I'm trying to test the order in which keys are tried. One of the system's users is using DSA, so I'm trying to test it as an option. I'm getting a
Bad key types.
$ ssh -vv -p 1522 firstname.lastname@example.org OpenSSH_7.1p1, OpenSSL 1.0.2d 9 Jul 2015 debug1: Reading configuration data /Users/jwalton/.ssh/config /Users/jwalton/.ssh/config line 2: Bad key types 'ssh-ed25519,ecdsa-sha2-nistp256,ssh-dsa,ssh-rsa'.
I narrowed it down to
ssh-dsa. According to
(its actually part of
sshd_config(5), but its listed as a new
ssh_config feature in the OpenSSH 7.0 release notes):
The -Q option of ssh(1) may be used to list supported key types.
However, I can't seem to get it to work:
riemann::~$ ssh -Q /usr/local/bin/ssh: option requires an argument -- Q riemann::~$ ssh -Q dsa Unsupported query "dsa" riemann::~$ ssh -Q ssh-dsa Unsupported query "ssh-dsa" riemann::~$ ssh -Q ed25529 Unsupported query "ed25529" riemann::~$ ssh -Q ssh-ed25529 Unsupported query "ssh-ed25529" riemann::~$ ssh -Q PubkeyAcceptedKeyTypes Unsupported query "PubkeyAcceptedKeyTypes"
How does one use the
ssh -Q option?
What is the key type for ssh-dsa?