sha1. Your application, and any hardened system, isn’t using either.

SmarTTY’s kex, cipher, and MAC support is antique, unfortunately.

I’d love to hear from the devs: When is an updated version coming out?!?

[Author]

Posts