Subject: Ultimate SFTP - Server signature is not valid Error
Date: 2019-10-28 13:03:09
From: Rosemarie
Source: ultimate-sftp-server-signature-not-valid-error
----------------------------------------------------------------------
I would like to open a Support ticket for Ultimate SFTP
We are encounter an issue using Ultimate SFTP. When attempting to connect to a new SFTP Server we are receiving an error that the "Server signature is not valid", FileZilla connects but not our ComponentPro SFTP DLL.
We don't do anything to specify the encryption/hash algorithms in our code, or to verify the host key.
ComponentPro References:
• https://doc.componentpro.com/ComponentPro-Sftp/connection-settings,-connection-info-and-connection-state
• https://doc.componentpro.com/ComponentPro-Sftp/validate-the-key-sent-by-the-server
Is there a possibility that ComponentPro SFTP is caching the key, and sees the same encryption but different hash key as invalid? We've tried to find any key cache (like FileZilla uses), but haven't found it so far.
Someone with the same issue, but the only recommendation was from another user, to explicitly set the algorithms. Apparently ComponentPro negotiation may be flaky:
https://www.componentpro.com/qa/negotiation-failed-server-signature-not-valid-v6-8-4119
See log below:
Sftp: 1, Thread Id: 0 [10/28/2019 08:55:16.60] Information - Info: Connecting to ftp.complianceline.com:22 - Ultimate Sftp v7.0.40.226 for .NET 4.0 -> 4.7.x (Production).
[10/28/2019 08:55:16.82] Verbose - Ssh: Sending data:
0000 |53-53-48-2D-32-2E-30-2D 43-6F-6D-70-6F-6E-65-6E| SSH-2.0-Componen
0010 |74-50-72-6F-53-53-48-5F 37-2E-30-2E-34-30-2E-32| tProSSH_7.0.40.2
0020 |32-36-0D-0A | 26..
[10/28/2019 08:55:16.83] Verbose - Ssh: Received data:
0000 |53-53-48-2D-32-2E-30-2D 57-69-6E-67-46-54-50-53| SSH-2.0-WingFTPS
0010 |65-72-76-65-72-0D-0A | erver..
[10/28/2019 08:55:16.83] Debug - Ssh: Server is 'SSH-2.0-WingFTPServer'.
[10/28/2019 08:55:16.85] Information - Ssh: Negotiation started.
[10/28/2019 08:55:16.94] Verbose - Ssh: Sending packet SSH_MSG_KEXINIT (1125 bytes).
0000 |14-72-8A-F9-3D-1C-B0-0A 57-F1-C3-12-09-11-25-19| .r..=...W.....%.
0010 |AA-00-00-00-D0-64-69-66 66-69-65-2D-68-65-6C-6C| .....diffie-hell
0020 |6D-61-6E-2D-67-72-6F-75 70-2D-65-78-63-68-61-6E| man-group-exchan
0030 |67-65-2D-73-68-61-32-35 36-2C-64-69-66-66-69-65| ge-sha256,diffie
0040 |2D-68-65-6C-6C-6D-61-6E 2D-67-72-6F-75-70-31-34| -hellman-group14
0050 |2D-73-68-61-32-35-36-2C 64-69-66-66-69-65-2D-68| -sha256,diffie-h
0060 |65-6C-6C-6D-61-6E-2D-67 72-6F-75-70-31-35-2D-73| ellman-group15-s
0070 |68-61-35-31-32-2C-64-69 66-66-69-65-2D-68-65-6C| ha512,diffie-hel
0080 |6C-6D-61-6E-2D-67-72-6F 75-70-31-36-2D-73-68-61| lman-group16-sha
0090 |35-31-32-2C-64-69-66-66 69-65-2D-68-65-6C-6C-6D| 512,diffie-hellm
00A0 |61-6E-2D-67-72-6F-75-70 2D-65-78-63-68-61-6E-67| an-group-exchang
00B0 |65-2D-73-68-61-31-2C-64 69-66-66-69-65-2D-68-65| e-sha1,diffie-he
00C0 |6C-6C-6D-61-6E-2D-67-72 6F-75-70-31-34-2D-73-68| llman-group14-sh
00D0 |61-31-2C-65-63-64-68-2D 73-68-61-32-2D-6E-69-73| a1,ecdh-sha2-nis
00E0 |74-70-32-35-36-00-00-00 93-73-73-68-2D-64-73-73| tp256....ssh-dss
00F0 |2C-72-73-61-2D-73-68-61 32-2D-32-35-36-2C-73-73| ,rsa-sha2-256,ss
0100 |68-2D-72-73-61-2D-73-68 61-32-35-36-40-73-73-68| h-rsa-sha256@ssh
0110 |2E-63-6F-6D-2C-72-73-61 2D-73-68-61-32-2D-35-31| .com,rsa-sha2-51
0120 |32-2C-73-73-68-2D-72-73 61-2C-78-35-30-39-76-33| 2,ssh-rsa,x509v3
0130 |2D-73-69-67-6E-2D-72-73 61-2D-73-68-61-32-35-36| -sign-rsa-sha256
0140 |40-73-73-68-2E-63-6F-6D 2C-78-35-30-39-76-33-2D| @ssh.com,x509v3-
0150 |73-69-67-6E-2D-72-73-61 2C-78-35-30-39-76-33-2D| sign-rsa,x509v3-
0160 |73-69-67-6E-2D-64-73-73 2C-65-63-64-73-61-2D-73| sign-dss,ecdsa-s
0170 |68-61-32-2D-6E-69-73-74 70-32-35-36-00-00-00-E7| ha2-nistp256....
