Starting with the 7.0 release of OpenSSH, support for ssh-dss keys has
been disabled by default at runtime due to their inherit weakness. If
you rely on these key types, you will have to take corrective action or
risk being locked out.Your best option is to generate new keys using strong algos such as rsa
or ecdsa or ed25519. RSA keys will give you the greatest portability
with other clients/servers while ed25519 will get you the best security
with OpenSSH (but requires recent versions of client & server).If you are stuck with DSA keys, you can re-enable support locally by
updating your sshd_config and ~/.ssh/config files with lines like so:
PubkeyAcceptedKeyTypes=+ssh-dssBe aware though that eventually OpenSSH will drop support for DSA keys
entirely, so this is only a stop gap solution.More details can be found on OpenSSH’s website:
http://www.openssh.com/legacy.html
一直在使用的ubuntu20.04系统提示升级22.04,升级后发现ssh(secureCRT和终端)无法使用了。
发现是因为22.04系统弃用了不安全的SSH -DSS,在配置项里重新开启即可。
# 打开ssh config文件
sudo vim /etc/ssh/ssh_config;
# 添加一行后保存退出即可
PubkeyAcceptedKeyTypes +ssh-rsa


1万+

被折叠的 条评论
为什么被折叠?



