User Tools

Site Tools


git_ssh_no_matching_host_key_type_found

This is an old revision of the document!


Solventar problemas con compatibilidad entre versiones actuales de clientes SSH y servidores SSH antiguos

Error SSH.

Unable to negotiate with X.X.X.X port X: no matching host key type found. Their offer: ssh-rsa,ssh-dss<code>

Error Git (basado en ssh).
<code>
Permission denied (publickey).

fatal: Could not read from remote repository.

Please make sure you have the correct access rights and the repository exists<code>

**Motivos**: https://www.openssh.com/releasenotes.html

SSH > 7.X.
<code>The new openssh version (7.0+) deprecated DSA keys and is not using DSA keys by default (not on server or client). The keys are not preferred to be used anymore, so if you can, I would recommend to use RSA keys where possible.

SSH > 8.8.

This release disables RSA signatures using the SHA-1 hash algorithm by default. This change has been made as the SHA-1 hash algorithm is cryptographically broken, and it is possible to create chosen-prefix hash collisions for <USD$50K [1]

For most users, this change should be invisible and there is no need to replace ssh-rsa keys. OpenSSH has supported RFC8332 RSA/SHA-256/512 signatures since release 7.2 and existing ssh-rsa keys will automatically use the stronger algorithm where possible.

Incompatibility is more likely when connecting to older SSH implementations that have not been upgraded or have not closely tracked improvements in the SSH protocol

git_ssh_no_matching_host_key_type_found.1636486581.txt.gz · Last modified: 2021/11/09 20:36 by busindre