After OpenSSL of the operating system is upgraded to the latest version, remote login to the ECS instance by using the ECS Terminal or SSH command fails.

Causes

This may be because SSH relies on certain features provided by an older version of OpenSSL. The upgraded OpenSSL version is incompatible with the installed SSH, preventing remote login to the ECS instance by using the ECS terminal or SSH command.

Solutions

You can upgrade SSH to the latest version to resolve the version incompatibility between OpenSSL and SSH.

Use VNC to log in to the target instance.

tip

If your ECS instance uses key pair login, we recommend that you reset it to password login. Learn more.

Check whether the SSH and OpenSSL versions are compatible.

Check based on the SSH version
Check based on system logs

ssh -V

If the following output is displayed, your SSH is incompatible with the upgraded OpenSSL version. We recommend that you upgrade SSH to the latest version according to the following instructions. Otherwise, we recommend that you submit a ticket to obtain technical support.

Execute the following command to upgrade openssh-server to the latest version.

CentOS, RHEL, Rocky Linux, and AlmaLinux series
Ubuntu and Debian series
SUSE and OpenSUSE series
Fedora series

yum install openssh-server -y

Execute the following command to restart the SSH service.

systemctl restart sshd

Use the ECS terminal or SSH command to check whether you can log in to the target instance as expected.

Last updated: 2026.06.18 17:49:52

Public security network record in Beijing: No. 11010802032137