Resolving SSH Key Exchange Algorithm Mismatch in AAP for ASA Devices
Issue
-
After upgrading to Ansible Automation Platform 2.*, users encounter SSH connection failures when attempting to use the asa_command module for ASA devices.
-
The connection attempt terminates unsuccessfully, with an error message below indicating a failure in the SSH connection process.
... changed": false, "module_stderr": "ssh connection failed: ssh connect failed: kex error : no match for method kex algos: server [diffie-hellman-group1-sha1], client [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]", "module_stdout": "", "msg": "MODULE FAILURE\\nSee stdout/stderr for the exact error" ...
Environment
-
Ansible Automation Platform 2.*
-
ASA devices configured to use diffie-hellman-group1-sha1 for SSH key exchange
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.