[GH-ISSUE #1104] No matching ciphers - cannot connect to Cisco devices #641

Closed
opened 2026-02-27 00:00:24 +03:00 by kerem · 10 comments
Owner

Originally created by @iantriggs on GitHub (Jan 25, 2019).
Original GitHub issue: https://github.com/electerm/electerm/issues/1104

Electerm version: electerm-0.26.31-win-x64

Operating system(linux, macos, or windows7/8/10?): Windows 10

Expected Behavior

Should be able to connect to Cisco devices via SSH.

Current Behavior

Currently it's failing with the following error:

Error: Handshake failed: no matching client->server cipher at check_KEXINIT (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2375:15) at check (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2254:9) at onKEXINIT (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2251:5) at SSH2Stream. (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:207:5) at SSH2Stream.emit (events.js:182:13) at parse_KEXINIT (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:3963:8) at parsePacket (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:3859:12) at SSH2Stream._transform (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:693:13) at SSH2Stream.Transform._read (_stream_transform.js:190:10) at SSH2Stream._read (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:252:15) at SSH2Stream.Transform._write (_stream_transform.js:178:12) at doWrite (_stream_writable.js:410:12) at clearBuffer (_stream_writable.js:540:7) at onwrite (_stream_writable.js:465:7) at SSH2Stream.afterTransform (_stream_transform.js:94:3) at C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:442:11

The Cisco device looks like this:

Router1#show ssh 
Connection Version Mode Encryption  Hmac         State                 Username
0          2.0     IN   aes256-cbc  hmac-sha1    Session started       fred

Possible Solution

Allow the user to select older ciphers.

Steps to Reproduce

  1. Add new connection to the bookmarks to a Cisco device.
  2. Attempt to connect.
  3. The handshake failed error appears.
Originally created by @iantriggs on GitHub (Jan 25, 2019). Original GitHub issue: https://github.com/electerm/electerm/issues/1104 <!--- Provide some basic info --> ## Electerm version: electerm-0.26.31-win-x64 ## Operating system(linux, macos, or windows7/8/10?): Windows 10 ## Expected Behavior Should be able to connect to Cisco devices via SSH. ## Current Behavior Currently it's failing with the following error: Error: Handshake failed: no matching client->server cipher at check_KEXINIT (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2375:15) at check (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2254:9) at onKEXINIT (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2251:5) at SSH2Stream.<anonymous> (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:207:5) at SSH2Stream.emit (events.js:182:13) at parse_KEXINIT (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:3963:8) at parsePacket (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:3859:12) at SSH2Stream._transform (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:693:13) at SSH2Stream.Transform._read (_stream_transform.js:190:10) at SSH2Stream._read (C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:252:15) at SSH2Stream.Transform._write (_stream_transform.js:178:12) at doWrite (_stream_writable.js:410:12) at clearBuffer (_stream_writable.js:540:7) at onwrite (_stream_writable.js:465:7) at SSH2Stream.afterTransform (_stream_transform.js:94:3) at C:\Downloads\electerm-0.26.31-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:442:11 The Cisco device looks like this: ``` Router1#show ssh Connection Version Mode Encryption Hmac State Username 0 2.0 IN aes256-cbc hmac-sha1 Session started fred ``` ## Possible Solution Allow the user to select older ciphers. ## Steps to Reproduce 1. Add new connection to the bookmarks to a Cisco device. 2. Attempt to connect. 3. The handshake failed error appears.
kerem 2026-02-27 00:00:24 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@zxdong262 commented on GitHub (Jan 25, 2019):

Hi @iantriggs I will investigate this, maybe build a custom version for you to test.

<!-- gh-comment-id:457457363 --> @zxdong262 commented on GitHub (Jan 25, 2019): Hi @iantriggs I will investigate this, maybe build a custom version for you to test.
Author
Owner

@zxdong262 commented on GitHub (Jan 25, 2019):

https://github.com/mscdex/ssh2/issues/417

<!-- gh-comment-id:457458591 --> @zxdong262 commented on GitHub (Jan 25, 2019): https://github.com/mscdex/ssh2/issues/417
Author
Owner

@iantriggs commented on GitHub (Jan 25, 2019):

Thanks, I'd appreciate that! It would be a big win to use Electerm in the network engineering field, instead of something like SecureCRT.

<!-- gh-comment-id:457459596 --> @iantriggs commented on GitHub (Jan 25, 2019): Thanks, I'd appreciate that! It would be a big win to use Electerm in the network engineering field, instead of something like SecureCRT.
Author
Owner

@zxdong262 commented on GitHub (Jan 25, 2019):

https://github.com/electerm/electerm/releases/download/untagged-56f3511d49574d9306d9/electerm-0.26.33-win-x64.tar.gz

Hi @iantriggs custom build done, can you try this?

