Brother ADS-2700W and SSH Security

So, I wanted to have the scanner have an SFTP-session and use that to write to a little linux server. In my first tryouts I used a Raspberry Pi, but when looking at my overall endeavours quickly changed to a little Intel Mini PC running Ubuntu server LTS.

The test failed, and it took quite some time to figure out why.

Feb  9 18:36:01 dochauser sshd[1658]: Unable to negotiate with 192.168.0.94 port 44398: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-s
ha1,diffie-hellman-group1-sha1 [preauth]

Oops, the little brother does not speak current security technology. The fix for this is to add these old keyexchange methods to the sshd_config on the linux system. This is not nice, overall.

# For making the brother ADS-w700W printer SFTPable
KexAlgorithms +diffie-hellman-group1-sha1
Ciphers +aes128-cbc

Maybe I’ll write a support ticket to brother to ask them when they will update their scanners…

At least now the pdfs are flowing to the linux box, yeah.