Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [hostkey]

16 questions
62
votes
6 answers

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ …
setatakahashi
  • 1,367
  • 2
  • 11
  • 15
20
votes
1 answer

ssh command line specify server host key fingerprint

Using ssh command line (OpenSSH), can I specify the server's host key fingerprint? This is possible with winscp.com using (e.g.) -hostkey="ssh-rsa 2048 AA:BB:CC...etc I have read the man page a couple times, I apologize if I've missed the obvious…
payo
  • 303
  • 1
  • 2
  • 5
15
votes
2 answers

Why does Google recommend removing SSH keys from GCE for security?

The below reference to Google documentation is no longer true. Google recommends removing SSH keys from GCE instance to secure SSH. That does not make any sense to me. The keys are there for a security, right? When I remove the keys, SSHD stops…
Martin Prikryl
  • 7,327
  • 2
  • 36
  • 71
12
votes
3 answers

SSH host key checking cannot disable when using proxy jump

I am trying to SSH through a jumpbox, but SSH seems to be intent on checking host keys for the jumpbox, even though I'm telling it not to, using the normal -o StrictHostKeyChecking=no -o UserKnownHostsFile=no command line options. If I SSH directly…
siride
  • 529
  • 2
  • 7
  • 18
9
votes
2 answers

SSH host key seems to be changing unexpectedly

I rolled out a new /etc/ssh/sshd_config with Puppet on an Ubuntu 12.04 test server. The config was exactly the same as the previous config, except it had removed the following line: HostKey /etc/ssh/ssh_host_ecdsa_key I noticed I was getting a lot…
Ben
  • 93
  • 1
  • 1
  • 5
5
votes
2 answers

What could cause an SFTP host key fingerprint mismatch?

A remote user has tried to connect to my SFTP/SSH server for the first time, using the "Transmit" client under Mac OS X, and has found that the host key fingerprint doesn't match the expected value. I have a screenshot of the displayed fingerprint…
oliver
  • 395
  • 1
  • 5
  • 18
4
votes
2 answers

SSH key and ip address

A co-worker keeps mentioning SSH keys being associates with an IP address but Im not sure what it exactly means. So i tried generating a SSH key and it had my host name at the end of the file. This discussion can up when we were talking about…
broun
  • 187
  • 2
  • 2
  • 8
4
votes
5 answers

How to allow SSH host keys on Linux (Fedora 10 & CentOS 5.2)

I'm trying to set up SSH host keys from our Mac OS X 10.5 Leopard Server-based central backup server to our two Linux servers running Fedora 10 and CentOS 5.2. The process we usually take works and puts the key in ~/.ssh/authorized_keys, but it…
morgant
  • 1,460
  • 6
  • 23
  • 33
2
votes
2 answers

Google cloud server ssh host key changed unexpectedly?

I have a Google cloud server that currently runs Ubuntu 16.04. I have not done much to it in years and it always ran great. Somehow or other, for the first time, it experienced downtime today of about 15 minutes. After I restarted it, ssh gives me…
Igor Chudov
  • 21
  • 1
2
votes
1 answer

autofs can't mount a remote dir with sshfs on the host with deprecated key algorithm

Here is my configuration: /etc/auto.master /mnt/10 /etc/auto.10 uid=0,gid=0,--ghost /etc/auto.10 root -fstype=fuse,allow_other,follow_symlinks,ssh_command=/etc/ssh/sshpass.10.sh :sshfs\#root@10.28.0.10\:/root Because the remote device is…
igoryonya
  • 185
  • 1
  • 2
  • 14
2
votes
1 answer

Known Hosts ECDSA Host Key Multiple Domains on One IP

Hello, world!, I have a VPS set up with multiple domain names pointing to it. Arbitrarily, I like to access it via SSH through the domain name I'm dealing with. So for example, if I'm doing something with example1.com, I'll log in with ssh…
Jonah
  • 169
  • 2
  • 9
1
vote
1 answer

Upgrade path for HostKeyAlgorithms

I'd like to change the default setting for HostKeyAlgorithms for all SSH connections to prefer ssh-ed25519 over ecdsa-sha2-nistp256. But I currently have ecdsa-sha2-nistp256 host keys for many hosts in my known_hosts file (about 70). When I connect…
Feuermurmel
  • 151
  • 1
  • 8
1
vote
0 answers

Warning: Remote host identification has changed (SSH)

Most likely someone did a server update last night, because when I try to do a rsync (from win 7) I get the message (short version): WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! It is possible that a host key has just been changed. The…
Steven
  • 275
  • 2
  • 9
  • 21
1
vote
1 answer

Host key changing during reboot

I have four Azure VM machines running Ubuntu 20.04.3 that I regularly shut down. Yesterday I shut them down, and early today I restarted them. Usually this presents no problems. Today, one of the machines started giving me the dreaded WARNING:…
blueFast
  • 4,000
  • 13
  • 36
  • 51
1
vote
1 answer

Adding a ssh host key for a server name to `known_hosts` idempotently?

ssh-keygen -R $HOSTNAME can remove the ssh host key(s) from one's known_hosts. Can I add a specific host key (for a hostname/ip) to a known_hosts in an idempotent way? I want to script ssh'ing into a server. This might be run by someone who has not…
Amandasaurus
  • 30,211
  • 62
  • 184
  • 246
1
2