So, this is the reply I got from my hosting provider, and it doesn’t sound good, tbh:
Hello,
We went really deep on this, getting a few experts involved. Bottom line
you are probably going to have to upgrade your software with the vendor.
This may mean switching to Xway beta per this:
But, I don’t know if they have another solution.
We found ways to add the i386 libraries to the server but that is not the
issue for you, so I’m not including that here.
Here is what revealed the real problem:
Jun 3 16:21:24 ds13274 sshd[7686]: Connection from 143.159.105.205 port
50187 on 208.97.138.108 port 22
Jun 3 16:21:24 ds13274 sshd[7686]: Unable to negotiate with
143.159.105.205 port 50187: no matching key exchange method found. Their
offer:
diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
[preauth]
Jun 3 16:21:24 ds13274 sshd[7686]: Unable to negotiate with
143.159.105.205 port 50187: no matching key exchange method found. Their
offer:
diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
[preauth]
From that we draw the following conclusion:
Your freeway client is too old. It doesn’t have any encryption standards
in common with bionic (the version of Ubuntu) We aren’t allowing your
connection for good security reasons
If you want to edit sshd to support old insecure protocols it would put
your server at risk in ways that are quite technical. If a server
becomes self-managed because the admin (root) user is allowed to change
certain stuff, it may break things and the only way we may have to fix it
is to re-image the server, undoing all customizations.
Feel free to share this with your vendor, as this may lead them to give
you the kind of specific advice you need around their product line.
freewaytalk mailing list
email@hidden
Update your subscriptions at: