[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#421308: openssh-client: "Offending key in /home/ross/.ssh/known_hosts:140" possible wording change



On Fri, 2007-04-27 at 20:54 +0100, Adam D. Barratt wrote:
> Hi,
> 
> On Fri, 2007-04-27 at 12:10 -0700, Ross Boylan wrote:
> > Package: openssh-client
> > Version: 1:4.3p2-9
> > Severity: normal
> > 
> > When trying to connect to a new system I got (with some obscuring)
> > $ ssh somewhere
> > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> [...]
> > Add correct host key in /home/ross/.ssh/known_hosts to get rid of this message.
> > Offending key in /home/ross/.ssh/known_hosts:140
> > RSA host key for 0.1.2.3 has changed and you have requested strict checking.
> > Host key verification failed.
...
> The error message indicates that the key causing the problem is on line
> 140 of /home/ross/.ssh/known_hosts. There is no file being created (or
> failing to be created) - it's simply telling you that the key currently
> on that line of the file does not match the host you're connecting to
> (because they're not the same host, as you indicated :-)
Ah!  That was a silly misunderstanding on my part.  However, so that
others could avoid a similar fate, perhaps something like

Replace the key [starting?] at line 140 of /home/ross/.ssh/known_hosts
with the new one, if you trust the new one, to avoid this warning.

in place of

Add correct host key in /home/ross/.ssh/known_hosts to get rid of this
message.
Offending key in /home/ross/.ssh/known_hosts:140

would be clearer.

I also suspect that if StrictKeyChecking=No then simply deleting the
offending key will work too.  But that's a bit long for a help message.

I managed quite a few misreadings
"Offending key" = "remote key"
"in" = "placed in"
"..host:140" = a file name (I regularly use gdb and emacs, and still
didn't get it...).






Reply to: