无法SSH到服务器

Ami*_*mar 2 ssh solaris ssh-keys

无法通过ssh登录到服务器。因此使用rsh登录,并在尝试ssh主机本身时遇到错误:

no common kex alg: client 'diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1', server 'gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g=='
Run Code Online (Sandbox Code Playgroud)

我发现此登录 /var/svc/log/network-ssh:default.log

[ May 14 21:23:13 Rereading configuration. ]

[ May 14 21:23:13 Executing refresh method ("/lib/svc/method/sshd restart") ]

[ May 14 21:23:13 Method "refresh" exited with status 0 ]

[ May 14 21:30:25 Stopping because service disabled. ]

[ May 14 21:30:25 Executing stop method (:kill) ]

[ May 14 21:33:08 Enabled. ]

[ May 14 21:33:08 Executing start method ("/lib/svc/method/sshd start") ]

Could not load host key: /.ssh/id_dsa

Could not load host key: /.ssh/identity

Disabling protocol version 1. Could not load host key

[ May 14 21:33:08 Method "start" exited with status 0 ]
Run Code Online (Sandbox Code Playgroud)

提前致谢。

Arn*_*ide 5

看来服务器和客户端找不到通用的身份验证方法。

我刚刚在这里有了一个sun集群:它仅支持diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,但是我的Gentoo GNU / Linux ssh服务器似乎已经放弃了group1算法。

通过/etc/ssh/sshd_config在ssh服务器上进行更改以包含以下内容进行修复

KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521
Run Code Online (Sandbox Code Playgroud)

但是,我担心有理由从默认值中删除group1算法。我不会在可公开访问的盒子上这样做。

有关参考,请参阅https://security.stackexchange.com/questions/25662/openssh-default-preferred-ciphers-hash-etc-for-ssh2