{"id":2829,"date":"2019-11-25T14:54:43","date_gmt":"2019-11-25T14:54:43","guid":{"rendered":"http:\/\/www.incredigeek.com\/home\/?p=2829"},"modified":"2023-08-08T23:44:15","modified_gmt":"2023-08-09T04:44:15","slug":"no-matching-host-key-type-found-their-offer-ssh-dss","status":"publish","type":"post","link":"https:\/\/www.incredigeek.com\/home\/no-matching-host-key-type-found-their-offer-ssh-dss\/","title":{"rendered":"How To Fix &#8220;no matching host key type found. Their offer: ssh-rsa,ssh-dss&#8221;"},"content":{"rendered":"\n<p>2023 Update: Recent versions of REHL have completely disabled DES which can cause issues even when using the +ssh-rsa or +ssh-rsa.  You can use the following command to enable SHA1, however, upgrading the server would be recommended. <\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">update-crypto-policies --set DEFAULT:SHA1<\/pre>\n\n\n\n<p><\/p>\n\n\n\n<p>Reason for it not working is some of the older weaker SSH encryption algorithms have been disabled.  You can allow ssh to use it by specifying the following option.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"> -oHostKeyAlgorithms=+ssh-dss <\/pre>\n\n\n\n<p>The whole command would look like<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ssh  -o HostKeyAlgorithms=+ssh-dss root@192.168.111.4 <\/pre>\n\n\n\n<p><a href=\"http:\/\/www.openssh.com\/legacy.html\">http:\/\/www.openssh.com\/legacy.html<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/askubuntu.com\/questions\/836048\/ssh-returns-no-matching-host-key-type-found-their-offer-ssh-dss#836064\">https:\/\/askubuntu.com\/questions\/836048\/ssh-returns-no-matching-host-key-type-found-their-offer-ssh-dss#836064<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>2023 Update: Recent versions of REHL have completely disabled DES which can cause issues even when using the +ssh-rsa or +ssh-rsa. You can use the following command to enable SHA1, however, upgrading the server would be recommended. update-crypto-policies &#8211;set DEFAULT:SHA1 &hellip; <a href=\"https:\/\/www.incredigeek.com\/home\/no-matching-host-key-type-found-their-offer-ssh-dss\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[1391,17,814,575,1397,221,815],"class_list":["post-2829","post","type-post","status-publish","format-standard","hentry","category-linux","tag-almalinux-9","tag-centos","tag-dss","tag-encryption","tag-rehl","tag-ssh","tag-ssh-dss"],"_links":{"self":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/2829","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/comments?post=2829"}],"version-history":[{"count":5,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/2829\/revisions"}],"predecessor-version":[{"id":5428,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/2829\/revisions\/5428"}],"wp:attachment":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/media?parent=2829"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/categories?post=2829"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/tags?post=2829"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}