現象:啓動sshd服務時,雖看似服務啓動成功,但客戶端並不能鏈接上sshd服務器端。
以下:
點擊(此處)摺疊或打開服務器
- [root@aefe8007a17d ~]# /usr/sbin/sshd
- Could not load host key: /etc/ssh/ssh_host_rsa_key
- Could not load host key: /etc/ssh/ssh_host_ecdsa_key
- Could not load host key: /etc/ssh/ssh_host_ed25519_key
緣由:
1. 從提示信息看是sshd守護進程不能加載主機密鑰文件,由於找不到這些密鑰文件(配置文件/etc/ssh/sshd_config中已定義密鑰文件名與路徑);
2. 通常openssh服務正常安裝後,主機會自動生成相應的主機密鑰文件,但這裏因未知緣由並無完成這一步動做,致使沒法遠程ssh鏈接。
檢查密鑰文件是否存在(還有一種現象爲:密鑰文件存在,但文件大小爲0):dom
點擊(此處)摺疊或打開ssh
- [root@aefe8007a17d ~]# ll /etc/ssh/
- total 252
- -rw-r--r-- 1 root root 242153 Mar 21 22:18 moduli
- -rw-r--r-- 1 root root 2208 Mar 21 22:18 ssh_config
- -rw------- 1 root root 4361 Mar 21 22:18 sshd_config
從新生成主機密鑰文件:
1. 生成rsa_key (-t表示生成的密鑰所使用的加密類型;-f項後接要生成的密鑰文件名);ide
點擊(此處)摺疊或打開加密
- [root@aefe8007a17d ~]# ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
- Generating public/private rsa key pair.
- Enter passphrase (empty for no passphrase):
- Enter same passphrase again:
- Your identification has been saved in /etc/ssh/ssh_host_rsa_key.
- Your public key has been saved in /etc/ssh/ssh_host_rsa_key.pub.
- The key fingerprint is:
- 5e:2d:19:51:b1:e3:e0:60:65:53:e4:14:f8:d8:38:af root@aefe8007a17d
- The key's randomart image is:
- +--[ RSA 2048]----+
- | ==Bo |
- | o.= . |
- | o o=+ |
- | . o+*o. |
- | S =oo |
- | . . .. |
- | . . |
- | E |
- | |
- +-----------------+
- [root@aefe8007a17d ~]# ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key
-
2. 生成ecdsa_key;
點擊(此處)摺疊或打開進程
- [root@aefe8007a17d ~]# ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key
3. 生成ed25519_key。ci
點擊(此處)摺疊或打開it
- [root@aefe8007a17d ~]# ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key
再次檢查密鑰文件是否存在且合規,能夠看到已生成相應主機密鑰文件(實際上主機密鑰文件爲私鑰,.pub文件爲公鑰):io
點擊(此處)摺疊或打開服務器端
- [root@aefe8007a17d ~]# ll /etc/ssh/
- total 276
- -rw-r--r-- 1 root root 242153 Mar 21 22:18 moduli
- -rw-r--r-- 1 root root 2208 Mar 21 22:18 ssh_config
- -rw------- 1 root root 227 May 22 16:48 ssh_host_ecdsa_key
- -rw-r--r-- 1 root root 179 May 22 16:48 ssh_host_ecdsa_key.pub
- -rw------- 1 root root 411 May 22 16:48 ssh_host_ed25519_key
- -rw-r--r-- 1 root root 99 May 22 16:48 ssh_host_ed25519_key.pub
- -rw------- 1 root root 1679 May 22 16:48 ssh_host_rsa_key
- -rw-r--r-- 1 root root 399 May 22 16:48 ssh_host_rsa_key.pub
- -rw------- 1 root root 4361 Mar 21 22:18 sshd_config
此時客戶端可ssh鏈接上sshd服務器端:
點擊(此處)摺疊或打開
- [root@localhost ~]# ssh 172.17.0.2
- The authenticity of host '172.17.0.2 (172.17.0.2)' can't be established. ECDSA key fingerprint is 37:2a:69:46:c4:bd:92:b2:43:b4:cc:42:41:8e:12:2e. Are you sure you want to continue connecting (yes/no)?