Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [hostkey]

The tag has no usage guidance.

5
votes
3answers
3k views

SSH host key checking cannot disable when using proxy jump

I am trying to SSH through a jumpbox, but SSH seems to be intent on checking host keys for the jumpbox, even though I'm telling it not to, using the normal -o StrictHostKeyChecking=no -o ...
0
votes
1answer
41 views

Google cloud server ssh host key changed unexpectedly?

I have a Google cloud server that currently runs Ubuntu 16.04. I have not done much to it in years and it always ran great. Somehow or other, for the first time, it experienced downtime today of ...
1
vote
1answer
463 views

autofs can't mount a remote dir with sshfs on the host with deprecated key algorithm

Here is my configuration: /etc/auto.master /mnt/10 /etc/auto.10 uid=0,gid=0,--ghost /etc/auto.10 root -fstype=fuse,allow_other,follow_symlinks,ssh_command=/etc/ssh/sshpass.10.sh :sshfs\#...
39
votes
6answers
123k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...
9
votes
1answer
4k views

ssh command line specify server host key fingerprint

Using ssh command line (OpenSSH), can I specify the server's host key fingerprint? This is possible with winscp.com using (e.g.) -hostkey="ssh-rsa 2048 AA:BB:CC...etc I have read the man page a ...
15
votes
2answers
2k views

Why does Google recommend removing SSH keys from GCE for security?

The below reference to Google documentation is no longer true. Google recommends removing SSH keys from GCE instance to secure SSH. That does not make any sense to me. The keys are there for a ...
1
vote
1answer
100 views

Upgrade path for HostKeyAlgorithms

I'd like to change the default setting for HostKeyAlgorithms for all SSH connections to prefer ssh-ed25519 over ecdsa-sha2-nistp256. But I currently have ecdsa-sha2-nistp256 host keys for many hosts ...
6
votes
1answer
9k views

SSH host key seems to be changing unexpectedly

I rolled out a new /etc/ssh/sshd_config with Puppet on an Ubuntu 12.04 test server. The config was exactly the same as the previous config, except it had removed the following line: HostKey /etc/ssh/...
1
vote
0answers
2k views

Warning: Remote host identification has changed (SSH)

Most likely someone did a server update last night, because when I try to do a rsync (from win 7) I get the message (short version): WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! It is possible ...
4
votes
2answers
4k views

What could cause an SFTP host key fingerprint mismatch?

A remote user has tried to connect to my SFTP/SSH server for the first time, using the "Transmit" client under Mac OS X, and has found that the host key fingerprint doesn't match the expected value. ...
0
votes
2answers
351 views

Ignore or replace host key if it differs

Quite often i put servers into a rescue mode and that obviously changes the host key. So there are situations when i know that SSH host key will be changed temporarily or permanently. And each time i ...
4
votes
2answers
8k views

SSH key and ip address

A co-worker keeps mentioning SSH keys being associates with an IP address but Im not sure what it exactly means. So i tried generating a SSH key and it had my host name at the end of the file. This ...
4
votes
5answers
17k views

How to allow SSH host keys on Linux (Fedora 10 & CentOS 5.2)

I'm trying to set up SSH host keys from our Mac OS X 10.5 Leopard Server-based central backup server to our two Linux servers running Fedora 10 and CentOS 5.2. The process we usually take works and ...
2
votes
1answer
3k views

Known Hosts ECDSA Host Key Multiple Domains on One IP

Hello, world!, I have a VPS set up with multiple domain names pointing to it. Arbitrarily, I like to access it via SSH through the domain name I'm dealing with. So for example, if I'm doing ...