< All Topics

No matching host key found

Hosted~FTP~ host key is ssh-dss. Users trying to connect to Hosted~FTP~ using sftp from the command line or terminal and have the latest openssh installed are likely to get this error “Unable to negotiate with xx.xxx.xxx.xx port 22: no matching host key type found. Their offer: ssh-dss”.The reason for this error is because OpenSSH’s new update disables ssh-dss. In the OpenSSH release note, it states the changes since OpennSSH 6.9 Support for ssh-dss, ssh-dss-cert-* host and user keys are disabled. By default at run-time.
This does not mean it cannot be used, you just have to re-enable it.

To re enable it, please follow the step below:

1.Open your terminal and type navigate to the etc/ssh folder by typing cd /etc/ssh
2. Once in the etc/ssh directory, you need to type sudo nano ssh_config.

  • “Sudo” gives your user a superuser privilege, giving the user the right to work in the etc/ssh directory
  • Nano is a ncurses-based editor which allows you modify the file specified after the command
    host key

3. The terminal might ask you for your password
4. Once you are authenticated, the file will open for editing
5. Scroll down to the end of the page and insert the following command:  on OsX (mac) HostkeyAlgorithms ssh-dss   (make sure you are not adding the command with an indent.)
6. Once you insert the code, hit control (ctrl) +x
7. It will ask you to verify the changes with Y(yes), N(no) or C(cancel)
8. Type Y and hit enter
9. Once you do, try to connect
10. You should get a message saying “Warning: Permanently added the DSA host key for IP address ‘xx.xxx.xxx.xx’ to the list of known hosts.
To connect enter sftp username@ftp.hostedftp.com

Below is our server host key fingerprint

RSA hostkey: bc9d86202d681a35bb9d5c41f4eb694c
DSA hostkey: ce2f1c9f870af0b33183995780aee9b6

Related Links
Using the command line to connect to HostedFTP
Understanding the FTP commands in the command line
Troubleshooting FTP in the command line and common errors.

Table of Contents