SFTP JOBS Fails with error ?no common elements found?

Document ID : KB000037600
Last Modified Date : 10/04/2018
Show Technical Document Details
Issue:

SFTP job fails after enabling strong encryption or disabling key exchange algorithm diffie-hellman-group1-sha1 in sshd_config file. When the sshd server is configured to restrict diffie-hellman-group1-sha1 key exchange algorithm, SFTP jobs fail with the following message:

java.util.NoSuchElementException: no common elements found

 

Resolution:

Ugrade the agent to version 11.4 which now supports the following ciphers and MACs:

Ciphers:
3des-cbc
aes128.cbc
aes192-cbc
aes256-cbc
aes128-ctr
aes192-ctr
aes256-ctr
arcfour128
arcfour256
arcfour
blowfish-cbc

MACs:
hmac-md5
hmac-sha1

To enable the ciphers and MACs, modify the following agentparm.txt values:

security.ssh.ciphers=<list of ciphers to use> security.ssh.macs=<list of MACs to use>

Note: For encryption higher than 128-bits you must modify the JRE to use the JCE Unlimited Strength Jurisdiction Policy Files. Obtain the Jurisdiction Policy Files from the following providers:

Oracle Java
http://docs.oracle.com/javase/7/docs/technotes/guides/security/SunProviders.h
tml

IBM Java
https://www-01.ibm.com/support/knowledgecenter/SSYKE2_7.0.0/com.ibm.java.secu
rity.component.71.doc/security-component/sdkpolicyfiles.html

HP Java
Per HP documentation, obtain the files from Oracle. See the HP-UX Programmer's Guide for Java 2 for more information:
http://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c02697864&lan
g=en-us&cc=us

The documentation has been updated to contain details
Configuring Encryption for Use with SSH Communications

https://docops.ca.com/ca-workload-automation-system-agent/11-3/en/configuring/set-up-security/configuring-encryption-for-use-with-ssh-communications