pemファイルでssh接続したい Remote Development

Question

環境　mac Monterey 12.3
Vscode　

vscode　Remote Developmentから
pemファイルでssh接続をやっていますが、
"Could not establish connection to hoge"が出てしまいます。

わからないこと

以前も似たような状況でpemファイルを使って接続しようとしても出来ず
拡張子をcerに修正したら接続できたことがあるのですが
pemファイルとcerファイルの差がよくわかってません。

パスの指定方法や、置いてある場所も問題ないはずなのですが。
どなたか教えていただけると幸いです。

Comments

[CHERRY]

SSH の鍵ファイルはどのように作成されたのでしょうか。

[dandada]

SSHの鍵は渡されたものです。自分で作ってないのですが、そもそもそれ自体が間違ってるのでしょうか。

[y_waiwai]

それ自体が間違っていないってことは確認できるんでしょうか

[dandada]

間違ってないようです。

[y_waiwai]

どうやってそれを確認したんでしょうか

[68user]

画面下部の OUTPUT? などにログ出てないですか。

[melian]

コマンドラインで、
ssh -vvv -i PEMファイルのパス -l ユーザ名 ホスト名
を実行するとデバッグメッセージが表示されますので、それを確認してみてはどうでしょうか。

[dandada]

ありがとうございます。確認してみます！

[dandada]

これがlog？なのでしょうか。

[18:26:44.236] Log Level: 2
[18:26:44.237] remote-ssh@xxx
[18:26:44.237] darwin x64
[18:26:44.242] SSH Resolver called for "ssh-remote+xxxxxxx", attempt 1
[18:26:44.242] "remote.SSH.useLocalServer": true
[18:26:44.243] "remote.SSH.path": undefined
[18:26:44.243] "remote.SSH.configFile": undefined
[18:26:44.243] "remote.SSH.useFlock": true
[18:26:44.243] "remote.SSH.lockfilesInTmp": false
[18:26:44.244] "remote.SSH.localServerDownload": auto
[18:26:44.244] "remote.SSH.remoteServerListenOnSocket": false
[18:26:44.244] "remote.SSH.showLoginTerminal": false
[18:26:44.246] "remote.SSH.defaultExtensions": []
[18:26:44.247] "remote.SSH.loglevel": 2
[18:26:44.247] "remote.SSH.enableDynamicForwarding": true
[18:26:44.247] "remote.SSH.enableRemoteCommand": false
[18:26:44.247] "remote.SSH.serverPickPortsFromRange": {}
[18:26:44.247] "remote.SSH.serverInstallPath": {}
[18:26:44.259] SSH Resolver called for host: xxxxxxx
[18:26:44.259] Setting up SSH remote "xxxxxxx"
[18:26:44.262] Acquiring local install lock: /var/folders/b_/xxxxxxxx/T/vscode-remote-ssh-xxxxxxxx-install.lock
[18:26:44.263] Looking for existing server data file at /Users/xxxxx/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-ssh/vscode-ssh-host-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.0/data.json
[18:26:44.264] Using commit id "exxxxxxxxxxxxxxxxxxxx" and quality "stable" for server
[18:26:44.267] Install and start server if needed
[18:26:44.270] PATH: /usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/Library/Apple/usr/bin
[18:26:44.270] Checking ssh with "ssh -V"
[18:26:44.274] > OpenSSH_8.6p1, LibreSSL 3.3.5

結局よくわからないです。

[melian]

その後にもメッセージがあるかと思います。エラーが発生している部分はどうなっていますでしょうか？

[dandada]

