Remote transfer of scheduled report failed via SSH

Products

• VMware Smart Assurance

Issue/Introduction

Scheduled report - Remote location

Unable to transfer the scheduled report to remote location using SSH mechanism hosted on RHEL 9.x version, error observed in taskRun log:

250519 10:22:37 : Caused by: java.io.IOException: There was a problem while connecting to #.#.#.#:22
250519 10:22:37 :   at com.trilead.ssh2.Connection.connect(Connection.java:791)
250519 10:22:37 :   at com.trilead.ssh2.Connection.connect(Connection.java:563)
250519 10:22:37 :   at com.watch4net.apg.v2.plugins.virtualFileSystem.providers.ssh.SSHFileSystem.createFile(SSHFileSystem.java:62)
250519 10:22:37 :   at org.apache.commons.vfs.provider.AbstractFileSystem.resolveFile(AbstractFileSystem.java:296)
250519 10:22:37 :   ... 29 more
250519 10:22:37 : Caused by: java.io.IOException: Key exchange was not finished, connection is closed.
250519 10:22:37 :   at com.trilead.ssh2.transport.KexManager.getOrWaitForConnectionInfo(KexManager.java:92)
250519 10:22:37 :   at com.trilead.ssh2.transport.TransportManager.getConnectionInfo(TransportManager.java:230)
250519 10:22:37 :   at com.trilead.ssh2.Connection.connect(Connection.java:743)
250519 10:22:37 :   ... 32 more
250519 10:22:37 : Caused by: java.io.IOException: Cannot negotiate, proposals do not match.
250519 10:22:37 :   at com.trilead.ssh2.transport.KexManager.handleMessage(KexManager.java:413)
250519 10:22:37 :   at com.trilead.ssh2.transport.TransportManager.receiveLoop(TransportManager.java:754)
250519 10:22:37 :   at com.trilead.ssh2.transport.TransportManager$1.run(TransportManager.java:469)
250519 10:22:37 :   at java.lang.Thread.run(Thread.java:750)

Environment

M&R / Watch4net - 7.x

Cause

Remote server restricting the algorithms used for remote connection due to change in Default crypto policies introduced in RHEL 9.x version. 

Resolution

While user to wait for permanent fix which is planned for future MnR release, either of the following workarounds help to fix the reported issue.

• Update the default crypto policy on the Remote host: 

  • Run the command: 

    sudo update-crypto-policies --set LEGACY

  • Reboot the server
    Note: To check current crypto policy, run 

    update-crypto-policies --show

• Enabling FTP service on the MnR and Remote host:

  • As an alternative enable the ftp service using vsftpd or another tool.
  • Use ftp mode for the scheduled reports transfer.
    Example:
    URL for ftp is:

    ftp://root@<Host_IP>/opt/myreports/

Additional Information

Support for new MAC and KEX algorithms expected by RHEL 9.x would be introduced in future MnR release and is tentatively planned on Sept 2025.