When I add -oHostKeyAlgorithms=+ssh-dss to the ssh call it works. What key? The key of the karaf use in $KARAF_HOME/etc/key.properties? I have not modify this file.
Richard 2015-09-17 9:14 GMT+02:00 Jean-Baptiste Onofré <[email protected]>: > Hi Richard, > > do you use your own key or the one provided by Karaf ? > > Do the ssh client support rsa/dsa ? > > Regards > JB > > On 09/17/2015 09:07 AM, Richard Hierlmeier wrote: > >> >> Hi, >> >> I migrated a karaf 3.0.3 installation from my old windows 7 laptop to a >> windows 8 laptop. >> In the new enviroment the ssh connect is no longer working. >> I get the following error: >> >> $ ssh -p 8101 karaf@localhost >> Unable to negotiate with 127.0.0.1 <http://127.0.0.1>: no matching host >> >> key type found. Their offer: ssh-dss >> >> Here is the debug output of ssh: >> >> $ ssh -vvv -p 8101 karaf@localhost >> OpenSSH_7.1p1, OpenSSL 1.0.2d 9 Jul 2015 >> debug2: ssh_connect: needpriv 0 >> debug1: Connecting to localhost [::1] port 8101. >> debug1: connect to address ::1 port 8101: Connection refused >> debug1: Connecting to localhost [127.0.0.1] port 8101. >> debug1: Connection established. >> debug1: key_load_public: No such file or directory >> debug1: identity file /cygdrive/c/Users/rh/.ssh/id_rsa type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /cygdrive/c/Users/rh/.ssh/id_rsa-cert type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /cygdrive/c/Users/rh/.ssh/id_dsa type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /cygdrive/c/Users/rh/.ssh/id_dsa-cert type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /cygdrive/c/Users/rh/.ssh/id_ecdsa type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /cygdrive/c/Users/rh/.ssh/id_ecdsa-cert type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /cygdrive/c/Users/rh/.ssh/id_ed25519 type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /cygdrive/c/Users/rh/.ssh/id_ed25519-cert type -1 >> debug1: Enabling compatibility mode for protocol 2.0 >> debug1: Local version string SSH-2.0-OpenSSH_7.1 >> debug1: Remote protocol version 2.0, remote software version >> SSHD-CORE-0.12.0 >> debug1: no match: SSHD-CORE-0.12.0 >> debug2: fd 3 setting O_NONBLOCK >> debug1: Authenticating to localhost:8101 as 'karaf' >> debug3: put_host_port: [localhost]:8101 >> debug1: SSH2_MSG_KEXINIT sent >> debug1: SSH2_MSG_KEXINIT received >> debug2: kex_parse_kexinit: [email protected] >> <mailto:[email protected] >> >,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 >> debug2: kex_parse_kexinit: [email protected] >> <mailto:[email protected]>, >> [email protected] >> <mailto:[email protected]>, >> [email protected] >> <mailto:[email protected]>, >> [email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected] >> >,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa >> debug2: kex_parse_kexinit: [email protected] >> <mailto:[email protected]>,aes128-ctr,aes192-ctr,aes256-ctr, >> [email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected] >> >,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour, >> [email protected] >> <mailto:[email protected]> >> debug2: kex_parse_kexinit: [email protected] >> <mailto:[email protected]>,aes128-ctr,aes192-ctr,aes256-ctr, >> [email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected] >> >,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour, >> [email protected] >> <mailto:[email protected]> >> debug2: kex_parse_kexinit: [email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,hmac-sha2-256,hmac-sha2-512,hmac-sha1, >> [email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,hmac-md5,hmac-ripemd160, >> [email protected] >> <mailto:[email protected]>,hmac-sha1-96,hmac-md5-96 >> debug2: kex_parse_kexinit: [email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,hmac-sha2-256,hmac-sha2-512,hmac-sha1, >> [email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,[email protected] >> <mailto:[email protected]>,hmac-md5,hmac-ripemd160, >> [email protected] >> <mailto:[email protected]>,hmac-sha1-96,hmac-md5-96 >> debug2: kex_parse_kexinit: none,[email protected] >> <mailto:[email protected]>,zlib >> debug2: kex_parse_kexinit: none,[email protected] >> <mailto:[email protected]>,zlib >> debug2: kex_parse_kexinit: >> debug2: kex_parse_kexinit: >> debug2: kex_parse_kexinit: first_kex_follows 0 >> debug2: kex_parse_kexinit: reserved 0 >> debug2: kex_parse_kexinit: >> >> diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 >> debug2: kex_parse_kexinit: ssh-dss >> debug2: kex_parse_kexinit: aes128-ctr >> debug2: kex_parse_kexinit: aes128-ctr >> debug2: kex_parse_kexinit: hmac-sha1 >> debug2: kex_parse_kexinit: hmac-sha1 >> debug2: kex_parse_kexinit: none >> debug2: kex_parse_kexinit: none >> debug2: kex_parse_kexinit: >> debug2: kex_parse_kexinit: >> debug2: kex_parse_kexinit: first_kex_follows 0 >> debug2: kex_parse_kexinit: reserved 0 >> debug1: kex: server->client aes128-ctr hmac-sha1 none >> debug1: kex: client->server aes128-ctr hmac-sha1 none >> Unable to negotiate with 127.0.0.1 <http://127.0.0.1>: no matching host >> key type found. Their offer: ssh-dss >> >> >> What can I do? >> >> Richard >> >> >> >> >> >> > -- > Jean-Baptiste Onofré > [email protected] > http://blog.nanthrax.net > Talend - http://www.talend.com >
