# AWX Project Sync failed via SSH

**URL:** <https://forum.ansible.com/t/awx-project-sync-failed-via-ssh/37636>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [February 8, 2023, 10:00pm UTC](https://forum.ansible.com/t/awx-project-sync-failed-via-ssh/37636 "2023-02-08T22:00:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Maximiliano\_Dura](https://avatars.discourse-cdn.com/v4/letter/m/ecc23a/32.png) [@Maximiliano\_Dura](https://forum.ansible.com/u/Maximiliano_Dura)\
**Post date:** [February 8, 2023, 10:00pm UTC](https://forum.ansible.com/t/awx-project-sync-failed-via-ssh/37636/1 "2023-02-08T22:00:26Z")

</div>

Hello,  
I have been synchronizing my Project using my GIT repo with no issues (AWX on K3s), but today it suddenly stopped working with this error:

TASK [update project using git] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*

fatal: [localhost]: FAILED! =\> {“changed”: false, “cmd”: [“/usr/bin/git”, “fetch”, “–tags”, “origin”], “msg”: “Failed to download remote objects and refs: **Unable to negotiate with XX.XX.XX.XX port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1** \r\nfatal: Could not read from remote repository.\n\nPlease make sure you have the correct access rights\nand the repository exists.\n”}

How can I force AWX to communicate to this SSH server using any of this allowed protocols?

Thanks in advance for any help,  
Max.

---

<div class="post-metadata">

**Author:** ![Walter\_Rowe](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/walter_rowe/32/4506_2.png) [@Walter\_Rowe](https://forum.ansible.com/u/Walter_Rowe)\
**Post date:** [February 9, 2023, 12:48pm UTC](https://forum.ansible.com/t/awx-project-sync-failed-via-ssh/37636/2 "2023-02-09T12:48:13Z")

</div>

It sounds like either your AWX host or your git repo host has changed what ciphers they allow and now the two can’t negotiate a common cipher. We had this when we enabled FIPS mode on some hosts and not others. I don’t know if you can add args to the ssh used by AWS ssh. There are ssh options to specify ciphers. You also might be able to add them to an ssh config file.

Walter

---

<div class="post-metadata">

**Author:** ![Maximiliano\_Dura](https://avatars.discourse-cdn.com/v4/letter/m/ecc23a/32.png) [@Maximiliano\_Dura](https://forum.ansible.com/u/Maximiliano_Dura)\
**Post date:** [February 9, 2023, 7:22pm UTC](https://forum.ansible.com/t/awx-project-sync-failed-via-ssh/37636/3 "2023-02-09T19:22:38Z")

</div>

Thanks Walter for your response! I will check this.