Unable to exchange encryption keys
Werner Stolz via curl-users <[email protected]> Mon, 24 Nov 2025 14:53:05 +0000
| Newsgroups | gmane.comp.web.curl.general |
|---|---|
| Message-ID | <IA2PR16MB6480D738EF5C921ABA8F498ADED0A@IA2PR16MB6480.namprd16.prod.outlook.com> |
--===============7110231780431539311==
Content-Language: en-US
Content-Type: multipart/related;
boundary="_004_IA2PR16MB6480D738EF5C921ABA8F498ADED0AIA2PR16MB6480namp_";
type="multipart/alternative"
--_004_IA2PR16MB6480D738EF5C921ABA8F498ADED0AIA2PR16MB6480namp_
Content-Type: multipart/alternative;
boundary="_000_IA2PR16MB6480D738EF5C921ABA8F498ADED0AIA2PR16MB6480namp_"
--_000_IA2PR16MB6480D738EF5C921ABA8F498ADED0AIA2PR16MB6480namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
We have recently upgraded our version of curl because we are encountering m=
ore and more cases of being unable to establish connections
due to deprecated ciphers.
We first encountered this error in 2022, and the only suggestion was to upg=
rade our version of curl. We have now done that, and the problem
actually seems WORSE.
Here is our version of curl.
curl --version
curl 8.14.1 (powerpc-ibm-aix7.1.5.0) libcurl/8.14.1 OpenSSL/3.0.10 zlib/1.2=
.13 libssh2/1.11.1 nghttp2/1.62.1 OpenLDAP/2.5.16
Release-Date: 2025-06-04
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipn=
s ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp =
ws wss
Features: alt-svc AsynchDNS GSS-API HSTS HTTP2 HTTPS-proxy IPv6 Kerberos La=
rgefile libz NTLM SPNEGO SSL threadsafe UnixSockets
Here is the error message that we are getting. I have removed all the ident=
ifying information.
curl -k -v sftp://url.com:22/ --user 'USER:PASSWORD'
* Host url.com:22 was resolved.
* IPv6: (none)
* IPv4: octet.octet.octet.octet, 18.222.41.6
* Trying octet.octet.octet.octet:22...
* Connected to io.envestnet.com (octet.octet.octet.octet) port 22
* libssh2 cryptography backend: openssl compatible
* User: USER
* Failure establishing ssh session: -5, Unable to exchange encryption keys
* closing connection #0
curl: (2) Failure establishing ssh session: -5, Unable to exchange encrypti=
on keys
Werner Stolz
Advisor, Senior Software Developer
Office: 848.305.7158
Mobile: 630.404.3815
Chicago
InvestCloud.com<https://www.investcloud.com/> | LinkedIn<https://www.link=
edin.com/company/investcloud/>
CNBC World's Top Fintech Companies 2024
________________________________
Electronic Privacy Notice. This e-mail, and any attachments, contains infor=
mation that is, or may be, covered by electronic communications privacy law=
s, and is also confidential and proprietary in nature. If you are not the i=
ntended recipient, please be advised that you are legally prohibited from r=
etaining, using, copying, distributing, or otherwise disclosing this inform=
ation in any manner. Instead, please reply to the sender that you have rece=
ived this communication in error, and then immediately delete it. Thank you=
in advance for your cooperation.
________________________________
--_000_IA2PR16MB6480D738EF5C921ABA8F498ADED0AIA2PR16MB6480namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left:=
#800000 2px solid; } --></style>
</head>
<body>
<font face=3D"Aptos" size=3D"2"><span style=3D"font-size:11pt;">
<div>We have recently upgraded our version of curl because we are encounter=
ing more and more cases of being unable to establish connections<br>
due to deprecated ciphers.</div>
<div> </div>
<div>We first encountered this error in 2022, and the only suggestion was t=
o upgrade our version of curl. We have now done that, and the problem=
<br>
actually seems WORSE.</div>
<div> </div>
<div>Here is our version of curl.</div>
<div> </div>
<div>curl --version</div>
<div>curl 8.14.1 (powerpc-ibm-aix7.1.5.0) libcurl/8.14.1 OpenSSL/3.0.10 zli=
b/1.2.13 libssh2/1.11.1 nghttp2/1.62.1 OpenLDAP/2.5.16</div>
<div>Release-Date: 2025-06-04</div>
<div>Protocols: dict file ftp ftps gopher gophers http https imap imaps ipf=
s ipns ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet =
tftp ws wss</div>
<div>Features: alt-svc AsynchDNS GSS-API HSTS HTTP2 HTTPS-proxy IPv6 Kerber=
os Largefile libz NTLM SPNEGO SSL threadsafe UnixSockets</div>
<div><font size=3D"3"><span style=3D"font-size:12pt;"> </span></font><=
/div>
<div>Here is the error message that we are getting. I have removed all the =
identifying information.</div>
<div><font size=3D"3"><span style=3D"font-size:12pt;"> </span></font><=
/div>
<div>curl -k -v sftp://url.com:22/ --user ‘USER:PASSWORD’</div>
