I recently have created an instance and not SSH shows an error after update

0

Hi, I have created an instance with **aws lightsail ubuntu **and used these commands in the SSH client.

sudo apt update sudo apt upgrade

then installed cyberpanel to manage my websites.

But when I rechecked to open the aws SSH again, it shows an error CLIENT_UNAUTHORIZED [769]

I found various guides and article online but I am not a linux expert. Those people has not explained things in step by step way.

I am confused how I am gonna fix this now.

If you have some video fixing this with external SSH client like putty, that would be very helpful.

Thanks!

質問済み 10ヶ月前351ビュー
1回答
3
承認された回答

I have also faced this quite a few times and here is how you can overcome this:

Here is how you would do step by step:

   vi /etc/ssh/sshd_config

Press "i" to insert lines and add following two lines to this file:

   TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pub  

   CASignatureAlgorithms +ssh-rsa

Press Esc button and type wq and hit enter to save the changes to file.

Restart ssh service by one of the following ways:

    systemctl restart ssh

Or

   sudo service sshd restart

   sudo /etc/init.d/ssh restart

This should have fixed the issue and if you are still not able to ssh, then your public key file might have been corrupted and you'd need to run following command:

    cat /var/lib/cloud/instance/user-data.txt | grep ^ssh-rsa > /etc/ssh/lightsail_instance_ca.pub

When I faced this error, above steps worked for me but I also came across another approach and I tried that too with success, so I'm mentioning that here too:

  1. Take snapshot of server

  2. Create a new lightsail server from that snapshot

  3. In the server creation process, you can reset PEM file(optional). Use the following start up script, which would be executed when server would be started:

         sudo sh -c "cat /var/lib/cloud/instance/user-data.txt | grep ^ssh-rsa > /etc/ssh/lightsail_instance_ca.pub"
         sudo sh -c "echo >> /etc/ssh/sshd_config" 
         sudo sh -c "echo 'TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pub' >> /etc/ssh/sshd_config"
         sudo sh -c "echo 'CASignatureAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa' >> /etc/ssh/sshd_config"
         sudo systemctl restart sshd
    
profile pictureAWS
エキスパート
回答済み 10ヶ月前
profile picture
エキスパート
レビュー済み 2ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