使用ganymed-ssh2连接linux报错Cannot negotiate, proposals do not match.

Posted 2020-12-11 规格严格-功夫到家-哈工大威海人

• Description

  HostAgent fails to establish SSH Connection to RedHat EL7 host
  
  The error reported when the agent attempts to connect to the host matches the message in KB article 227808, but the hmac-sha1 MAC algorithm is listed in the sshd_config file on the monitored host.
   
  
  The following error is reported :
  
  2017-12-12 17:46:42.369 VERBOSE [HostActivitiesCreator[12]-0] com.quest.glue.core.remoteconnection.ssh.SSHConnectionServiceImpl - Connecting to XX.X.XX.XX:22 using RSA public key authentication
  2017-12-12 17:46:42.458 WARN [HostActivitiesCreator[12]-0] com.dell.foglight.infrastructure.services.disk.UnixPlatformDiskExclusionService - Unable to determine hostname from common topology; only using hostname "XX.X.XX.XX" provided by properties.
  com.quest.glue.api.services.RemoteConnectionException: A connection could not be established to XX.X.XX.XX
  ...
  Caused by: com.quest.glue.api.services.ConnectionRefusedException: The remote machine is visible but has refused the connection
  ...
  Caused by: java.io.IOException: Key exchange was not finished, connection is closed.
  ...
  Caused by: java.io.IOException: Cannot negotiate, proposals do not match.

• Cause

  The diffie-hellman-group-exchange-sha1 key exchange algorithm was not enabled for the monitored host.

• Resolution

  RESOLUTION:  Check whether the diffie-hellman-group-exchange-sha1 key exchange algorithm is enabled on the host.  On a Linux host the "sshd -T | grep kex" command can be executed to list the enabled key exchange algorithms.  If the diffie-hellman-group-exchange-sha1 key exchange algorithm is not enabled following are two options:

  
  
  - Enable the diffie-hellman-group-exchange-sha1 key exchange algorithm on the monitored host.

 

 

https://blog.csdn.net/itkool/article/details/79460408