Of course, my SSH client on the winbox is ancient (and the iPad is Gen-0, from the days when Steve Jobs was still on earth), so probably it was an unsupported algo which my ancient winbox ssh used, but now is compromised and easy to hack? Am I getting a bit warm here?Īnyway, your webpage was really helpful. – hmmm now to decode the linux-crypto-msg…? “no” is easy, probably means “no, you dumbguy!”… “kex” sounded like an ancient breakfast cereal, but “alg” – now that’s gotta be short for “algorithm” (finance hackers use “algo”, so pretty close, eh?.

since I have *finally* jailbroken my iPad and have just logged into it from one of my Linux boxes …! I got the Cydia stuff running on the iPad, and first install was OpenSSH package, but coming from an old Windows-XP box, with “ssh”, all I could get was this goofy “no kex alg” message. Posted by devnull at 10:52 am Tagged with: debian, no kex alg, solaris, ssh I know more about ssh ciphers, macs, kex now that I ever wanted to know.

If you’re still dying to know what mechanisms your system supports run: ssh -Q cipher Now your old client should be able to connect to server plus you have successfully created security vulnerability on your machine. KexAlgorithms diffie-hellman-group1-sha1,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1

or edit /etc/ssh/sshd_config on the server, append the following line and restart sshd daemon.

if you have physical access to client simply spill coffee or some other beverage on it (alright, just joking).

So it’s time to upgrade your client! However, if for some bizarre reasons those pesky sysadmins are refusing to upgrade client software then that leaves you with two options: So what a hell is it? What’s causing it? Well, modern operating system like Debian Jessie are packaged with OpenSSH 6.7 or newer – and Openssh 6.7 disables a number of ciphers, as per changelog As Russel rightly pointed out in comments section below ‘”kex” is “key exchange”.x If you run ancient operating system with an old version of SSH client then you are going to hit this “No Kex Alg” problem soon.

Windows terminal ssh no kex alg