ssh-rsa-cert-v01@openssh.com

[jchamb2010]

Hello,


I'm receiving the following message when attempting to connect to a "teleport" SSH proxy server:

Key exchange failed.
No compatible hostkey. The server supports these methods: ssh-rsa-cert-v01@openssh.com

Any ideas what settings I can change to make this work, or is this something that would require an update/patch?


Thanks!

[jdev]

Originally Posted by jchamb2010

No compatible hostkey. The server supports these methods: ssh-rsa-cert-v01@openssh.com

Any ideas what settings I can change to make this work, or is this something that would require an update/patch?

Your SSH2 server is using an OpenSSH "Trusted Certificate" as its host key.

While SecureCRT supports using OpenSSH "trusted certificates" for end user publickey authentication, SecureCRT doesn't yet support the server using that type of OpenSSH-specific trusted cert as the host key.

I've added a feature request on your behalf for supporting this feature in SecureCRT. I don't yet have an idea as to if/when this would ever be implemented, but we'll be happy to post here should a version of SecureCRT become available with support for that host key type.

I'm sorry, but there aren't any workarounds that you can use to get SecureCRT to successfully connect to this host with its host key configuration as-is.

--Jake

[jchamb2010]

Thanks for the quick reply.
Just for your own reference this is the software I was attempting to use:
https://goteleport.com/


Since SecureCRT is my go-to client and it doesn't support teleport I'll start looking for another SSH proxy that will work with SecureCRT


-John

[jdev]

Originally Posted by jchamb2010

Thanks for the quick reply.
Just for your own reference this is the software I was attempting to use:
https://goteleport.com/

Since SecureCRT is my go-to client and it doesn't support teleport I'll start looking for another SSH proxy that will work with SecureCRT

In the mean time, we'll post here with news of any changes in SecureCRT that would allow such host keys to be supported.

--Jake