Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSH error while provisioning because of unsupported kex algorithm #12458

Closed
Freeaqingme opened this issue Jul 13, 2021 · 0 comments · Fixed by #13219
Closed

SSH error while provisioning because of unsupported kex algorithm #12458

Freeaqingme opened this issue Jul 13, 2021 · 0 comments · Fixed by #13219

Comments

@Freeaqingme
Copy link

In my provisioning script I update the sshd config in order to secure the machine (to accurately reflect production). Part of this is disabling ssh-rsa keys. The error is:

could not settle on kex algorithm
Server kex preferences: curve25519-sha256
Client kex preferences: ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1>

Running 'vagrant ssh' works just fine.

Vagrant version

Vagrant 2.2.16

Host operating system

Linux dolf-desktop 4.19.0-17-amd64 #1 SMP Debian 4.19.194-1 (2021-06-10) x86_64 GNU/Linux
Debian GNU/Linux 10 (buster)

Guest operating system

Ubuntu 20.04

Debug output

https://gist.github.com/Freeaqingme/27db871bf45c1a0f586fc253863e06cc

Steps to reproduce

Run SSH with the following config on the guest:

# Host keys the client should accept
HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-ed25519  

# Specifies the available KEX (Key Exchange) algorithms
KexAlgorithms curve25519-sha256                                 

# Specifies the ciphers allowed
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com    

# Specifies the available MAC alg.
MACs hmac-sha2-512-etm@openssh.com                              

# Only allow incoming ECDSA and ed25519 sessions:
HostbasedAcceptedKeyTypes ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jul 28, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant