D1H开启dropbear无法通过SecureCRT SSH连接

[wjx163208]

环境：D1H，Tina Linux2.0 SDK
操作：make menuconfig选择dropbear，编译打包生成的镜像，烧写到板卡后，windows下通过SecureCRT SSH连接不上（已经启动了dropbear）报错如下：

The client has disconnected from the server.  Reason:
The server's host key failed to verify.  This could mean that the server you are connected to is impersonating the server it claims to be. A connection could not be established. 

请教一下，有没有人碰到过这个问题，如何解决？

[whycan]

@wjx163208

key 有问题

[whycan]

@wjx163208

参考这里：bing search dropbear

[wjx163208]

@whycan 现在的key是自动生成了，在/etc/dropbear/下，dropbear_rsa_host_key，且试过不支持dss类型key，请问下具体key有什么问题，谢谢！

[whycan]

@wjx163208

ssh-keygen -t rsa

这个生成密钥对可以用吗？

[wjx163208]

@whycan 不行。我使用两块D1-H板卡，可以SSH连接，windows下使用SecureCRT SSH就不行。

[whycan]

@wjx163208
用 mobaXterm 试一试

[wjx163208]

@whycan 都试过，不行

[whycan]

@wjx163208

这地方填上私钥了吗？

[wjx163208]

@whycan 还是不行

[whycan]

@wjx163208
用ubuntu 的ssh命令可以连吗？

[wjx163208]

@whycan 尝试过，也不行

OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to 192.168.1.100 [192.168.1.100] port 22.
debug1: Connection established.
debug1: identity file /home/cc/.ssh/id_rsa type 1
debug1: identity file /home/cc/.ssh/id_rsa-cert type -1
debug1: identity file /home/cc/.ssh/id_dsa type -1
debug1: identity file /home/cc/.ssh/id_dsa-cert type -1
debug1: identity file /home/cc/.ssh/id_ecdsa type -1
debug1: identity file /home/cc/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/cc/.ssh/id_ed25519 type -1
debug1: identity file /home/cc/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2
debug1: Remote protocol version 2.0, remote software version dropbear_2015.71
debug1: no match: dropbear_2015.71
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: sending SSH2_MSG_KEX_ECDH_INIT
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: RSA 65:f2:3c:fe:af:29:7d:16:d7:92:56:93:18:0b:1d:47
debug1: Host '192.168.1.100' is known and matches the RSA host key.
debug1: Found key in /home/cc/.ssh/known_hosts:3
hash mismatch
debug1: ssh_rsa_verify: signature incorrect
key_verify failed for server_host_key

[whycan]

@wjx163208 在 D1H开启dropbear无法通过SecureCRT SSH连接 中说：

192.168.1.100

192.168.1.100 的 ssh 私钥配置了吗？

[wjx163208]

@whycan 这个就是板卡，自动生成了dropbear_rsa_host_key，在/etc/dropbear下

[whycan]

@wjx163208
我的意思是说在乌邦图的ssh配置

你需要配置私钥，否则ssh不知道你用哪个钥匙开门。

[wjx163208]

@whycan ubuntu也用ssh-keygen生成了密钥，就是这个现象。

[whycan]

@wjx163208

$ ls ~/.ssh/ -l
total 48
-rw------- 1 whycan whycan  562 Mar 31 13:36 config
-rw------- 1 whycan whycan 1680 May  2  2022 id_rsa.bitbucket

$ cat ~/.ssh/config
Host sdk.allwinnertech.com
    IdentityFile ~/.ssh/sdk.allwinnertech.com.private
    User whycan

Host bitbucket.org
    IdentityFile ~/.ssh/id_rsa.bitbucket
    User root

你大概需要这样配置。

[wjx163208]

@whycan 我ssh用-i指定了文件，跟这个应该一样。然后按照你这个整了个配置文件，现象一样。