0180 |61-65-73-32-35-36-2D-67 63-6D-40-6F-70-65-6E-73| aes256-gcm@opens
0190 |73-68-2E-63-6F-6D-2C-61 65-73-31-32-38-2D-67-63| sh.com,aes128-gc
01A0 |6D-40-6F-70-65-6E-73-73 68-2E-63-6F-6D-2C-61-65| m@openssh.com,ae
01B0 |73-32-35-36-2D-63-74-72 2C-61-65-73-31-39-32-2D| s256-ctr,aes192-
01C0 |63-74-72-2C-61-65-73-31 32-38-2D-63-74-72-2C-33| ctr,aes128-ctr,3
01D0 |64-65-73-2D-63-74-72-2C 74-77-6F-66-69-73-68-32| des-ctr,twofish2
01E0 |35-36-2D-63-74-72-2C-74 77-6F-66-69-73-68-31-39| 56-ctr,twofish19
01F0 |32-2D-63-74-72-2C-74-77 6F-66-69-73-68-31-32-38| 2-ctr,twofish128
0200 |2D-63-74-72-2C-61-65-73 32-35-36-2D-63-62-63-2C| -ctr,aes256-cbc,
0210 |61-65-73-31-39-32-2D-63 62-63-2C-61-65-73-31-32| aes192-cbc,aes12
0220 |38-2D-63-62-63-2C-33-64 65-73-2D-63-62-63-2C-74| 8-cbc,3des-cbc,t
0230 |77-6F-66-69-73-68-32-35 36-2D-63-62-63-2C-74-77| wofish256-cbc,tw
0240 |6F-66-69-73-68-31-39-32 2D-63-62-63-2C-74-77-6F| ofish192-cbc,two
0250 |66-69-73-68-31-32-38-2D 63-62-63-2C-74-77-6F-66| fish128-cbc,twof
0260 |69-73-68-2D-63-62-63-00 00-00-E7-61-65-73-32-35| ish-cbc....aes25
0270 |36-2D-67-63-6D-40-6F-70 65-6E-73-73-68-2E-63-6F| 6-gcm@openssh.co
0280 |6D-2C-61-65-73-31-32-38 2D-67-63-6D-40-6F-70-65| m,aes128-gcm@ope
0290 |6E-73-73-68-2E-63-6F-6D 2C-61-65-73-32-35-36-2D| nssh.com,aes256-
02A0 |63-74-72-2C-61-65-73-31 39-32-2D-63-74-72-2C-61| ctr,aes192-ctr,a
02B0 |65-73-31-32-38-2D-63-74 72-2C-33-64-65-73-2D-63| es128-ctr,3des-c
02C0 |74-72-2C-74-77-6F-66-69 73-68-32-35-36-2D-63-74| tr,twofish256-ct
02D0 |72-2C-74-77-6F-66-69-73 68-31-39-32-2D-63-74-72| r,twofish192-ctr
02E0 |2C-74-77-6F-66-69-73-68 31-32-38-2D-63-74-72-2C| ,twofish128-ctr,
02F0 |61-65-73-32-35-36-2D-63 62-63-2C-61-65-73-31-39| aes256-cbc,aes19
0300 |32-2D-63-62-63-2C-61-65 73-31-32-38-2D-63-62-63| 2-cbc,aes128-cbc
0310 |2C-33-64-65-73-2D-63-62 63-2C-74-77-6F-66-69-73| ,3des-cbc,twofis
0320 |68-32-35-36-2D-63-62-63 2C-74-77-6F-66-69-73-68| h256-cbc,twofish
0330 |31-39-32-2D-63-62-63-2C 74-77-6F-66-69-73-68-31| 192-cbc,twofish1
0340 |32-38-2D-63-62-63-2C-74 77-6F-66-69-73-68-2D-63| 28-cbc,twofish-c
0350 |62-63-00-00-00-61-68-6D 61-63-2D-73-68-61-32-2D| bc...ahmac-sha2-
0360 |32-35-36-2D-65-74-6D-40 6F-70-65-6E-73-73-68-2E| 256-etm@openssh.
