Server 2019 SSH cipher syntax

Question

Hello all, for reasons beyond our control, we need to allow an older system to SSH into a server 2019 host (for SFTP drops). Unfortunately, we continue to receive the following error: sshd: Unable to negotiate with [IP] port [number]: no matching cipher found. Their offer: aes128-cbc,none,3des-cbc,blowfish-cbc [preauth] I have tried to no avail to modify the sshd_config file in C:\ProgramData\ssh Am I missing something? How do I properly define the offered ciphers in that file? Thanks!

Answer 1

Something here ay help.
https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/demystifying-schannel/ba-p/259233
https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Thanks for the info Patrick.. I do understand the 'why' of the problem, I just don't know how to configure the sshd_config file to use one of the cipher suites being chosen by the client. It looks like the SSH specific configuration is independent of the server-defined cipher suites, so the registry isn't controlling this unfortunately.