[18:26:44.276] askpass server listening on /var/folders/b_/ykc8h1g56bgg6w8j_qkmkcv40000gn/T/vscode-ssh-askpass-xxxxxxxxxxxxxxxxxxxxx.sock
[18:26:44.276] Spawning local server with {"serverId":1,"ipcHandlePath":"/var/folders/b_/xxxxxxxxxxxx_xxxxxxxxxxx/T/vscode-ssh-askpass-xxxxxxxxxxxxxxxxxxxxxxxxx.sock","sshCommand":"ssh","sshArgs":["-v","-T","-D","xxxxx","-o","ConnectTimeout=15","xxxxxxxxxx"],"serverDataFolderName":".vscode-server","dataFilePath":"/Users/xxxxxxxx/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-ssh/vscode-ssh-host-5c54dc2a-xxxxxxxxxxxxxxxxxxxxxxxxx/data.json"}
[18:26:44.277] Local server env: {"SSH_AUTH_SOCK":"/private/tmp/com.apple.launchd.VDcSu6XNOx/Listeners","SHELL":"/usr/local/bin/zsh","DISPLAY":"1","ELECTRON_RUN_AS_NODE":"1","SSH_ASKPASS":"/Users/xxxxxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-xxxxxx/out/local-server/askpass.sh","VSCODE_SSH_ASKPASS_NODE":"/Applications/Visual Studio Code.app/Contents/MacOS/Electron","VSCODE_SSH_ASKPASS_EXTRA_ARGS":"--ms-enable-electron-run-as-node","VSCODE_SSH_ASKPASS_MAIN":"/Users/xxxxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/askpass-main.js","VSCODE_SSH_ASKPASS_HANDLE":"/var/folders/b_/xxxxxxxxxxxxxxxxxxxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxgn/T/vscode-ssh-askpass-xxxxxxxxxxxxxxxxxxxxxxxxx.sock"}
[18:26:44.277] Spawned xxxxx
[18:26:44.392] > local-server-1> Spawned ssh, pid=xxxxx
[18:26:44.395] stderr> OpenSSH_8.6p1, LibreSSL 3.3.5
[18:26:44.465] stderr> debug1: Server host key: ssh-edxxxxxSHA256:Ux/osreDHrrJvTXQybnlz9+PY6i/nI/mFjApVfXhSq0
[18:26:44.697] stderr> Connection closed by xxxxxxxxxxxxx port 22
[18:26:44.700] > local-server-1> ssh child died, shutting down
[18:26:44.704] Local server exit: 0
[18:26:44.704] Received install output: local-server-1> Spawned ssh, pid=xxxxx
OpenSSH_8.6p1, LibreSSL 3.3.5
debug1: Server host key: ssh-edxxxxxxxxxxx:Ux/osreDxxxxxxxxxxxxxxxx+PY6i/nI/xxxxxxxxxxxx
Connection closed by xxxxxxxxxxxxxxxxxxxxxxxxx port 22
local-server-1> ssh child died, shutting down

[18:26:44.705] Failed to parse remote port from server output
[18:26:44.706] Resolver error: Error:
at Function.Create (/Users/xxxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxx1)
at Object.t.handleInstallOutput (/Users/xxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxxx)
at Object.e [as tryInstallWithLocalServer] (/Users/xxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxxx)
at processTicksAndRejections (node:internal/process/task_queues:96:5)
at async /Users/xxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxxxx
at async Object.t.withShowDetailsEvent (/Users/xxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxxx)
at async /Users/xxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxxx
at async b (/Users/xxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxxx)
at async Object.t.resolveWithLocalServer (/Users/xxxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxxx)
at async Object.t.resolve (/Users/xxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxxx)
at async /Users/xxxxxx/.vscode/extensions/ms-vscode-remote.remote-ssh-0.78.0/out/extension.js:1:xxxxxx
[18:26:44.711] ------

これで良いんでしょうか。

[68user]

いきなり先方から切られているように見えますが、なんでしょうねぇ。
ssh サーバ側で IPアドレス制限してたりしませんかね。

[68user]

あと vscode 上ではなく、
> ssh -vvv -i PEMファイルのパス -l ユーザ名 ホスト名
もやってみてください。

[dandada]

debug1: Reading configuration data /Users/xxx/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files
debug1: /etc/ssh/ssh_config line 54: Applying options for *
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/xxx/.ssh/known_hosts'
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/xxx/.ssh/known_hosts2'
debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
debug1: Connecting to xxx port 22.
ssh: Could not resolve hostname xxx: nodename nor servname provided, or not known

