I'm sure there are other people who can give a fuller explanation, but:

Q1: The software creates this key. Each key is unique for each pi.

Q2 & Q3: I don't know, but you probably don't want to do this for
security reasons - the check is used to determine if the host is who it
says it is. The error arises because they all use the same IP address -
your computer can't distinguish between them so it appears the identity
is changing.

The solution is probably for them to have different IP addresses I think.

Hope this helps,

Hamish

On 06/09/2019 13:51, PeterMerchant via dorset wrote:
> Many times when I try to log-in to a Raspberry Pi via SSH I get the
> following message:
>
>
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle
> attack)!
> It is also possible that a host key has just been changed.
> The fingerprint for the ECDSA key sent by the remote host is
> SHA256:8ayjxAjx4Kar+HObByJH0JBPCfWwAGHytmiNKGxUl90.
> Please contact your system administrator.
> Add correct host key in /home/peterm/.ssh/known_hosts to get rid of
> this message.
> Offending ECDSA key in /home/peterm/.ssh/known_hosts:8
>   remove with:
>   ssh-keygen -f "/home/peterm/.ssh/known_hosts" -R "192.168.1.9"
> ECDSA host key for 192.168.1.9 has changed and you have requested
> strict checking.
> Host key verification failed.
>
> Q1: What is creating this Host key, Is it a combination of the
> hardware and the Raspbian OS?
>
> Q2: How do I change the system so that it is not 'strict checking'?
> and [Q3] do I want to as this PC is also used for Internet access?
>
> All of my Pis use the same IP address for Ethernet connection, and a
> different fixed IP address for wireless connection. I only ever
> connect one at a time.
>
> Thanks for your help.
>
> Peter M.
>
>
-- 
  Next meeting: BEC, Bournemouth, Tuesday, 2019-10-01 20:00
  Check to whom you are replying
  Meetings, mailing list, IRC, ...  http://dorset.lug.org.uk/
  New thread, don't hijack:  mailto:dorset@mailman.lug.org.uk

Reply via email to