[Fix within] MikroTik strong-crypto

Post your feature requests here
Post Reply
kukt
Posts: 1
Joined: Sat Jul 30, 2016 12:50 pm

Sat Jul 30, 2016 12:52 pm

I could not connect to a MikroTik router with the ip ssh strong-crypto enabled
User avatar
Tomas
Posts: 1206
Joined: Sat Jun 25, 2016 12:33 pm

Sat Jul 30, 2016 1:39 pm

I will have to investigate.

Will update this topic with relevant data as soon as I have an update.
User avatar
Tomas
Posts: 1206
Joined: Sat Jun 25, 2016 12:33 pm

Sat Jul 30, 2016 3:06 pm

EDIT: We updated the crypto implementation in Unimus, and this should now work out-of-the-box.

Found the issue.
With 'ip ssh strong-crypto enabled', MikroTik accepts only AES-192 or higher for SSH session encryption algorithms.

By default, JRE (Java Runtime Environment) only ships with AES-128, due to 'import regulations in some countries'.
http://docs.oracle.com/javase/8/docs/te ... portlimits

You need to install 'Java Cryptography Extension' into your system.
A quick Google search should give you the download link and instructions on how to install it :)
Post Reply