これでググってみましたが、何が理由なのかわかりませんでした。
わからなすぎてほんと申し訳ないです。

[68user]

ホスト名 xxx が名前解決できないと言ってますが、正しいホスト名なんでしょうか。

[dandada]

こちらでいかがでしょうか。

Warning: Identity file Users/xxxxxx/.ssh/key_file/xxxxxx.pem not accessible: No such file or directory.
OpenSSH_8.6p1, LibreSSL 3.3.5
debug1: Reading configuration data /Users/xxxxxx/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files
debug1: /etc/ssh/ssh_config line 54: Applying options for *
debug2: resolve_canonicalize: hostname xxxxxx is address
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/xxxxxx/.ssh/known_hosts'
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/xxxxxx/.ssh/known_hosts2'
debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
debug3: ssh_connect_direct: entering
debug1: Connecting to xxxxxx [xxxxxx] port XX
debug3: set_sock_tos: set socket 3 IP_TOS 0x48
debug1: Connection established.
debug1: identity file /Users/xxxxxx/.ssh/id_rsa type 0
debug1: identity file /Users/xxxxxx/.ssh/id_rsa-cert type -1
debug1: identity file /Users/xxxxxx/.ssh/id_dsa type -1
debug1: identity file /Users/xxxxxx/.ssh/id_dsa-cert type -1
debug1: identity file /Users/xxxxxx/.ssh/id_ecdsa type -1
debug1: identity file /Users/xxxxxx/.ssh/id_ecdsa-cert type -1
debug1: identity file /Users/xxxxxx/.ssh/id_ecdsa_sk type -1
debug1: identity file /Users/xxxxxx/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /Users/xxxxxx/.ssh/id_ed25519 type -1
debug1: identity file /Users/xxxxxx/.ssh/id_ed25519-cert type -1
debug1: identity file /Users/xxxxxx/.ssh/id_ed25519_sk type -1
debug1: identity file /Users/xxxxxx/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /Users/xxxxxx/.ssh/id_xmss type -1
debug1: identity file /Users/xxxxxx/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.6
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
debug1: compat_banner: match: OpenSSH_7.6p1 Ubuntu-4ubuntu0.3 pat OpenSSH_7.0*,OpenSSH_7.1*,OpenSSH_7.2*,OpenSSH_7.3*,OpenSSH_7.4*,OpenSSH_7.5*,OpenSSH_7.6*,OpenSSH_7.7* compat 0x04000002
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to xxxxxxxxxx as 'xxxxx'
debug3: record_hostkey: found key type ED25519 in file /Users/xxxxxx/.ssh/known_hosts:2
debug3: record_hostkey: found key type RSA in file /Users/xxxxxx/.ssh/known_hosts:3
debug3: record_hostkey: found key type ECDSA in file /Users/xxxxxx/.ssh/known_hosts:4
debug3: load_hostkeys_file: loaded 3 keys from xxxxxx
debug1: load_hostkeys: fopen /Users/xxxxxx/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug3: order_hostkeyalgs: have matching best-preference key type [e-mail], using HostkeyAlgorithms verbatim
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[e-mail],[e-mail],rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: [e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail]
debug2: ciphers stoc: [e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail]
debug2: MACs ctos: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,[e-mail],zlib
debug2: compression stoc: none,[e-mail],zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
debug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
debug2: ciphers ctos: [e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail]
debug2: ciphers stoc: [e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail]
