Switch rebuild scripts are not working on Xenial due missing OpenSSH feature

Bug #1723114 reported by Márton Kiss
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
obinstall
New
Undecided
Unassigned

Bug Description

Ubuntu 16.04 includes OpenSSH 7.2, which has depreciated DSA keys since verion 7.0. The ./base-switch-config.sh script cannot upload configuration to the MikroTik switch, because it throws a "no matching host key type found. Their offer: ssh-dss" error message, and scp / ssh commands are failing to connect to Miktrotik.

I suggest to add the -oHostKeyAlgorithms=+ssh-dss option to relevant ssh and scp commands.

Revision history for this message
Vern Hart (vern) wrote :

Adding the ssh command-line option to support dss is certainly one solution but RouterOS has supported rsa since version 6.31 which was released Aug 14, 2015

Perhaps a better solution would be to update RouterOS on the Mikrotik switch. This can be done by ensuring internet connectivity to the switch, visiting the router's IP in a web browser, and clicking Check for Updates.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.