无法使用 SSH 密钥克隆 Gitlab 私有存储库。密钥身份验证无效。

4

我有一个默认密钥对存储在.ssh文件夹下,并已将id_rsa.pub添加到https://gitlab.com/profile/keys,但仍无法使用此密钥访问GitLab。

ssh -vT git@gitlab.com

无法登录:

$ ssh -vT git@gitlab.com
OpenSSH_7.9p1, LibreSSL 2.7.3
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 48: Applying options for *
debug1: Connecting to gitlab.com [35.231.145.151] port 22.
debug1: Connection established.
debug1: identity file /Users/denysobukhov/.ssh/id_rsa type 0
debug1: identity file /Users/denysobukhov/.ssh/id_rsa-cert type -1
debug1: identity file /Users/denysobukhov/.ssh/id_dsa type -1
debug1: identity file /Users/denysobukhov/.ssh/id_dsa-cert type -1
debug1: identity file /Users/denysobukhov/.ssh/id_ecdsa type -1
debug1: identity file /Users/denysobukhov/.ssh/id_ecdsa-cert type -1
debug1: identity file /Users/denysobukhov/.ssh/id_ed25519 type -1
debug1: identity file /Users/denysobukhov/.ssh/id_ed25519-cert type -1
debug1: identity file /Users/denysobukhov/.ssh/id_xmss type -1
debug1: identity file /Users/denysobukhov/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.9
debug1: Remote protocol version 2.0, remote software version ROSSSH
debug1: no match: ROSSSH
debug1: Authenticating to gitlab.com:22 as 'git'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: diffie-hellman-group-exchange-sha256
debug1: kex: host key algorithm: ssh-rsa
debug1: kex: server->client cipher: aes128-ctr MAC: hmac-sha1 compression: none
debug1: kex: client->server cipher: aes128-ctr MAC: hmac-sha1 compression: none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(2048<7680<8192) sent
debug1: got SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: got SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: ssh-rsa SHA256:pZaBIOeFjqundQMWm8JAamGIUe63cxi7G4ZTpGM5C+Y
debug1: Host 'gitlab.com' is known and matches the RSA host key.
debug1: Found key in /Users/denysobukhov/.ssh/known_hosts:19
debug1: rekey after 4294967296 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey after 4294967296 blocks
debug1: Will attempt key: /Users/denysobukhov/.ssh/id_rsa RSA SHA256:x3OEhLg/QPPUvr1f4IPo0+uHv8q73Da1TGjUnzD8FdQ
debug1: Will attempt key: /Users/denysobukhov/.ssh/id_dsa
debug1: Will attempt key: /Users/denysobukhov/.ssh/id_ecdsa
debug1: Will attempt key: /Users/denysobukhov/.ssh/id_ed25519
debug1: Will attempt key: /Users/denysobukhov/.ssh/id_xmss
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Offering public key: /Users/denysobukhov/.ssh/id_rsa RSA SHA256:x3OEhLg/QPPUvr1f4IPo0+uHv8q73Da1TGjUnzD8FdQ
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: /Users/denysobukhov/.ssh/id_dsa
debug1: Trying private key: /Users/denysobukhov/.ssh/id_ecdsa
debug1: Trying private key: /Users/denysobukhov/.ssh/id_ed25519
debug1: Trying private key: /Users/denysobukhov/.ssh/id_xmss
debug1: Next authentication method: password
git@gitlab.com's password:
debug1: Authentications that can continue: password
debug1: Next authentication method: password
Permission denied, please try again.
git@gitlab.com's password:

无法克隆

git clone git@gitlab.com:denysobukhov/myprj

$ git clone git@gitlab.com:denysobukhov/myprj
Cloning into 'myprj'...
git@gitlab.com's password:

我的配置

cat /etc/ssh/ssh_config

$ cat /etc/ssh/ssh_config
Host *
    SendEnv LANG LC_*

将以下内容添加到空的~/.ssh/config中并没有帮助:
Host gitlab.com
    Hostname gitlab.com
    PreferredAuthentications publickey
    IdentityFile ~/.ssh/id_rsa

我的钥匙为什么不管用?

2
根据调试跟踪,您的客户端向服务器提供了 .ssh/id_rsa,但服务器没有接受。这可能有几个原因。例如,您的 id_rsa.pub 文件可能与 id_rsa 文件不匹配,因此您使用了错误的公钥设置 github。 - Kenster
你可以执行 eval $(ssh-agent -s),然后执行 ssh-add ~/.ssh/id_rsa 再试一次吗?我记得这曾为我解决过类似问题。如果这样还不行,尝试删除你的RSA密钥(如果你没有用它做其他事情),然后按照这些说明重新开始创建一个新的密钥对。 - Anton
我不能删除这个密钥,因为我在其他服务中使用它。我创建了一个自定义的密钥:gitlab_id_rsa。我添加了它:ssh-add ~/.ssh/gitlab_id_rsa$ ssh-add -l 4096 SHA256:BU0W1JRLgxvBPyXSYZ7qphRelLAECdDyvlAJndR1+4k denys2@DENYSs-MacBook-Pro.local (RSA) 2048 SHA256:x3OEhLg/QPPUvr1f4IPo0+uHv8q73Da1TGjUnzD8FdQ denys@DENYSs-MacBook-Pro.local (RSA)更新了~/.ssh/configIdentityFile ~/.ssh/gitlab_id_rsa但没有解决问题。我的第二台电脑上也有同样的问题。 - Denis
2个回答

5

在通过谷歌搜索发现的情况下,我遇到了类似的问题,即在尝试从私有GitLab仓库推送/拉取时。

在设置SSH密钥之前,使用HTTPS克隆了git仓库,例如:https://gitlab.com/user/repo.git

为了在设置GitLab设置中的SSH密钥后仍然能够使用SSH身份验证进行拉取/推送,需要将远程URL更改为SSH版本git@gitlab.com:user/repo.git

git remote set-url origin git@gitlab.com:user/repo.git

(假设你的远程称为origin。)
这可能只是必要但不充分的,因为当它们本身不起作用时,我尝试了许多其他事情,而没有重置更改。

2

最终找到了解决方案:生成了一对新的ED25519 SSH密钥

ssh-keygen -t ed25519 -C "email@example.com"

并将以下内容添加到~/.ssh/config文件中:

Host gitlab.com
  Hostname altssh.gitlab.com
  User git
  Port 443
  PreferredAuthentications publickey

同样验证了~/.ssh/config修改是决定性的。

网页内容由stack overflow 提供, 点击上面的
可以查看英文原文,
原文链接