secureCRT 6.5 ssh登陆openeuler提示交换秘钥不支持

问题描述

Key exchange failed. No compatible key exchange method. The server supports these methods: curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
No compatible MAC. The server supports these MACs: hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com 

分析就是没有找到交换米秘钥的算法，导致失败

问题解决

方法1、升级secureCRT
SecureCRT9.0

• https://www.vandyke.com/cgi-bin/releases.php?product=securecrt

方法2、注释掉最新的交换密码改为老的秘钥交换(可能是不安全，但也没办法)

/etc/ssh/sshd_config
#Ciphers
#MACs
#KexAlgorithms

新增兼容性的秘钥交换
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1