<!-- gh-comment-id:457461740 --> @zxdong262 commented on GitHub (Jan 25, 2019): https://github.com/electerm/electerm/releases/download/untagged-56f3511d49574d9306d9/electerm-0.26.33-win-x64.tar.gz Hi @iantriggs custom build done, can you try this?
Author
Owner

@iantriggs commented on GitHub (Jan 25, 2019):

The link just says 'Not found', so cannot download.

<!-- gh-comment-id:457463586 --> @iantriggs commented on GitHub (Jan 25, 2019): The link just says 'Not found', so cannot download.
Author
Owner

@zxdong262 commented on GitHub (Jan 25, 2019):

https://electerm.html5beta.com/temp-electerm-0.26.33-win-x64.tar.gz

How about this one, I upload it to my server with electerm.

<!-- gh-comment-id:457468324 --> @zxdong262 commented on GitHub (Jan 25, 2019): https://electerm.html5beta.com/temp-electerm-0.26.33-win-x64.tar.gz How about this one, I upload it to my server with electerm.
Author
Owner

@zxdong262 commented on GitHub (Jan 26, 2019):

@iantriggs I will merge this into master any way, let me know how it work when you got time to test it. If it do not work as expected, I would open this again. If it works well, I would release a new version.

<!-- gh-comment-id:457798074 --> @zxdong262 commented on GitHub (Jan 26, 2019): @iantriggs I will merge this into master any way, let me know how it work when you got time to test it. If it do not work as expected, I would open this again. If it works well, I would release a new version.
Author
Owner

@iantriggs commented on GitHub (Jan 28, 2019):

@zxdong262 Still no luck. The error message is almost the same:

Error: Handshake failed: no matching client->server cipher at check_KEXINIT (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2375:15) at check (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2254:9) at onKEXINIT (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2251:5) at SSH2Stream. (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:207:5) at SSH2Stream.emit (events.js:182:13) at parse_KEXINIT (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:3963:8) at parsePacket (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:3859:12) at SSH2Stream._transform (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:693:13) at SSH2Stream.Transform._read (_stream_transform.js:190:10) at SSH2Stream._read (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:252:15) at SSH2Stream.Transform._write (_stream_transform.js:178:12) at doWrite (_stream_writable.js:410:12) at writeOrBuffer (_stream_writable.js:394:5) at SSH2Stream.Writable.write (_stream_writable.js:294:11) at Socket.ondata (_stream_readable.js:672:20) at Socket.emit (events.js:182:13)

<!-- gh-comment-id:458332335 --> @iantriggs commented on GitHub (Jan 28, 2019): @zxdong262 Still no luck. The error message is almost the same: Error: Handshake failed: no matching client->server cipher at check_KEXINIT (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2375:15) at check (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2254:9) at onKEXINIT (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:2251:5) at SSH2Stream.<anonymous> (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:207:5) at SSH2Stream.emit (events.js:182:13) at parse_KEXINIT (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:3963:8) at parsePacket (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:3859:12) at SSH2Stream._transform (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:693:13) at SSH2Stream.Transform._read (_stream_transform.js:190:10) at SSH2Stream._read (C:\Downloads\electerm-0.26.33-win-x64\resources\app.asar\node_modules\ssh2-streams\lib\ssh.js:252:15) at SSH2Stream.Transform._write (_stream_transform.js:178:12) at doWrite (_stream_writable.js:410:12) at writeOrBuffer (_stream_writable.js:394:5) at SSH2Stream.Writable.write (_stream_writable.js:294:11) at Socket.ondata (_stream_readable.js:672:20) at Socket.emit (events.js:182:13)
Author
Owner

@zxdong262 commented on GitHub (Jan 29, 2019):

Hi @iantriggs I build a new version, I think this time it will work.

https://electerm.html5beta.com/electerm-0.26.37-win-x64.tar.gz

<!-- gh-comment-id:458372467 --> @zxdong262 commented on GitHub (Jan 29, 2019): Hi @iantriggs I build a new version, I think this time it will work. https://electerm.html5beta.com/electerm-0.26.37-win-x64.tar.gz
Author
Owner

@iantriggs commented on GitHub (Jan 29, 2019):

@zxdong262 Thanks, this version now works fine :)

<!-- gh-comment-id:458404832 --> @iantriggs commented on GitHub (Jan 29, 2019): @zxdong262 Thanks, this version now works fine :)
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/electerm#641
No description provided.