topic Re: Hello, Dario. in Network Security

ASA - the first key-exchange algorithm supported by the server is diffie-hellman-group1-sha1

Dario Francesco Vanin — Tue, 12 Mar 2019 09:12:56 GMT

Hi guys,

When I SSH into my home test server I see the following error on Putty:

"The first key-exchange algorithm supported by the server is diffie-hellman-group1-sha1".

As SHA1 is no longer secure, I'd like to switch to something more secure.

However, when I run

# ssh key-exchange group ?

configure mode commands/options:
dh-group1-sha1 Diffie-Hellman group 2
dh-group14-sha1 Diffie-Hellman group 14

I see that both the options are for sha1 only.

How can I use different hashing mechanisms?

Thanks,

Dario

nurbol555 — Thu, 13 Apr 2017 06:36:55 GMT

it seems you don't have license for other security protocols, check it

Rinat Garipov — Wed, 07 Jun 2017 12:59:52 GMT

Hello, Dario.

I would like to suggest you to change default algorithm on server, like this:
ssh key-exchange group dh-group14-sha1

That might help

SS2020 — Sat, 23 Mar 2024 12:26:49 GMT

Thank you Rinat for sharing this.

Regards