Trying to connect to a SFTP server ``` lt cfftp action = ope cfml #cfml-general

Trying to connect to a SFTP server ```<cfftp a...

Viral

03/09/2023, 2:51 PM

Trying to connect to a SFTP server

Copy code

<cfftp 
action = "open" 
connection = "My_query"
server = "xx.xx.xx.xx" 
username = "username" 
password = "password"
port=22
stopOnError = "yes"
retryCount = 1
secure = "yes">

Getting the below error • Cause : Algorithm negotiation fail • Detail : Verify your connection attributes: username, password, server, fingerprint, port, key, connection, proxyServer, and secure (as applicable). Error: Algorithm negotiation fail. • Message: An error occurred while establishing an sFTP connection. --- It is because of the cryptography algorithm not matching between client and server. When I use Filezilla it connects just fine. I tried using the latest jar file but with no avail, Anyone been through the above error before

aliaspooryorik

03/09/2023, 3:11 PM

Which version of ColdFusion / Lucee are you using?

Viral

03/09/2023, 5:04 PM

CF 2016 😢

Viral

03/09/2023, 5:20 PM

is there a way where we can find

highest level of encryption

supported by Coldfusion 2016

aliaspooryorik

03/09/2023, 5:22 PM

2016 with update 6 should be OK

aliaspooryorik

03/09/2023, 5:22 PM

See CF-4014234 on https://helpx.adobe.com/uk/coldfusion/kb/bugs-fixed-coldfusion-2016-update-6.html

✅ 1

Viral

03/10/2023, 9:15 AM

We are currently on CF 2016 - Update 11

Viral

03/10/2023, 9:16 AM

I got to know SFTP server have disabled the below algorithm

Copy code

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_256_CBC_SHA256
TLS_RSA_WITH_AES_128_CBC_SHA256
TLS_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_3DES_EDE_CBC_SHA
TLS_PSK_WITH_AES_256_CBC_SHA384
TLS_PSK_WITH_AES_128_CBC_SHA256

Viral

03/10/2023, 9:18 AM

I think CF 2016 is using one of the above which we need the security team to enable again Until we move that feature to other technology (which is planned to be in 6 months)

4 Views

Open in Slack

Previous Next