paramiko ssh远程连接设备报错:no acceptable ciphers
error info:
paramiko.ssh_exception.IncompatiblePeer: Incompatible ssh server (no acceptable ciphers)
修改远程设备的ssh和sshd的配置文件,将加密算法注释掉:
sudo vi /etc/ssh/ssh_config
# This is the ssh client system-wide configuration file. See # ssh_config(5) for more information. This file provides defaults for # users, and the values can be changed in per-user configuration files # or on the command line. # Configuration data is parsed as follows: # 1. command line options # 2. user-specific file # 3. system-wide file # Any configuration value is only changed the first time it is set. # Thus, host-specific definitions should be at the beginning of the # configuration file, and defaults at the end. # Site-wide defaults for some commonly used options. For a comprehensive # list of available options, their meanings and defaults, please see the # ssh_config(5) man page. Include /etc/ssh/ssh_config.d/*.conf Host * # ForwardAgent no # ForwardX11 no # ForwardX11Trusted yes # PasswordAuthentication yes # HostbasedAuthentication no # GSSAPIAuthentication no # GSSAPIDelegateCredentials no # GSSAPIKeyExchange no # GSSAPITrustDNS no # BatchMode no # CheckHostIP yes # AddressFamily any # ConnectTimeout 0 # StrictHostKeyChecking ask # IdentityFile ~/.ssh/id_rsa # IdentityFile ~/.ssh/id_dsa # IdentityFile ~/.ssh/id_ecdsa # IdentityFile ~/.ssh/id_ed25519 # Port 22 # Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc # MACs hmac-md5,hmac-sha1,umac-64@openssh.com # EscapeChar ~ # Tunnel no # TunnelDevice any:any # PermitLocalCommand no # VisualHostKey no # ProxyCommand ssh -q -W %h:%p gateway.example.com # RekeyLimit 1G 1h SendEnv LANG LC_* HashKnownHosts yes GSSAPIAuthentication yes
sudo vi /etc/ssh/sshd_config
... ... ... # DRIVE customizations below: # Disable compression in SSH Compression no # option 1 # Use algorithms as per DRIVE recommended options: 1,2, or 3 #KexAlgorithms ecdh-sha2-nistp256 #HostbasedAcceptedKeyTypes ecdsa-sha2-nistp256-cert-v01@openssh.com #Ciphers aes128-gcm@openssh.com # option 2 #KexAlgorithms ecdh-sha2-nistp384 #HostbasedAcceptedKeyTypes ecdsa-sha2-nistp384-cert-v01@openssh.com #Ciphers aes256-gcm@openssh.com # option 3 KexAlgorithms ecdh-sha2-nistp521 HostbasedAcceptedKeyTypes ecdsa-sha2-nistp521-cert-v01@openssh.com #Ciphers aes256-gcm@openssh.com # Use only ECDSA key for SSH HostKey /etc/ssh/ssh_host_ecdsa_key