0370 |63-6F-6D-2C-68-6D-61-63 2D-73-68-61-32-2D-32-35| com,hmac-sha2-25
0380 |36-2C-68-6D-61-63-2D-73 68-61-32-2D-35-31-32-2D| 6,hmac-sha2-512-
0390 |65-74-6D-40-6F-70-65-6E 73-73-68-2E-63-6F-6D-2C| etm@openssh.com,
03A0 |68-6D-61-63-2D-73-68-61 32-2D-35-31-32-2C-68-6D| hmac-sha2-512,hm
03B0 |61-63-2D-73-68-61-31-00 00-00-61-68-6D-61-63-2D| ac-sha1...ahmac-
03C0 |73-68-61-32-2D-32-35-36 2D-65-74-6D-40-6F-70-65| sha2-256-etm@ope
03D0 |6E-73-73-68-2E-63-6F-6D 2C-68-6D-61-63-2D-73-68| nssh.com,hmac-sh
03E0 |61-32-2D-32-35-36-2C-68 6D-61-63-2D-73-68-61-32| a2-256,hmac-sha2
03F0 |2D-35-31-32-2D-65-74-6D 40-6F-70-65-6E-73-73-68| -512-etm@openssh
0400 |2E-63-6F-6D-2C-68-6D-61 63-2D-73-68-61-32-2D-35| .com,hmac-sha2-5
0410 |31-32-2C-68-6D-61-63-2D 73-68-61-31-00-00-00-1A| 12,hmac-sha1....
0420 |6E-6F-6E-65-2C-7A-6C-69 62-2C-7A-6C-69-62-40-6F| none,zlib,zlib@o
0430 |70-65-6E-73-73-68-2E-63 6F-6D-00-00-00-1A-6E-6F| penssh.com....no
0440 |6E-65-2C-7A-6C-69-62-2C 7A-6C-69-62-40-6F-70-65| ne,zlib,zlib@ope
0450 |6E-73-73-68-2E-63-6F-6D 00-00-00-00-00-00-00-00| nssh.com........
0460 |00-00-00-00-00 | .....
[10/28/2019 08:55:16.94] Verbose - Ssh: Received packet SSH_MSG_KEXINIT (473 bytes).
0000 |14-0A-DB-5E-BD-2B-52-1F AC-82-92-45-D7-93-70-17| ...^. R....E..p.
0010 |DD-00-00-00-66-63-75-72 76-65-32-35-35-31-39-2D| ....fcurve25519-
0020 |73-68-61-32-35-36-40-6C 69-62-73-73-68-2E-6F-72| sha256@libssh.or
0030 |67-2C-65-63-64-68-2D-73 68-61-32-2D-6E-69-73-74| g,ecdh-sha2-nist
0040 |70-32-35-36-2C-64-69-66 66-69-65-2D-68-65-6C-6C| p256,diffie-hell
0050 |6D-61-6E-2D-67-72-6F-75 70-31-34-2D-73-68-61-31| man-group14-sha1
0060 |2C-64-69-66-66-69-65-2D 68-65-6C-6C-6D-61-6E-2D| ,diffie-hellman-
0070 |67-72-6F-75-70-31-2D-73 68-61-31-00-00-00-35-65| group1-sha1...5e
0080 |63-64-73-61-2D-73-68-61 32-2D-6E-69-73-74-70-32| cdsa-sha2-nistp2
0090 |35-36-2C-72-73-61-2D-73 68-61-32-2D-35-31-32-2C| 56,rsa-sha2-512,
00A0 |72-73-61-2D-73-68-61-32 2D-32-35-36-2C-73-73-68| rsa-sha2-256,ssh
00B0 |2D-72-73-61-00-00-00-57 61-65-73-32-35-36-2D-63| -rsa...Waes256-c
00C0 |74-72-2C-61-65-73-31-39 32-2D-63-74-72-2C-61-65| tr,aes192-ctr,ae
00D0 |73-31-32-38-2D-63-74-72 2C-61-65-73-32-35-36-2D| s128-ctr,aes256-
00E0 |63-62-63-2C-61-65-73-31 39-32-2D-63-62-63-2C-61| cbc,aes192-cbc,a
00F0 |65-73-31-32-38-2D-63-62 63-2C-62-6C-6F-77-66-69| es128-cbc,blowfi
0100 |73-68-2D-63-62-63-2C-33 64-65-73-2D-63-62-63-00| sh-cbc,3des-cbc.
