[cfarm-users] Sparc machine access

[Matthieu Herrb]

On Tue, Nov 30, 2021 at 12:02:38AM -0500, Jeffrey Walton via cfarm-users wrote:
> On Mon, Nov 29, 2021 at 11:32 PM Bart Van Assche via cfarm-users
> <cfarm-users at lists.tetaneutral.net> wrote:
> > ...
> > I'm using an RSA key but can't log in to gcc210 nor to gcc211. OpenSUSE
> > (OpenSSH_8.8p1) displays the following message:
> >
> > $ ssh gcc210.fsffrance.org
> > Unable to negotiate with 213.178.77.185 port 22: no matching host key
> > type found. Their offer: ssh-rsa,ssh-dss
> >
> > And Ubuntu (OpenSSH_8.4p1) displays the following message:
> >
> > $ ssh gcc210.fsffrance.org
> > Unable to negotiate with 213.178.77.185 port 22: no matching key
> > exchange method found. Their offer:
> > gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
> >
> > Am I perhaps missing something?
> 
> Maybe related from the OpenSSH 8.8 release notes
> (https://www.openssh.com/releasenotes.html):
> 
>     This release disables RSA signatures using the
>     SHA-1 hash algorithm by default...
> 
>     Incompatibility is more likely when connecting to
>     older SSH implementations that have not been
>     upgraded or have not closely tracked
>     improvements in the SSH protocol. For these
>     cases, it may be necessary to selectively
>     re-enable RSA/SHA1...
> 
> Jeff

Yes. Add this to your ~/.ssh/config file to re-enable algorithms that
are now disabled by default

Host gcc210.fsffrance.org
     HostKeyAlgorithms +ssh-rsa,ssh-dss
     KexAlgorithms +diffie-hellman-group1-sha1

	       
> _______________________________________________
> cfarm-users mailing list
> cfarm-users at lists.tetaneutral.net
> https://lists.tetaneutral.net/listinfo/cfarm-users

-- 
Matthieu Herrb