inspec / train

Transport Interface to unify communication over SSH, WinRM, and friends.
Apache License 2.0
119 stars 87 forks source link

CHEF-8598: Add support for curve25519 key exchange #764

Closed ahasunos closed 5 months ago

ahasunos commented 5 months ago

Description

This pull request introduces support for the curve25519 key exchange to address an error associated with key exchange algorithm negotiation.

Here is the issue encountered when attempting to SSH into a machine (an Ubuntu EC2 instance in my case) which is configured to exclusively support curve25519 for key exchange.

Transport error, can't connect to 'ssh' backend: SSH command failed (could not settle on kex algorithm
Server kex preferences: curve25519-sha256@libssh.org,kex-strict-s-v00@openssh.com
Client kex preferences: ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1)

Related Issue

Types of changes

Checklist:

Vasu1105 commented 5 months ago

If anyone has doubt why this is in test group https://github.com/inspec/train/pull/439