0110 |00-00-57-61-65-73-32-35 36-2D-63-74-72-2C-61-65| ..Waes256-ctr,ae
0120 |73-31-39-32-2D-63-74-72 2C-61-65-73-31-32-38-2D| s192-ctr,aes128-
0130 |63-74-72-2C-61-65-73-32 35-36-2D-63-62-63-2C-61| ctr,aes256-cbc,a
0140 |65-73-31-39-32-2D-63-62 63-2C-61-65-73-31-32-38| es192-cbc,aes128
0150 |2D-63-62-63-2C-62-6C-6F 77-66-69-73-68-2D-63-62| -cbc,blowfish-cb
0160 |63-2C-33-64-65-73-2D-63 62-63-00-00-00-25-68-6D| c,3des-cbc...%hm
0170 |61-63-2D-73-68-61-32-2D 32-35-36-2C-68-6D-61-63| ac-sha2-256,hmac
0180 |2D-73-68-61-32-2D-35-31 32-2C-68-6D-61-63-2D-73| -sha2-512,hmac-s
0190 |68-61-31-00-00-00-25-68 6D-61-63-2D-73-68-61-32| ha1...%hmac-sha2
01A0 |2D-32-35-36-2C-68-6D-61 63-2D-73-68-61-32-2D-35| -256,hmac-sha2-5
01B0 |31-32-2C-68-6D-61-63-2D 73-68-61-31-00-00-00-04| 12,hmac-sha1....
01C0 |6E-6F-6E-65-00-00-00-04 6E-6F-6E-65-00-00-00-00| none....none....
01D0 |00-00-00-00-00-00-00-00 00 | .........
[10/28/2019 08:55:16.96] Debug - Ssh: Negotiating key.
[10/28/2019 08:55:16.98] Debug - Ssh: Using 2048-bit Diffie-Hellman prime (minimum allowed size is 1024 bits).
[10/28/2019 08:55:16.98] Verbose - Ssh: Sending packet SSH_MSG_KEX_30 (261 bytes).
0000 |1E-00-00-01-00-69-81-49 20-C8-D9-C5-C6-20-48-10| .....i.I .... H.
0010 |AA-8F-B4-54-F7-39-2C-09 E1-EE-4C-FD-06-1E-7B-D7| ...T.9,...L...{.
0020 |41-91-BE-37-A7-CB-85-69 59-2B-1B-89-BE-C9-90-F6| A..7...iY ......
0030 |E6-99-7C-54-A7-DC-12-79 7E-01-6D-37-90-8B-50-B8| ..|T...y~.m7..P.
0040 |D5-5D-70-FC-95-80-46-8F 07-BD-A7-C8-74-BA-EE-18| .]p...F.....t...
0050 |C5-30-5F-C3-13-47-A2-6D C2-20-E3-4C-B7-49-71-FF| .0_..G.m. .L.Iq.
0060 |5F-55-F3-96-D8-BA-52-0E 69-E3-59-B5-E7-04-72-2B| _U....R.i.Y...r
0070 |BF-B6-53-69-78-FC-10-A1 06-15-EE-09-02-44-89-35| ..Six........D.5
0080 |44-A8-99-6F-EA-B6-BC-93 3A-EB-2F-95-87-75-E2-F6| D..o....:./..u..
0090 |76-43-DE-05-00-90-5B-FF 59-2B-CD-3A-2E-64-3F-06| vC....[.Y .:.d?.
00A0 |12-B6-9A-5A-B9-85-ED-D8 BF-F8-64-7F-89-A6-B9-50| ...Z......d....P
00B0 |20-AF-61-8D-47-90-7D-48 40-44-5A-14-4F-3D-C9-93| .a.G.}H@DZ.O=..
