Git error: Unable to negotiate with X.X.X.X : no matching host key type found . their offer: ssh-dss

最新推荐文章于 2025-04-29 16:43:37 发布

weixin_34179762

最新推荐文章于 2025-04-29 16:43:37 发布

阅读量584

点赞数

CC 4.0 BY-SA版权

文章标签：运维 git python

原文链接：https://my.oschina.net/leblancs/blog/796792

本文介绍了解决SSH协议下克隆Git仓库时遇到的无法协商主机密钥类型问题的方法。通过配置SSH客户端接受DSA主机密钥或更新Git提供者的主机密钥，确保能够正确访问远程仓库。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

2019独角兽企业重金招聘Python工程师标准>>>

I am trying to create a git repository on my web host and clone it on my computer. Here's what I did:

I created a repository on the remote server.
I generated a key pair: ssh-keygen -t dsa.
I added my key to ssh-agent.
I copied to the server public key in ~/.ssh.

And then, after an attempt to run the command git clone ssh://user@host/path-to-repository, I get an error:

Unable to negotiate with XX.XXX.XX.XX: no matching host key type found. Their offer: ssh-dss
fatal: Could not read from remote repository.
Please make sure you have the correct access rights and the repository exists.

What does that mean?

Answer:

http://stackoverflow.com/questions/34208495/unable-to-negotiate-with-xx-xxx-xx-xx-no-matching-host-key-type-found-their-of

The recent openssh version deprecated DSA keys by default. You should pursuit your GIT provider to add some reasonable host key. Relying only on DSA is not a good idea.

As a workaround, you need to tell your ssh client that you want to accept DSA host keys, as described in the official documentation for legacy usage. You have few possibilities, but I recommend to add these lines into your ~/.ssh/config file:

Host your-host
    HostkeyAlgorithms +ssh-dss

You can also add -oHostKeyAlgorithms=+ssh-dss in your ssh line:

ssh -oHostKeyAlgorithms=+ssh-dss user@host

转载于:https://my.oschina.net/leblancs/blog/796792