On 2022-11-11 11:50 am, Rogan Dawes wrote: > I was under the impression that the ssh protocol included a handshake step > where supported algorithms were exchanged, and keys that do not match are > eliminated?
For public key auth the client sends each public key it has to offer, the server sends a "key OK" message if it's accepted, and then the client sends its signature. So Dropbear on openwrt gets the ecdsa key offer and sends a failure response since it doesn't accept that ecdsa key type. Matt
