Hi Aaron,
unfortunately the About-Page of the IS as well as the Updates-Page are not showing Fixes for SCG-Components.
Please request the Fix SCG_9.7_TPL_Fix2 to be installed on the IS installation.
Additionally the SCG_9.7_Entrust_Fix1 should be installed too.
Please note the mentioned SCG-Fixes (besides others) are requirements for IS_9.7_Core_Fix10 and newer.
Extract from the Readme for SCG_9.7_TPL_Fix2:
PIE-38019
Integration Server acting as an SFTP client faces issues while
attempting to connect to an SFTP server.
When attempting to connect to an SFTP server, Integration
Server acting as an SFTP client issues the following error:
[ISS.0147.9010] Cannot get host key from server [host_X]:22.
Details: com.jcraft.jsch.JSchException: Algorithm
negotiation fail
This issue occurs because there is no common key exchange
algorithm between the SFTP client and SFTP server.
This issue is now resolved by updating the jsch jar file from
0.1.51 version to 0.1.53 version. The 0.1.53 version supports
most of the key exchange algorithms that are required to be
present in the SFTP client to connect to SFTP server.
This might be related to the following issue fixed in IS_9.7_Core_Fix10:
PIE-39298 (IS_9.7_Core_Fix10)
Error in getting SFTP server host key, if a key exchange
algorithm is not supported by SFTP server.
Jsch has a default key exchange algorithm order. During the
handshake, jsch checks the client key exchange algorithms
one by one with SFTP server key-exchange algorithms. The
first matching algorithm is used as the key-exchange
algorithm between SFTP client and SFTP server. However, Jsch
does not support 2048-bit keys for
diffie-hellman-group-exchange-sha256 and
diffie-hellman-group-exchange-sha1 key exchange algorithms
in Java 1.7 and earlier versions. Consequently, if the
Integration Server runs with Java 1.7 or earlier version
and SFTP server expects 2048-bit keys for these algorithms,
then the handshake between SFTP server and SFTP client
fails. To avoid this issue, the order of these key exchange
can be changed using the watt.ssh.jsch.kex parameter so that,
any other matching key exchange algorithm can be selected as
the key exchange algorithm between the SFTP client and SFTP
server.
To address this issue, Integration Server now include a
server configuration parameter to change the order of the
key exchange algorithm.
watt.ssh.jsch.kex
Specifies the order of the key exchange algorithm for Jsch.
The specified order overrides the default key exchange
algorithms order supported by Jsch.
For example:
watt.ssh.jsch.kex=diffie-hellman-group-exchange-sha1,
diffie-hellman-group1-sha1,diffie-hellman-group14-sha1
If the SFTP server expects 2048-bit keys for
diffie-hellman-group-exchange-sha1, then the order of this
algorithm can be changed so that, any other matching
algorithm can be selected as key exchange algorithm between
the SFTP client and SFTP server.
watt.ssh.jsch.kex=diffie-hellman-group1-sha1,
diffie-hellman-group14-sha1,
diffie-hellman-group-exchange-sha1
Integration Server must be restarted for changes to this
parameter to take effect.
PIE-39357 (IS_9.7_Core_Fix10)
Integration Server fails to retrieve the SFTP Get Host Key
during the SFTP Server Alias creation.
SFTP Server Alias creation fails with 'Auth Cancel'
exception, as Integration Server fails to retrieve the SFTP
Get Host Key.
The issue is now resolved.
Regards,
Holger
#webMethods#Integration-Server-and-ESB