Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add an option to remove the host+IP fingerprints in the known_hosts #12

Open
samuel-phan opened this issue Jun 25, 2016 · 0 comments
Open

Comments

@samuel-phan
Copy link
Owner

When the remote machine has a different fingerprint, we got a warning:

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
06:72:55:97:47:f0:44:9f:05:31:92:3a:49:6b:8f:06.
Please contact your system administrator.

After removing the entry builder (name of my remove VM), by typing:

mssh-copy-id -R builder

I can connect typing:

ssh builder

But I got a message saying that the IP of builder 10.0.0.10 is offending:

The authenticity of host 'builder (10.0.0.10)' can't be established.
ECDSA key fingerprint is 34:ca:2f:60:41:61:1a:a3:7d:d5:30:fc:b3:e7:1f:a4.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'builder' (ECDSA) to the list of known hosts.
Warning: the ECDSA host key for 'builder' differs from the key for the IP address '10.0.0.10'
Offending key for IP in /home/piloupy/.ssh/known_hosts:29
Are you sure you want to continue connecting (yes/no)? yes

Add an option -I to resolve the IPs of the given hostname and remove the IPs as well from the known_hosts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant