Supported Ciphers/Encryption

[chrisb62953814]

We recently increased security on a web server to only accept certain ciphers in order to make our box more secure. However, after making this change, users can no longer upload in Dreamweaver. If we revert the change, the user has no issues. For more information, we had a user who had been using PuTTY before to upload files with no issues. After the change, the user was experiencing issues, but we determined that was because they were using a PuTTY version that didn't have ciphers listed as an option in PuTTY's configuration (see screenshot below). After upgrading the users to the newest client, the were back up and running.

I've contacted Adobe about this, but the employee asked me what ciphers were, so I knew I wasn't going to have any luck.

Can anyone provide insight on the Dreamweavers' encryption or (even better) the ciphers supported by the product.

[BenPleysier]

In a previous post on the subject I suggested disabling the firewall which did not help. The error message was "fatal: matching cipher is not supported: arcfour128"

I think we may have to ask Preran​ for guidance.

[Preran]

Thank you for the call out Ben. Let me check with the team and get back to you.

Thanks,

Preran

[lnayal]

Hi Chris,

To answer your question, we would need some more information:

1. What is the DW version you are using?

2. Which protocol you are using in DW to transfer files to server?

3. Also, when you increase the security on server by changing list of accepted ciphers, do you see any error message in DW while uploading? If yes, please share a snapshot.

Thanks,

Lalita

[chrisb62953814]

Lalita,

1. We're using Creative Cloud, which updates regularly. So, we're using the latest version.

2. We were using SFTP originally. But experience the issue on any method of SFTP.

3. We get the same error as outlined in this post Dreamweaver CC - SFTP - Cipher Not Supported

[Jon Fritz]

While you might very well be in the latest version, the CC version you are using isn't necessarily automatically updated via the CC Desktop App when a new full release comes out. As a subscriber, you have access to all CC versions of the program (5 so far) and, unless you specifically tell it to update to a new version (for example from CC2014 to CC2015), you may still be using an older release, though the fully updated version of it.

To verify the version you are actually on, go to Help > About Dreamweaver

[chrisb62953814]

The user reported that it shows the 2017.1 Release

[lnayal]

Thanks for details. Please give me some time as we are checking and trying on this.

[lnayal]

Hi Chris,

We would need to do some trials before we reach to a conclusion as why it won't be working with DW.

So could you please follow below steps:

1. Could you please delete cipher "arcfour128" from client cipher list and then try connecting via DW?

As below link says arcfour128 and arcfour256 are not supported by Solaris 10.

Solaris 10: how to enable some cipher or esclude weak cipher on ssh? - Unix & Linux Stack Exchange

2. Could you please share cipher list on client with us, so that we can try scenario in house ?

3. Also version of SSH protocol used will help us in investigation.

Thanks,

Lalita

[lnayal]

Hi,

Just as an update, latest DW 17.5 is live now. It would be great if you can download that and try uploading files to same server using latest DW.

More details are available at below link

Dreamweaver 2017.5 is now live

Thanks,

Lalita