<div>* Host url.com:22 was resolved.</div>
<div>* IPv6: (none)</div>
<div>* IPv4: octet.octet.octet.octet, 18.222.41.6</div>
<div>* Trying octet.octet.octet.octet:22...</div>
<div>* Connected to io.envestnet.com (octet.octet.octet.octet) port 22</div=
>
<div>* libssh2 cryptography backend: openssl compatible</div>
<div>* User: USER</div>
<div>* Failure establishing ssh session: -5, Unable to exchange encryption =
keys</div>
<div>* closing connection #0</div>
<div>curl: (2) Failure establishing ssh session: -5, Unable to exchange enc=
ryption keys</div>
<div><font size=3D"3"><span style=3D"font-size:12pt;"> </span></font><=
/div>
<div><font size=3D"3"><span style=3D"font-size:12pt;"> </span></font><=
/div>
<div><font size=3D"3"><span style=3D"font-size:12pt;"><img src=3D"cid:D5E0C=
[email protected]"> </span></font></div=
>
<div><font size=3D"3"><span style=3D"font-size:12pt;"> </span></font><=
/div>
<div><font size=3D"3"><span style=3D"font-size:12pt;"> </span></font><=
/div>
<div><font face=3D"Arial" size=3D"2"><span style=3D"font-size:10pt;"><b>Wer=
ner Stolz</b></span></font></div>
<div><font face=3D"Arial" size=3D"2"><span style=3D"font-size:10pt;">Adviso=
r, Senior Software Developer</span></font></div>
<div><font face=3D"Arial" size=3D"2"><span style=3D"font-size:10pt;">Office=
: 848.305.7158</span></font></div>
<div><font face=3D"Arial" size=3D"2"><span style=3D"font-size:10pt;">Mobile=
: 630.404.3815 </span></font></div>
<div><font face=3D"Arial" size=3D"2"><span style=3D"font-size:10pt;">Chicag=
o</span></font></div>
<div style=3D"margin-top:3pt;"><font size=3D"3"><span style=3D"font-size:12=
pt;"><a href=3D"https://www.investcloud.com/"><font face=3D"Arial" size=3D"=
2" color=3D"#C63663"><span style=3D"font-size:10pt;"><u>InvestCloud.com</u>=
</span></font></a><font face=3D"Arial" size=3D"2" color=3D"#C63663"><span s=
tyle=3D"font-size:10pt;">
</span></font><font face=3D"Arial" size=3D"2"><span style=3D"font-size:10pt=
;">| </span></font><font face=3D"Arial" size=3D"2" color=3D"#C63663"><span =
style=3D"font-size:10pt;"> </span></font><a href=3D"https://www.linkedin.co=
m/company/investcloud/"><font face=3D"Arial" size=3D"2" color=3D"#C63663"><=
span style=3D"font-size:10pt;"><u>LinkedIn</u></span></font></a></span></fo=
nt></div>
<div><font size=3D"3"><span style=3D"font-size:12pt;"> </span></font><=
/div>
<div><font face=3D"Arial" size=3D"2"><span style=3D"font-size:10pt;"><b>CNB=
C World’s Top Fintech Companies 2024</b></span></font></div>
<div><font size=3D"3"><span style=3D"font-size:12pt;"> </span></font><=
/div>
<div><font size=3D"3"><span style=3D"font-size:12pt;"> </span></font><=
/div>
<div><font face=3D"Times New Roman" size=3D"3"><span style=3D"font-size:12p=
t;"><u> ________________________________ </u></span></font></di=
v>
<div style=3D"margin-top:14pt;"><font face=3D"Times New Roman">Electronic P=
rivacy Notice. This e-mail, and any attachments, contains information that =
is, or may be, covered by electronic communications privacy laws, and is al=
so confidential and proprietary in nature.
If you are not the intended recipient, please be advised that you are legal=
ly prohibited from retaining, using, copying, distributing, or otherwise di=
sclosing this information in any manner. Instead, please reply to the sende=
r that you have received this communication
in error, and then immediately delete it. Thank you in advance for your coo=
peration.</font></div>
<div><font face=3D"Times New Roman" size=3D"3"><span style=3D"font-size:12p=
t;"><u> ________________________________ </u></span></font></di=
v>
<div style=3D"margin-top:14pt;"><font face=3D"Times New Roman"> </font=
></div>
</span></font>
</body>
</html>
--_000_IA2PR16MB6480D738EF5C921ABA8F498ADED0AIA2PR16MB6480namp_--
--_004_IA2PR16MB6480D738EF5C921ABA8F498ADED0AIA2PR16MB6480namp_
Content-Type: image/jpeg; name="Picture (Device Independent Bitmap) 1.jpg"
Content-Description: Picture (Device Independent Bitmap) 1.jpg
Content-Disposition: inline;
filename="Picture (Device Independent Bitmap) 1.jpg";
creation-date="Mon, 24 Nov 2025 14:53:05 GMT";
modification-date="Mon, 24 Nov 2025 14:53:05 GMT"
Content-ID: <[email protected]>
Content-Transfer-Encoding: base64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=
--_004_IA2PR16MB6480D738EF5C921ABA8F498ADED0AIA2PR16MB6480namp_--
--===============7110231780431539311==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-users
Etiquette: https://curl.se/mail/etiquette.html
--===============7110231780431539311==--