KDE

5253 readers

156 users here now

KDE is an international technology team creating user-friendly free and open source software for desktop and portable computing. KDE’s software runs on GNU/Linux, BSD and other operating systems, including Windows.

Plasma 6 Bugs

If you encounter a bug, proceed to https://bugs.kde.org, check whether it has been reported.

If it hasn't, report it yourself.

PLEASE THINK CAREFULLY BEFORE POSTING HERE.

Developers do not look for reports on social media, so they will not see it and all it does is clutter up the feed.

founded 1 year ago

MODERATORS

[email protected]

Connecting with sftp to server who uses legacy ssh-dss (lemm.ee)

submitted 7 months ago by [email protected] to c/[email protected]

3 comments fedilink hide all child comments

I have been trying to connect to a server using sftp from Dolphin. I unfortunately get the following error message:

kex error : no match for method server host key algo: server [ssh-dss], client [ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,[email protected],[email protected],rsa-sha2-512,rsa-sha2-256]

The problem might be that the server uses the legacy ssh-dss for connections, which is disabled by openSSH. But while with ssh you may add the flag

-oHostKeyAlgorithms=+ssh-dss

to enable it’s use again, yet I can’t find any option to do the same in Dolphin. Is there any way to do this?

I’m on NixOS 24.05 with KDE Plasma 6.0.0 from the unstable branch.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 7 months ago (1 children)

Does modifying ~/.ssh/config to contain the exception work?

Host somehost.example.org HostKeyAlgorithms +ssh-dss

Note, that whatever infrastructure you're working with urgently like a hole in the head needs to be patched. This isn't optional, at this point it's serious negligence. You wouldn't leave the office unlocked because the door got too old to lock? This is just as unacceptable, this needs addressed like today.

[–] [email protected] 1 points 7 months ago* (last edited 7 months ago)

Hi, I tried that but it didn't work unfortunately.

Believe me, I tried to make them upgrade, but apparently the entire infrastructure runs on an ancient OpenVMS version and there is not much they can do without changing the entire thing (as they said)