Connection Detection Fails Due to Algorithm Mismatch

Symptom

When the Kunpeng DevKit is being installed, the server displays a message indicating that the algorithm does not match.

Possible Causes

• The algorithm on the client does not match that on the server.
• The SSHD version is too early to support the ECDSA configuration.

Procedure

1. Log in to the server as a common user and switch to the root user.
2. Run the vim /etc/ssh/sshd_config command to check whether any of the following algorithms is configured for each of the items:
   • KexAlgorithms: diffie-hellman-group-exchange-sha256
   • MACs: hmac-sha2-512,hmac-sha2-256,hmac-sha1
   • Ciphers: aes256-gcm,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr
   • HostKey: /etc/ssh/ssh_host_ecdsa_key
3. (Optional) If the problem persists, try either of the following methods:
   • Method 1: Install the Kunpeng DevKit by following instructions in Installing the Kunpeng DevKit.
   • Method 2: Upgrade the SSHD service and perform one-click deployment.