Comprehensive data protection for all workloads
Post Reply
joshima
Influencer
Posts: 19
Liked: 1 time
Joined: May 30, 2023 12:58 pm
Contact:

Is it possible the key exchange veeam server is using?

Post by joshima »

Hello,

I have a problem with an Ubuntu backupproxy server. The Veeam server is trying to connect to the backupproxy server via ssh. However, this fails because the veeam server wants to use diffie-hellman-group1-sha1 but the backupproxy server does not accept diffie-hellman-group1-sha1. Is there any way I can change diffie-hellman-group1-sha1 on the veeam server?
Mildur
Product Manager
Posts: 8735
Liked: 2296 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Is it possible the key exchange veeam server is using?

Post by Mildur »

Hello Joshima

Which version of Veeam are you running? Are you running v11 or later? --> https://www.veeam.com/kb2061

The required cyphers and KEX/MAC algorithms are documented in our user guide. In my understanding diffie-hellman-group1-sha1 will be used as a fallback, if none of the other algorithms are working. Please make sure that they are accepted from your Ubuntu server and that you are using the latest Veeam Backup & Replication version:
https://helpcenter.veeam.com/docs/backu ... mendations

Please open a support case and let our support team have a look at your configuration if you still have issues after enabling the required cyphers and algorithms. Please provide me with the case number.

Best,
Fabian
Product Management Analyst @ Veeam Software
joshima
Influencer
Posts: 19
Liked: 1 time
Joined: May 30, 2023 12:58 pm
Contact:

Re: Is it possible the key exchange veeam server is using?

Post by joshima »

Hey,

Iam using veeam v12. I upgraded it from v11 to v12 after that the backupproxy was disabled and the problem which I described occured.
joshima
Influencer
Posts: 19
Liked: 1 time
Joined: May 30, 2023 12:58 pm
Contact:

Re: Is it possible the key exchange veeam server is using?

Post by joshima »

Mildur wrote: Jul 04, 2023 11:39 am Hello Joshima

Which version of Veeam are you running? Are you running v11 or later? --> https://www.veeam.com/kb2061

The required cyphers and KEX/MAC algorithms are documented in our user guide. In my understanding diffie-hellman-group1-sha1 will be used as a fallback, if none of the other algorithms are working. Please make sure that they are accepted from your Ubuntu server and that you are using the latest Veeam Backup & Replication version:
https://helpcenter.veeam.com/docs/backu ... mendations

Please open a support case and let our support team have a look at your configuration if you still have issues after enabling the required cyphers and algorithms. Please provide me with the case number.

Best,
Fabian
Hey thanks for the post. After several searches, I have now found out that the credentials are no longer accepted. These are no longer accepted so no connection is established via ssh. What could be the reasons for this?
Mildur
Product Manager
Posts: 8735
Liked: 2296 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Is it possible the key exchange veeam server is using?

Post by Mildur »

Hi Joshima

Did they have expired? Can you see the reason in the Linux logs why they weren't accepted?
A support case would still be helpful to troubleshoot the issue. I cannot tell you if you have faced a bug over a forum post.

Best,
Fabian
Product Management Analyst @ Veeam Software
joshima
Influencer
Posts: 19
Liked: 1 time
Joined: May 30, 2023 12:58 pm
Contact:

Re: Is it possible the key exchange veeam server is using?

Post by joshima »

Hey thanks for your reply. The issue has been resolved
Post Reply

Who is online

Users browsing this forum: Bing [Bot], MILJW002 and 65 guests