There is a genuine need to have support for all KEX and Ciphers to secure the older network equipment, like HP switches, that have only 3des-cbc cipher, and sha1 kex.
Is it possible to enable this as a feature for the web rendered SSH, so that it can connect to the old hosts as well? (they are long not supported by the manufacturer any more, so impossible to add better configuration to ssh server)
The console log on the web render SSH page has this: [libssh2] 0.444000 Failure Event: -5 - Unable to exchange encryption keys
Uncaught (in promise) Error: [FATAL] …/…/src/ssh/session.cc(230): libssh2_session_handshake(session_, 0 ) rc=-5
This would be the best security upgrade for all these old equipment, because they can be further protected with 21st century solution.