Using Putty to do a ssh connection with key authentication

Issues related to applications and software problems and general support
Post Reply
fullbore
Posts: 22
Joined: 2018/10/21 14:33:19

Using Putty to do a ssh connection with key authentication

Post by fullbore » 2022/06/15 11:56:46

I see the following in /var/log/secure

sshd[24813]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedAlgorithms [preauth]

/etc/ssh/sshd_config contains-
PubkeyAuthentication yes
PubkeyAcceptedAlgorithms +ssh-dss

And

# ssh -Q key
ssh-ed25519
ssh-ed25519-cert-v01@openssh.com
sk-ssh-ed25519@openssh.com
sk-ssh-ed25519-cert-v01@openssh.com
ssh-rsa
ssh-dss
ecdsa-sha2-nistp256
ecdsa-sha2-nistp384
ecdsa-sha2-nistp521
sk-ecdsa-sha2-nistp256@openssh.com
ssh-rsa-cert-v01@openssh.com
ssh-dss-cert-v01@openssh.com
ecdsa-sha2-nistp256-cert-v01@openssh.com
ecdsa-sha2-nistp384-cert-v01@openssh.com
ecdsa-sha2-nistp521-cert-v01@openssh.com
sk-ecdsa-sha2-nistp256-cert-v01@openssh.com

So... what am I doing wrong?

fullbore
Posts: 22
Joined: 2018/10/21 14:33:19

Re: Using Putty to do a ssh connection with key authentication

Post by fullbore » 2022/06/15 12:20:30

OK, sorted

Downloaded the lasest Putty and generated a new ssh-rsa key pair and put the public one in ~/.ssh/authorized_keys and key login in now working

User avatar
TrevorH
Site Admin
Posts: 33216
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Using Putty to do a ssh connection with key authentication

Post by TrevorH » 2022/06/15 14:51:45

Yes, ssh-dss is well and truly dead and buried and has been for several years.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

pjsr2
Posts: 614
Joined: 2014/03/27 20:11:07

Re: Using Putty to do a ssh connection with key authentication

Post by pjsr2 » 2022/06/15 14:53:51

The ssh-dss method is no longer accepted. See https://www.openssh.com/legacy.html.
Upgrading putty and generating a new key is the right solution.

Post Reply