perl - 找不到匹配的Mac:客户端hmac-sha2-512-etm @ openssh.com，hmac-sha2-256-etm @ openssh.com，hmac-sha2-512，hmac-sha2-256服务器hmac-sha1

Question

我在AIX上运行脚本时遇到以下错误

Reading configuration data /ecmsq1vg1/home1/aradmin/.ssh/config
Reading configuration data /etc/ssh_config
Connecting to www.mftcatapp.firstdataclients.com, port 22.
Remote version string: SSH-2.0-Sun_SSH_1.1.8
Remote protocol version 2.0, remote software version Sun_SSH_1.1.8
Net::SSH::Perl Version 2.14, protocol version 2.0.
No compat match: Sun_SSH_1.1.8.
Connection established.
Sent key-exchange init (KEXINIT), waiting for response.
No matching mac found: client hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256 server hmac-sha1 at /apps/perl/lib/site_perl/5.18.1/aix-thread-multi/Net/SSH/Perl/SSH2.pm line 273

谁能帮我解决为什么遇到上述错误？

Answer 1

perldoc Net::SSH::Perl :

Integrity checking is performed by the hmac-sha2-256, hmac-sha2-512, hmac-sha2-256-etm@openssh.com, or hmac-sha2-512-etm@openssh.com algorithms. The deprecated hmac-sha1 or hmac-md5 algorithms are available but not enabled by default. Many older SSH server installations still use hmac-sha1 as the main accepted MAC algorithm. To enable this, use the following options parameter:

options => [ "MACs +hmac-sha1" ]

因此，要么将服务器配置为不使用 hmac-sha1进行完整性检查，要么告诉您的脚本接受 hmac-sha1。