Algorithm negotiation fail SSH in Jenkins

by

TL;DR edit your sshd_config and enable support for diffie-hellman-group-exchange-sha1 and diffie-hellman-group1-sha1 in KexAlgorithms:

KexAlgorithms [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1

I suspect that the problem appeared after the following change in OpenSSH 6.7: “The default set of ciphers and MACs has been altered to remove unsafe algorithms.”. (see changelog). This version was released on Oct, 6, and made it on Oct, 21 to Debian testing (see Debian changelog).

OpenSSH enables only the following key exchange algorithms by default:

  • [email protected]
  • ecdh-sha2-nistp256
  • ecdh-sha2-nistp384
  • ecdh-sha2-nistp521
  • diffie-hellman-group-exchange-sha256
  • diffie-hellman-group14-sha1

Whereas JSch claims to support these algorithms (see under “features”) for key exchange:

  • diffie-hellman-group-exchange-sha1
  • diffie-hellman-group1-sha1

So indeed, they cannot agree on a common key exchange algorithm. Updating sshd_config (and restarting the SSH server) does the trick. Apparently JSch is supposed to support the “diffie-hellman-group-exchange-sha256” method since version 0.1.50 (see changelog).

More Related Contents:

  1. How to resolve Java UnknownHostKey, while using JSch SFTP library?
  2. Certain Unix commands fail with “… not found”, when executed through Java using JSch
  3. How to read JSch command output?
  4. com.jcraft.jsch.JSchException: UnknownHostKey
  5. Providing input/subcommands to command executed over SSH with JSch
  6. Run a command over SSH with JSch
  7. Can we use JSch for SSH key-based communication?
  8. JSch Logs in files
  9. “Invalid privatekey” when using JSch
  10. Connect to remote MySQL database through SSH using Java
  11. JSchException: Algorithm negotiation fail
  12. How do I run SSH commands on remote system using Java? [closed]
  13. Multiple commands through JSch shell
  14. The cipher ‘aes256-cbc’ is required, but it is not available
  15. Sending commands to server via JSch shell channel
  16. What is the difference between the ‘shell’ channel and the ‘exec’ channel in JSch
  17. Skipping Kerberos authentication prompts with JSch [duplicate]
  18. Public key authentication fails with JSch but work with OpenSSH with the same key
  19. SFTP file transfer using Java JSch
  20. Getting unwanted characters when reading command output from SSH server using JSch
  21. Using Keys with JGit to Access a Git Repository Securely
  22. Multiple commands using JSch
  23. Error – trustAnchors parameter must be non-empty
  24. Maven dependencies are failing with a 501 error
  25. Using JSch, is there a way to tell if a remote file exists without doing an ls?
  26. How do I give Jenkins more heap space when it’s running as a daemon on Ubuntu?
  27. How to Run TestNG Tests on Jenkins
  28. JConsole over ssh local port forwarding
  29. Never ending of reading server response using jSch
  30. SSH connection with Java

Leave a Comment