[GUACAMOLE-1052] Libssh2 has less key exchange methods when compare to libssh.

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 0.9.14
• Component/s: SSH
• Assignee: Unassigned
• Reporter: Anburaj palraj
• Created: 24/Apr/20 15:06
• Updated: 27/Mar/21 18:36
• Resolved: 24/Apr/20 17:07

Description

Hi all,

I am using guacamole 0.9.14 and libssh2-1.9.0.

 it is working well without any issue till now. 

Recently, the application team they have updated the patch on their system. So after that, we were not able to do ssh to their systems using guacamole.

Whereas when we  try to login using OpenSSH (putty or login from linux system )  is working 

So i  checked and found only the below mentioned key exchange methods are allowed on remote Linux systems.

"[e-mail],ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256"

But all these key exchange methods are not supported by libssh2. Whereas it is supported on libssh.

Libssh key exchange methods.

 

Libssh2 key exchange methods.

 

so is there any option to choose libssh instead of libssh2 while installing? 

Or suggest me some good ideas  to rectify this issue.

 

 

Issue Links

• duplicates: GUACAMOLE-945 Migrate SSH support (back) to libssh
• is duplicated by: GUACAMOLE-1315 SSH Handshake failed in verbose logging