[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#822058: also mention ssh-keygen -R IP_address



Package: openssh-client
Version: 1:7.2p2-4

$ ssh m.jidanni.org :
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:qtQMNiXNUv77ha9biI8aTM4eWTfgGYhuFogRsLo107g.
Please contact your system administrator.
Add correct host key in /home/jidanni/.ssh/known_hosts to get rid of this message.
Offending RSA key in /home/jidanni/.ssh/known_hosts:24
  remove with:
  ssh-keygen -f "/home/jidanni/.ssh/known_hosts" -R m.jidanni.org
Password authentication is disabled to avoid man-in-the-middle attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.

NO!

In addtion to
  ssh-keygen -f "/home/jidanni/.ssh/known_hosts" -R m.jidanni.org
you need to also mention
  ssh-keygen -f "/home/jidanni/.ssh/known_hosts" -R 69.163.171.96

Else the user will never be able to stop the messages!

Also no need to mention -f ......... if it is the default!


Reply to: