Questions tagged [ssh-host-key]

The SSH host key is an identifier of a SSH / SFTP server.

The SSH host key is a fingerprint to prove the identity of the SSH / SFTP server you are connecting to.

53 questions
0
votes
1 answer

Server SSH fingerprint verification when authenticating with private key

Assume I passed on my public key to a service provider for them to set up a "new" server and configure it for private key authentication (instead of root password). Is the server fingerprint verification during my initial connection to the server…
0
votes
1 answer

Remote host identification has changed - How do I know if it's an attack or not?

When connecting using SSH to a shared hosting provider I'm regularly using, I got this message today: WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you…
Magnus
  • 213
  • 1
  • 5
0
votes
2 answers

changing defaults when generating new SSH server keys

On Debian, I can generate new SSH server keys: rm /etc/ssh/ssh_host_* dpkg-reconfigure openssh-server but that will generate the keys with default values, ie 2048 RSA key. What is happening under the hood, when I execute dpkg-reconfigure…
Martin Vegter
  • 1,826
  • 4
  • 27
  • 39
0
votes
0 answers

SSH (ssh_auth_list) authentication failing from windows to linux

Bit new in ssh and have an issue in understanding. I got a code which uses ssh_auth_list routine as below. method = ssh_auth_list(session); printf(" %d " , method); I am using a ssh library and when I am calling this routine.I am seeing return…
0
votes
1 answer

SSH - request public key instead of fingerprint?

When initiating a connection by SSH to a server not known in the hosts file, it's common to get a message such as the following: The authenticity of host '[IP address]' can't be established. RSA key fingerprint is [checksum]. Are you sure you want…
SauceCode
  • 628
  • 6
  • 16
0
votes
2 answers

SFTP server: should we prevent SSH host key changes?

We host a SFTP server and we encourage our customers to check the SSH host key when connecting. I was always under the impression that the SSH host key was fixed - it would only change when reinstalling the OS. But in the past the SSH host key was…
Julian
  • 516
  • 6
  • 18
-1
votes
1 answer

Got access to .ssh folder on server - how to SSH into it?

Doing a challenge at work. Managed to get netcat to connect to a server. In /home/SomeUser there is a .ssh folder with the usual suspects: authorized_hosts authorized_keys id_rsa id_rsa.pub known_hosts known_hosts.back My question is, now that I…
pee2pee
  • 277
  • 3
  • 18
-2
votes
2 answers

Why should we only keep the private key secret, why not the public key?

If I am not wrong, both private key and public key are the same since communication is possible only if both keys are matching. So, why we should only keep the private key secret, why not public key? When I generate a key by ssh-keygen command, and…
Sann
  • 33
  • 3
1 2 3
4