[Info-vax] VSI Licence doesn't seem to work on AXP (OpenVMS 7.3-2)

[Stephen Hoffman]

On 2022-07-26 20:12:49 +0000, Single Stage to Orbit said:

> Now if I could make my SFTP client (on Linux) talk to VSI's SFTP 
> server, I don't think it likes me much at the moment!

Here's the sethost bash shell script I use when dealing with OpenVMS 
servers and OpenVMS-related connections and iLO-related connections, as 
those all tend to be down-revision:

https://groups.google.com/g/comp.os.vms/c/DhT_TWepPJ8/m/ReiPhF25CAAJ

VSI has been addressing these issues for those with current patches 
applied, and with OpenVMS-related HP/HPE Integrity iLO security being 
permanently bad.

I haven't poked at the VSI sftp servers to see what the errors might be 
there—though the kex and related errors are obvious with current 
ssh/sftp clients.

Down-revision server kex connection showing connection failure:
bash$ ssh user at example.com
Unable to negotiate with 203.0.113.201 port 22: no matching key 
exchange method found. Their offer: 
diffie-hellman-group14-sha1,diffie-hellman-group1-sha1

Working connection with downgraded security:
bash$ ssh -o HostKeyAlgorithms=ssh-rsa,ssh-dss -o 
KexAlgorithms=diffie-hellman-group1-sha1 -o Ciphers=aes128-cbc,3des-cbc 
-o MACs=hmac-md5,hmac-sha1 user at example.com

I use sethost to hide the connection downgrade drivel, as different 
servers around here will require different connection combinations.

-- 
Pure Personal Opinion | HoffmanLabs LLC