ssh使用开瓶器通过http代理失败

我试图通过使用开瓶器的HTTP代理和〜/ .ssh / config中的以下节点来SSH远程服务器:

Host target ProxyCommand corkscrew proxy 80 remote.host.ip 443 ~/.ssh/proxyauth 

哪里; “代理80”是HTTP代理的DNS名称和端口,我的SSH服务器被configuration为侦听remote.host.ip的端口443,并且proxyauth文件包含访问HTTP代理所需的“user:password”。

我在客户端得到以下信息:

 $ ssh target ssh_exchange_identification: Connection closed by remote host 

并在服务器上,在/var/log/auth.log我得到;

 Mar 12 13:16:32 hostname sshd[16029]: Did not receive identification string from xxxx 

它看起来好像SSH客户端(OpenSSH)不正确地启动协议,或者代理以某种方式破坏它,然后服务器closures连接。

我试过并消除的东西是;

  1. 使用〜/ .ssh / config ProxyCommand中的相同参数直接在客户机上运行corkscrew。 这工作,我看到服务器的SSH横幅广告协议和版本信息。 所以通过HTTP代理的基本连接工作,SSHD肯定是可及的(也可以通过查看服务器上的日志条目来certificate)。

  2. testing客户端的密钥对对同一台服务器,但从不需要代理的主机。 这工作正常,所以密钥对是好的。

  3. 增加SSH两端的日志logging,显示结果;

客户…

 $ ssh -vvv target OpenSSH_6.2p2, OpenSSL 1.0.1e-fips 11 Feb 2013 debug1: Reading configuration data /home/davisond/.ssh/config debug1: /home/davisond/.ssh/config line 3: Applying options for home debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 50: Applying options for * debug2: ssh_connect: needpriv 0 debug1: Executing proxy command: exec corkscrew proxy 80 remote.host.ip 443 ~/.ssh/proxyauth debug3: Incorrect RSA1 identifier debug3: Could not load "/home/davisond/.ssh/id_rsa" as a RSA1 public key debug1: permanently_drop_suid: 1000 debug1: identity file /home/davisond/.ssh/id_rsa type 1 debug1: identity file /home/davisond/.ssh/id_rsa-cert type -1 debug1: identity file /home/davisond/.ssh/id_dsa type -1 debug1: identity file /home/davisond/.ssh/id_dsa-cert type -1 debug1: identity file /home/davisond/.ssh/id_ecdsa type -1 debug1: identity file /home/davisond/.ssh/id_ecdsa-cert type -1 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_6.2 ssh_exchange_identification: Connection closed by remote host 

并在服务器上;

 Mar 12 13:23:49 hepburn sshd[20786]: debug1: Forked child 20997. Mar 12 13:23:49 hepburn sshd[20997]: Set /proc/self/oom_score_adj to 0 Mar 12 13:23:49 hepburn sshd[20997]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8 Mar 12 13:23:49 hepburn sshd[20997]: debug1: inetd sockets after dupping: 3, 3 Mar 12 13:23:49 hepburn sshd[20997]: Connection from xxxx port 22104 Mar 12 13:23:49 hepburn sshd[20997]: Did not receive identification string from xxxx 

任何人都可以提供关于从哪里去做这项工作的指针?