OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[suse-security] ssh: Changing Host Keys

From: Lucky Leavell (susesecUniXpress.com)
Date: Wed Mar 10 2004 - 16:31:45 CST


OS: SuSE 9.0 using SuSEfirewall2

This was a Red Hat 8 box which we blew away when doing a FTP install of
SuSE 9 (neat!). Unfortunately, we had used this box to ssh into and used
the same IP address for the SuSE install. After a bit of tweaking, I got
ssh to connect but now it complains about the host key change:

Script started on Wed Mar 10 15:12:58 2004
ris713 lucky /home/lucky 0:0 $ ssh -p 70 lucky209.44.30.102

WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!


IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

Someone could be eavesdropping on you right now (man-in-the-middle attack)!

It is also possible that the RSA host key has just been changed.

The fingerprint for the RSA key sent by the remote host is
85:e3:e6:b0:ab:67:38:9b:ce:22:e7:92:9b:31:d7:c8.

Please contact your system administrator.

Add correct host key in /home/lucky/.ssh/known_hosts to get rid of this message.

Offending key in /home/lucky/.ssh/known_hosts:4

RSA host key for 209.44.30.102 has changed and you have requested strict checking.

Host key verification failed.

script done on Wed Mar 10 15:13:16 2004

Just exactly which key(s) should be deleted/added from where?

Thank you,
Lucky Leavell

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here