解决ssh: no common algorithm for key exchange； client offered: [curve25519-sha256@libssh.org ecdh

ProblemTerminator

已于 2023-08-11 10:16:03 修改

阅读量4.5k

点赞数

分类专栏：开发问题解决合集文章标签： ssh linux go

于 2021-09-02 14:42:51 首次发布

本文链接：https://blog.csdn.net/HYZX_9987/article/details/120060752

版权

开发问题解决合集专栏收录该内容

57 篇文章

订阅专栏

博客讲述了在使用SSH连接时遇到的‘no common algorithm for key exchange’错误，问题在于客户端和服务器端不支持相同的密钥交换算法。通过在客户端配置中明确指定‘diffie-hellman-group-exchange-sha256’算法，成功解决了该问题，实现了SSH的正常连接。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

报错如下

ssh: no common algorithm for key exchange; client offered: [curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group14-sha1], server offered: [diffie-hellman-group-exchange-sha256]

基于SSH连接时报的错

报错时的代码：

	var clientConfig *ssh.ClientConfig
	clientConfig = &ssh.ClientConfig{
		User:            c.Username,
		Auth:            auth,
		Timeout:         10 * time.Second,
		HostKeyCallback: ssh.InsecureIgnoreHostKey(), 
	}

	sshClient := new(ssh.Client)
	if sshClient, err = ssh.Dial("tcp", fmt.Sprintf("%s:%d", c.Host, c.Port), clientConfig); err != nil {
		return
	}

解决其实很简单

要指定好"diffie-hellman-group-exchange-sha256"算法，就是报错中提到的；

成功的代码

	var clientConfig *ssh.ClientConfig
	clientConfig = &ssh.ClientConfig{
		User:            c.Username,
		Auth:            auth,
		Timeout:         10 * time.Second,
		HostKeyCallback: ssh.InsecureIgnoreHostKey(), 
	}

    clientConfig.KeyExchanges = append(clientConfig.KeyExchanges, "diffie-hellman-group-exchange-sha256")

	sshClient := new(ssh.Client)
	if sshClient, err = ssh.Dial("tcp", fmt.Sprintf("%s:%d", c.Host, c.Port), clientConfig); err != nil {
		return
	}

如果解决了你的问题，欢迎留下足迹哦！