libssh2 with rsa-sha2-256, rsa-sha2-512

João M. S. Silva joao.m.santos.silva at gmail.com
Tue May 16 18:42:00 CEST 2023


>
>
> Why did curl/libssh2 offer:
>
> Unable to negotiate with 127.0.0.1 port 43382: no matching host key type
> found. Their offer: ssh-rsa [preauth]
>
> it makes sense that server-sig-algs was not supported by the server and
> libssh2 dropped down to ssh-rsa to avoid the penalization.
>
> This hypothesis makes sense, but how do I enable server-sig-algs
> extension in sshd?
>

Think I found the problem: when I built curl I was providing:

./configure --with-openssl --with-libssh2=/home/shared/libssh2/


but then, at run time, a pre-existing version of libssh2 was probably being
used (the one brought by the apt installation of git).


I could not use LD_LIBRARY_PATH to tell configure that I had a new place
for libssh2. I had to install it system-wide after removing the system one.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.haxx.se/pipermail/libssh2-devel/attachments/20230516/97b425d2/attachment.htm>


More information about the libssh2-devel mailing list