debug2: MACs ctos: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,[e-mail]
debug2: compression stoc: none,[e-mail]
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ssh-ed25519
debug1: kex: server->client cipher: [e-mail] MAC: <implicit> compression: none
debug1: kex: client->server cipher: [e-mail] MAC: <implicit> compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: SSH2_MSG_KEX_ECDH_REPLY received
debug1: Server host key: ssh-ed25519 SHA256:Ux/osreDHrrJvTXQybnlz9+PY6i/nI/mFjApVfXhSq0
debug3: record_hostkey: found key type ED25519 in file /Users/xxxxxx/.ssh/known_hosts:2
debug3: record_hostkey: found key type RSA in file /Users/xxxxxx/.ssh/known_hosts:3
debug3: record_hostkey: found key type ECDSA in file /Users/xxxxxx/.ssh/known_hosts:4
debug3: load_hostkeys_file: loaded 3 keys from xxxxxxxxxxxxxx
debug1: load_hostkeys: fopen /Users/xxxxxx/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: Host 'xxxxxxxxxxxxxx' is known and matches the ED25519 host key.
debug1: Found key in /Users/xxxxxx/.ssh/known_hosts:2
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: set_newkeys: mode 0
debug1: rekey in after 134217728 blocks
debug1: Will attempt key: /Users/xxxxxxx/.ssh/id_rsa RSA SHA256:RxHILjpE1BpR3KkLLLmYewBuI3CjGgC1Dwy3W1tedk8
debug1: Will attempt key: /Users/xxxxxx/.ssh/id_dsa
debug1: Will attempt key: /Users/xxxxxx/.ssh/id_ecdsa
debug1: Will attempt key: /Users/xxxxxx/.ssh/id_ecdsa_sk
debug1: Will attempt key: /Users/xxxxxx/.ssh/id_ed25519
debug1: Will attempt key: /Users/xxxxxx/.ssh/id_ed25519_sk
debug1: Will attempt key: /Users/xxxxxx/.ssh/id_xmss
debug2: pubkey_prepare: done
debug3: send packet: type 5
debug3: receive packet: type 7
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<xxxxxx>
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /Users/xxxxxx/.ssh/id_rsa RSA SHA256:xxxxxx
debug3: send packet: type 50
debug2: we sent a publickey packet, wait for reply
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug1: Trying private key: /Users/xxxxxx/.ssh/id_dsa
debug3: no such identity: /Users/xxxxxx/.ssh/id_dsa: No such file or directory
debug1: Trying private key: /Users/xxxxxx/.ssh/id_ecdsa
debug3: no such identity: /Users/xxxxxx/.ssh/id_ecdsa: No such file or directory
debug1: Trying private key: /Users/xxxxxx/.ssh/id_ecdsa_sk
debug3: no such identity: /Users/xxxxxx/.ssh/id_ecdsa_sk: No such file or directory
debug1: Trying private key: /Users/xxxxxx/.ssh/id_ed25519
debug3: no such identity: /Users/xxxxxx/.ssh/id_ed25519: No such file or directory
debug1: Trying private key: /Users/xxxxxx/.ssh/id_ed25519_sk
debug3: no such identity: /Users/xxxxxx/.ssh/id_ed25519_sk: No such file or directory
debug1: Trying private key: /Users/xxxxxx/.ssh/id_xmss
debug3: no such identity: /Users/xxxxxx/.ssh/id_xmss: No such file or directory
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
ubuntu@xxxxxxxxxx: Permission denied (publickey).

[68user]

これどういうコマンドを打った結果ですか?
/Users/xxxxxx/.ssh/id_rsa このファイルは存在し、これがもらったファイルということですか?
receive packet: type 51 ということは要は認証失敗ということです。
これでダメなら vscode からやってもダメです。
先方管理者への確認がよいのではないでしょうか。

Answer 1

ご返信遅くなってしまい、大変申し訳ありませんでした。

もう一度、全て見直しましたが、IPアドレスの表記の方法が間違っていました。@を付けてHOST名を指定していたのが接続できない原因でした。68user様には色々ご指導いただきましたので、ベストアンサー様とさせて頂きたいです。本当にありがとうございました。

Answer 2

google翻訳
"hogeへの接続を確立できませんでした"

hogeの接続先が存在しないという話なんでは