Различия

Показаны различия между двумя версиями страницы.

--- nix:tipovye_problemy [2023/05/10 09:41] – [signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms] san
+++ nix:tipovye_problemy [2025/09/02 10:52] (текущий) – [ssh_dispatch_run_fatal: Connection to port 22: error in libcrypto] san
@@ Строка 3: / Строка 3: @@
 ===== Проблемы с SSH =====
-==== signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms ====
+==== userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] ====
 /etc/ssh/sshd_config
@@ Строка 11: / Строка 11: @@
 PubkeyAcceptedKeyTypes=+ssh-rsa
 </file>
+Или более изящно
+<file>
+echo 'PubkeyAcceptedKeyTypes=+ssh-rsa' >/etc/ssh/sshd_config.d/pubkey_rsa.conf
+systemctl restart ssh
+</file>
+====  userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] ====
+Аналогично предыдущему
+<file>
+echo 'PubkeyAcceptedKeyTypes=+ssh-dss' >/etc/ssh/sshd_config.d/pubkey_dss.conf
+systemctl restart ssh
+</file>
+==== ssh: sign_and_send_pubkey: signing failed: agent refused operation ====
+нужно выполнить:
+<file>
+ssh-add
+</file>
+==== no matching key exchange method found. Their offer: diffie-hellman-group14-sha1 ====
+Сделать в файле ~/.ssh/config следующие строки
+<file>
+Host server_name server_ip
+    KexAlgorithms +diffie-hellman-group14-sha1
+</file>
+==== no matching host key type found. Their offer: ssh-dss ====
+Сделать в файле ~/.ssh/config следующие строки
+<file>
+Host server_name server_ip
+    HostKeyAlgorithms +ssh-dss
+</file>
+==== ssh_dispatch_run_fatal: Connection to port 22: error in libcrypto ====
+<code console>
+#update-crypto-policies --show
+DEFAULT
+#update-crypto-policies --set LEGACY
+Setting system policy to LEGACY
+Note: System-wide crypto policies are applied on application start-up.
+It is recommended to restart the system for the change of policies
+to fully take place.
+#update-crypto-policies --show
+LEGACY
+</code>
+<code>update-crypto-policies --set DEFAULT:SHA1</code>
+{{tag>linux unix "проблемы"}}