Page 1 of 1
[Fix within] MikroTik strong-crypto
Posted: Sat Jul 30, 2016 12:52 pm
by kukt
I could not connect to a MikroTik router with the ip ssh strong-crypto enabled
Re: MikroTik strong-crypto
Posted: Sat Jul 30, 2016 1:39 pm
by Tomas
I will have to investigate.
Will update this topic with relevant data as soon as I have an update.
Re: MikroTik strong-crypto
Posted: Sat Jul 30, 2016 3:06 pm
by Tomas
EDIT: We updated the crypto implementation in Unimus, and this should now work out-of-the-box.
Found the issue.
With 'ip ssh strong-crypto enabled', MikroTik accepts only AES-192 or higher for SSH session encryption algorithms.
By default, JRE (Java Runtime Environment) only ships with AES-128, due to 'import regulations in some countries'.
http://docs.oracle.com/javase/8/docs/te ... portlimits
You need to install 'Java Cryptography Extension' into your system.
A quick Google search should give you the download link and instructions on how to install it
