# SSH DSS Keys Dont Work **URL:** \ **Category:** Xfce\ **Created:** [July 24, 2024, 6:59am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426 "2024-07-24T06:59:54Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![pavlar](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pavlar/32/120146_2.png) [@pavlar](https://forum.endeavouros.com/u/pavlar)\ **Post date:** [July 24, 2024, 6:59am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/1 "2024-07-24T06:59:54Z")
I add HostKeyAlgorithms +ssh-rsa,ssh-dss to /etc/ssh/ssh\_config and after using ssh I see /etc/ssh/ssh\_config line 50: Bad key types ‘+ssh-dss’. /etc/ssh/ssh\_config: terminating, 1 bad configuration options In Mintlinux XFCE this algorithm works well but I put it on sshd\_config. Here sshd\_config does not react in any way to this line.-Unable to negotiate with xxx.xxx.xxx.xxx port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss ---
**Author:** ![mbod](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/mbod/32/16833_2.png) [@mbod](https://forum.endeavouros.com/u/mbod)\ **Post date:** [July 24, 2024, 7:13am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/2 "2024-07-24T07:13:02Z")
> [@pavlar](#): > > ssh-dss > **[Arch Linux - News: openssh-7.0p1 deprecates ssh-dss keys](https://archlinux.org/news/openssh-70p1-deprecates-ssh-dss-keys/)** This was already in 2015. Not sure what Mint is doing here. ---
**Author:** ![pavlar](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pavlar/32/120146_2.png) [@pavlar](https://forum.endeavouros.com/u/pavlar)\ **Post date:** [July 24, 2024, 7:16am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/3 "2024-07-24T07:16:50Z")
If you want, I can go to Mint and show that this line works there.I use it to ssh-connect to a server on CentOS 6 ---
**Author:** ![mbod](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/mbod/32/16833_2.png) [@mbod](https://forum.endeavouros.com/u/mbod)\ **Post date:** [July 24, 2024, 7:18am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/4 "2024-07-24T07:18:50Z")
It doesnt matter what Mint is doing. In Arch, since 2015, dss keys are deprecated. I have to be more precise: DSS keys are deprecated upstream: [https://lists.mindrot.org/pipermail/openssh-unix-announce/2015-August/000122.html](https://lists.mindrot.org/pipermail/openssh-unix-announce/2015-August/000122.html) ---
**Author:** ![pavlar](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pavlar/32/120146_2.png) [@pavlar](https://forum.endeavouros.com/u/pavlar)\ **Post date:** [July 24, 2024, 7:20am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/5 "2024-07-24T07:20:24Z")
Thank you. So I’ll work on Mint Linux uname -a Linux pal 5.15.0-116-generic #126-Ubuntu SMP Mon Jul 1 10:14:24 UTC 2024 x86\_64 [![](https://i.ibb.co/7y13mKM/2024-07-24-10-31-27.png)](https://ibb.co/7y13mKM) ---
**Author:** ![mbod](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/mbod/32/16833_2.png) [@mbod](https://forum.endeavouros.com/u/mbod)\ **Post date:** [July 24, 2024, 7:36am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/6 "2024-07-24T07:36:14Z")
> [@pavlar](#): > > Thank you. So I’ll work on Mint Linux Please keep in mind that DSS keys have been deprecated for a reason (security vulnerabilties). It is very easy to create new keys. Why dont you just do that? ---
**Author:** ![pavlar](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pavlar/32/120146_2.png) [@pavlar](https://forum.endeavouros.com/u/pavlar)\ **Post date:** [July 24, 2024, 7:39am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/7 "2024-07-24T07:39:24Z")
Because I need to communicate with a server on SentOS 6 that only works with this algorithm ---
**Author:** ![pavlar](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pavlar/32/120146_2.png) [@pavlar](https://forum.endeavouros.com/u/pavlar)\ **Post date:** [July 24, 2024, 7:43am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/8 "2024-07-24T07:43:43Z")
This server on СentOS6 manages a computing cluster that has been running for 12 years continuously without switching off, and rebuilding a computing cluster with calculation data for 12 years is a big hassle. ---
**Author:** ![I0F](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/i0f/32/47182_2.png) [@I0F](https://forum.endeavouros.com/u/I0F)\ **Post date:** [July 24, 2024, 7:58am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/9 "2024-07-24T07:58:26Z")
It seems that arch isn’t the way to go then, because arch doesn’t support that anymore. ---
**Author:** ![mbod](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/mbod/32/16833_2.png) [@mbod](https://forum.endeavouros.com/u/mbod)\ **Post date:** [July 24, 2024, 8:06am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/10 "2024-07-24T08:06:59Z")
> [@pavlar](#): > > Because I need to communicate with a server on SentOS 6 that only works with this algorithm As far as I know Centos6 also supports RSA keys. ---
**Author:** ![DromundKaas](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/dromundkaas/32/24712_2.png) [@DromundKaas](https://forum.endeavouros.com/u/DromundKaas)\ **Post date:** [July 24, 2024, 8:41am UTC](https://forum.endeavouros.com/t/ssh-dss-keys-dont-work/58426/11 "2024-07-24T08:41:24Z")
You could try enabling secure SSH key exchange and MAC algorithms on the server. If you have the option to connect to the server any other way, [look at the supported algorithms](https://www.howtouselinux.com/post/check-supported-mac-algorithms-in-ssh-client-and-server) and configure the sshd to support one of those.