In your own home directory there should be a directory .ssh/ ; in that
directory you may already have a file called config. If it doedsn't exist,
create it with usual permissions.
In that file create the lines:
Host 192.168.1.9
StrictHostKeyChecking no
Next time you say 'ssh 192.168.1.9' your ssh command should read the config
and override the strict host key check .
This only affects the behaviour of your own ssh client , when connecting to
this IP address. So it should not impact your overall security.
best regards,
웃
Victor Churchill,
Netley Abbey, Southampton
07970 844083
On Fri, 6 Sep 2019 at 14:04, Hamish MB <hamis...@live.co.uk> wrote:
> I'm sure there are other people who can give a fuller explanation, but:
>
> Q1: The software creates this key. Each key is unique for each pi.
>
> Q2 & Q3: I don't know, but you probably don't want to do this for
> security reasons - the check is used to determine if the host is who it
> says it is. The error arises because they all use the same IP address -
> your computer can't distinguish between them so it appears the identity
> is changing.
>
> The solution is probably for them to have different IP addresses I think.
>
> Hope this helps,
>
> Hamish
>
> On 06/09/2019 13:51, PeterMerchant via dorset wrote:
> > Many times when I try to log-in to a Raspberry Pi via SSH I get the
> > following message:
> >
> >
> > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
> > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> > Someone could be eavesdropping on you right now (man-in-the-middle
> > attack)!
> > It is also possible that a host key has just been changed.
> > The fingerprint for the ECDSA key sent by the remote host is
> > SHA256:8ayjxAjx4Kar+HObByJH0JBPCfWwAGHytmiNKGxUl90.
> > Please contact your system administrator.
> > Add correct host key in /home/peterm/.ssh/known_hosts to get rid of
> > this message.
> > Offending ECDSA key in /home/peterm/.ssh/known_hosts:8
> > remove with:
> > ssh-keygen -f "/home/peterm/.ssh/known_hosts" -R "192.168.1.9"
> > ECDSA host key for 192.168.1.9 has changed and you have requested
> > strict checking.
> > Host key verification failed.
> >
> > Q1: What is creating this Host key, Is it a combination of the
> > hardware and the Raspbian OS?
> >
> > Q2: How do I change the system so that it is not 'strict checking'?
> > and [Q3] do I want to as this PC is also used for Internet access?
> >
> > All of my Pis use the same IP address for Ethernet connection, and a
> > different fixed IP address for wireless connection. I only ever
> > connect one at a time.
> >
> > Thanks for your help.
> >
> > Peter M.
> >
> >
> --
> Next meeting: BEC, Bournemouth, Tuesday, 2019-10-01 20:00
> Check to whom you are replying
> Meetings, mailing list, IRC, ... http://dorset.lug.org.uk/
> New thread, don't hijack: mailto:dorset@mailman.lug.org.uk
>
--
Next meeting: BEC, Bournemouth, Tuesday, 2019-10-01 20:00
Check to whom you are replying
Meetings, mailing list, IRC, ... http://dorset.lug.org.uk/
New thread, don't hijack: mailto:dorset@mailman.lug.org.uk