00C0 |50-CE-71-B7-87-1D-0D-A1 C7-9E-B9-30-56-1C-16-5F| P.q........0V.._
00D0 |12-0B-BB-38-7E-FD-53-DE FB-3A-C1-49-7B-78-EE-5F| ...8~.S..:.I{x._
00E0 |C4-B8-12-C7-AE-03-D5-0A 18-D0-59-83-22-BD-6F-E4| ..........Y.".o.
00F0 |F6-B1-53-D1-CB-E8-74-A5 55-46-81-59-4C-B4-F9-1E| ..S...t.UF.YL...
0100 |C8-78-DC-83-C9 | .x...
[10/28/2019 08:55:17.05] Verbose - Ssh: Received packet SSH_MSG_KEX_31 (820 bytes).
0000 |1F-00-00-01-17-00-00-00 07-73-73-68-2D-72-73-61| .........ssh-rsa
0010 |00-00-00-03-01-00-01-00 00-01-01-00-F9-66-82-06| .............f..
0020 |65-93-EF-3D-A2-4B-42-6E 6A-05-04-47-DC-DC-18-35| e..=.KBnj..G...5
0030 |3E-10-02-33-9E-0A-F5-B1 83-62-2E-28-4C-8A-39-83| >..3.....b.(L.9.
0040 |3B-03-76-49-A6-A2-1E-4C 46-84-9D-EE-27-68-42-C6| ;.vI...LF...'hB.
0050 |1B-FE-9F-EB-E4-33-B1-DB 66-18-53-62-F1-B3-21-1A| .....3..f.Sb..!.
0060 |87-87-A4-19-ED-6F-BD-CD 3E-55-88-30-11-9B-42-AE| .....o..>U.0..B.
0070 |60-B3-F7-DB-D9-23-D0-56 D5-82-5A-80-7D-33-02-FC| `....#.V..Z.}3..
0080 |34-CE-22-42-4E-6F-D0-5C 06-EE-0F-E6-3B-35-90-92| 4."BNo.\....;5..
0090 |5D-E5-50-79-40-92-A9-CE F5-E8-A5-8C-C1-3C-10-0F| ].Py@........<..
00A0 |CF-6A-A9-79-D3-3E-65-9D DE-E8-86-0C-35-E7-D1-C8| .j.y.>e.....5...
00B0 |64-A0-74-C1-96-0E-4E-42 51-87-8A-7F-60-A8-BD-7D| d.t...NBQ...`..}
00C0 |53-B9-69-32-44-EC-B9-D5 85-15-34-DA-51-A0-E9-60| S.i2D.....4.Q..`
00D0 |C5-C9-CD-F3-25-69-ED-CB AB-72-32-DB-A3-4C-C3-FA| ....%i...r2..L..
00E0 |93-B3-7B-C8-67-E7-75-22 39-22-13-C6-B3-31-4B-7B| ..{.g.u"9"...1K{
00F0 |DC-55-B9-A5-75-BE-B2-F7 B6-6F-89-38-01-5C-F2-49| .U..u....o.8.\.I
0100 |14-C3-AF-AF-16-A8-F6-0F 4E-02-93-41-F9-8A-7F-4D| ........N..A...M
0110 |C8-6B-81-37-F2-3D-A2-0D 0D-AF-3D-7D-00-00-01-01| .k.7.=....=}....
0120 |00-B2-8A-DE-CE-EA-24-98 D0-55-B2-4F-60-66-AC-8E| ......$..U.O`f..
0130 |89-39-80-56-C5-3D-5D-AD BD-77-BD-A8-17-D2-EA-00| .9.V.=]..w......
0140 |95-36-69-09-C5-76-E4-A6 F3-ED-6D-0E-CB-F9-F6-4E| .6i..v....m....N
0150 |9B-78-5E-BC-CC-0B-F1-2C FC-C6-81-2B-B2-74-EF-F2| .x^....,... .t..
0160 |76-C7-62-3F-1A-52-8D-E6 CE-FE-BE-D0-7F-BE-08-23| v.b?.R.........#
0170 |EE-C0-FC-ED-72-9B-09-AC 7F-24-66-CC-FA-CF-77-DC| ....r....$f...w.
0180 |6F-8C-7F-88-BE-3C-6C-6E 3A-7F-7D-BF-BD-38-D7-E9| o....
----------------------------------------------------------------------
Note: This question has been asked on the Q&A forum of Thang Dang's fraudulent ComponentPro brand
If you purchased anything from ComponentPro, you have been scammed. Contact the payment processor
who sold you the license and ask for your money back.
Back to ComponentPro Q&A Forum Index