Package: openssh-client
Version: 1:6.6p1-8
Severity: wishlist
File: /usr/bin/ssh
Examining the case when friendly changes are made on the remote end
causing warnings on the local end, which the user wishes to stop, to get
things back to normal, here we see the user does as told ("remove with:")
$ ssh m.jidanni.org :
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
c8:45:22:87:5f:73:f4:20:e0:cd:f7:2d:b3:5c:19:4c.
Please contact your system administrator.
Add correct host key in /home/jidanni/.ssh/known_hosts to get rid of this
message.
Offending RSA key in /home/jidanni/.ssh/known_hosts:1
remove with: ssh-keygen -f "/home/jidanni/.ssh/known_hosts" -R m.jidanni.org
Password authentication is disabled to avoid man-in-the-middle attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle
attacks.
$ ssh-keygen -f "/home/jidanni/.ssh/known_hosts" -R m.jidanni.org
# Host m.jidanni.org found: line 1 type RSA
/home/jidanni/.ssh/known_hosts updated.
Original contents retained as /home/jidanni/.ssh/known_hosts.old
$ ssh m.jidanni.org :
Warning: Permanently added 'm.jidanni.org' (RSA) to the list of known hosts.
Warning: the RSA host key for 'm.jidanni.org' differs from the key for the IP
address '69.163.216.252'
Offending key for IP in /home/jidanni/.ssh/known_hosts:18
$ ssh m.jidanni.org :
Warning: the RSA host key for 'm.jidanni.org' differs from the key for the IP
address '69.163.216.252'
Offending key for IP in /home/jidanni/.ssh/known_hosts:18
Matching host key in /home/jidanni/.ssh/known_hosts:27
Thus without an additional message about what command to use to solve the
problem,
he is still stuck with the warnings.
Yes, experts will know what to do next:
$ ed /home/jidanni/.ssh/known_hosts
10662
18d
wq
10220
$ ssh m.jidanni.org :
Warning: Permanently added the RSA host key for IP address '69.163.216.252' to
the list of known hosts.
$ ssh m.jidanni.org :
$
But normal users still need a _second_ "remove with:" style hint!
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
