[Wish] Supporting stronger KexAlgorithms

[Patschi]

Hello,

It seems that starting Debian Jessie 8 is not supporting SHA1 for the key exchange by default anymore. Manual configuration like it is described in KB2061 is required. It would be great, when Veeam could support stronger algorithms in the future. SHA1 is also not rated as very secure for HTTPS certificates anymore.

When SHA1 is not supported (like on my Debian 8 machine), the following error occurs when testing credentials:

Code: Select all

30.09.2015 09:53:09 :: Testing SSH credentials for: root Error: Server does not support diffie-hellman-group1-sha1 for keyexchange

Kind regards,
Patrik

[PTide]

Hi,

This problem is to be resolved in the upcoming VBR v9.

Thank you.

[Patschi]

Great! Thanks for letting me know! Looking forward to Version 9 then

[PetrH]

Hello,

unfortunately Veeam B&R v9 and v9U1 still doesn't support stronger KEX.

BTW I found another walkaround. When FLR Appliance boots up and File Recovery dialog appears I use SCP to copy files from FLR to target server.

It is good option to recovery more diferent files in different locations;-)


I still hoping for better support for KEX in future releases.


Best Regards,
Petr Havlíček