openssh升级报错

openssh升级到8.8以上会报错

sshd[32139]: Unable to negotiate with 172.85.20.20 port 35548: no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth]

这是因为 >=8.8p1 版的 openssh 的 ssh 客户端默认禁用了 ssh-rsa 算法, 但是服务器端未升级只支持 ssh-rsa,ssh-rss

解决方法：

修改ssh配置文件/etc/ssh/sshd_config，添加以下内容

HostKeyAlgorithms ssh-rsa,ssh-dss
PubkeyAcceptedKeyTypes ssh-rsa,ssh-dss