I recently have created an instance and not SSH shows an error after update

0

Hi, I have created an instance with **aws lightsail ubuntu **and used these commands in the SSH client.

sudo apt update sudo apt upgrade

then installed cyberpanel to manage my websites.

But when I rechecked to open the aws SSH again, it shows an error CLIENT_UNAUTHORIZED [769]

I found various guides and article online but I am not a linux expert. Those people has not explained things in step by step way.

I am confused how I am gonna fix this now.

If you have some video fixing this with external SSH client like putty, that would be very helpful.

Thanks!

asked 10 months ago336 views
1 Answer
3
Accepted Answer

I have also faced this quite a few times and here is how you can overcome this:

Here is how you would do step by step:

   vi /etc/ssh/sshd_config

Press "i" to insert lines and add following two lines to this file:

   TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pub  

   CASignatureAlgorithms +ssh-rsa

Press Esc button and type wq and hit enter to save the changes to file.

Restart ssh service by one of the following ways:

    systemctl restart ssh

Or

   sudo service sshd restart

   sudo /etc/init.d/ssh restart

This should have fixed the issue and if you are still not able to ssh, then your public key file might have been corrupted and you'd need to run following command:

    cat /var/lib/cloud/instance/user-data.txt | grep ^ssh-rsa > /etc/ssh/lightsail_instance_ca.pub

When I faced this error, above steps worked for me but I also came across another approach and I tried that too with success, so I'm mentioning that here too:

  1. Take snapshot of server

  2. Create a new lightsail server from that snapshot

  3. In the server creation process, you can reset PEM file(optional). Use the following start up script, which would be executed when server would be started:

         sudo sh -c "cat /var/lib/cloud/instance/user-data.txt | grep ^ssh-rsa > /etc/ssh/lightsail_instance_ca.pub"
         sudo sh -c "echo >> /etc/ssh/sshd_config" 
         sudo sh -c "echo 'TrustedUserCAKeys /etc/ssh/lightsail_instance_ca.pub' >> /etc/ssh/sshd_config"
         sudo sh -c "echo 'CASignatureAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa' >> /etc/ssh/sshd_config"
         sudo systemctl restart sshd
    
profile pictureAWS
EXPERT
answered 10 months ago
profile picture
EXPERT
reviewed a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions