Page 1 of 1

Cipher issue? Warning: evp_cipher_set_decrypt_key: EVP_Decr

Posted: Fri May 03, 2019 3:40 pm
by eordona
Hi,
I have ONE partner who has had an issue connecting to me, all other partners & software connecting to us seem to be working just fine. Below are the relevant sections of the general and ssh logs (I'm changing their IP to x.x.x.x and my IP to y.y.y.y).

Could you please provide me some guidance as to what the issue may be? It looks from the very last line that it may be cipher related?

[02] Fri, 03 May 2019 10:36:20 (0010403) Connected from x.x.x.x (local address y.y.y.y, port 22)
[02] Fri, 03 May 2019 10:36:20 (0010403) Failed to exchange the keys.
[02] Fri, 03 May 2019 10:36:21 (0010403) Closed session, disconnected from x.x.x.x

[2019/05/03 10:36:20.763839, 1] pki_private_key_from_base64: Parsing private key: error:2606B043:engine routines:ENGINE_finish:passed a null parameter
[2019/05/03 10:36:20.764026, 1] ssh_server_connection_callback: SSH client banner: SSH-2.0-edtFTPnet/PRO_9.3.0.20
[2019/05/03 10:36:20.764046, 1] ssh_analyze_banner: Analyzing banner: SSH-2.0-edtFTPnet/PRO_9.3.0.20
[2019/05/03 10:36:20.956460, 1] evp_cipher_set_decrypt_key: EVP_DecryptInit_ex failed

Thank you...

Eric

Re: Cipher issue? Warning: evp_cipher_set_decrypt_key: EVP_

Posted: Sun May 05, 2019 10:23 am
by FTP
I just tested with edtFTPnet/PRO_9.3.0.20, there is no problem with the SFTP example, so how did you connect to the SFTP server? What's your client side code?

Re: Cipher issue? Warning: evp_cipher_set_decrypt_key: EVP_

Posted: Sun May 05, 2019 5:00 pm
by eordona
Thank you. I will get the log from my partner.

Re: Cipher issue? Warning: evp_cipher_set_decrypt_key: EVP_

Posted: Mon May 06, 2019 6:08 pm
by eordona
I don't have the partner's logs. However, they did narrow it down to an issue with the blowfish cipher (that's what we were negotiating to). Knowing this, I changed the available method from the default (v. 6.0.7) of:

aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-cbc,3des-cbc,chacha20-poly1305@openssh.com

… to:

aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,chacha20-poly1305@openssh.com

(i.e., I removed blowfish-cbc)

... and the issue went away. Maybe you could retest with only blowfish to see if there is an issue there?

Re: Cipher issue? Warning: evp_cipher_set_decrypt_key: EVP_

Posted: Mon May 06, 2019 6:22 pm
by FTP
So just remove the cipher "blowfish-cbc", maybe the client side doesn't support this cipher and returns an error.

Re: Cipher issue? Warning: evp_cipher_set_decrypt_key: EVP_

Posted: Mon May 06, 2019 7:18 pm
by eordona
Yes, I left the blowfish cipher off. I didn't know if you wanted to try to emulate the problem with your testing by removing all ciphers except for Blowfish (I was thinking there is something wrong with that one.). Thanks.

Re: Cipher issue? Warning: evp_cipher_set_decrypt_key: EVP_

Posted: Tue May 07, 2019 4:21 am
by FTP
But whether I turned Blowfish cipher off or on, the SFTP server connection was always successful, so please download the latest version 6.0.7 again from our website.