API tools faq
paste
Advertisement
aaronfranke

SSH ECDSA key fingerprint change

aaronfranke
Oct 10th, 2019
419
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.22 KB | None | 0 0
raw download clone embed print report
  1. $ ssh -v myhostname
  2. OpenSSH_7.6p1 Ubuntu-4ubuntu0.3, OpenSSL 1.0.2n 7 Dec 2017
  3. debug1: Reading configuration data /home/aaronfranke/.ssh/config
  4. debug1: /home/aaronfranke/.ssh/config line 1: Applying options for myhostname
  5. debug1: Reading configuration data /etc/ssh/ssh_config
  6. debug1: /etc/ssh/ssh_config line 19: Applying options for *
  7. debug1: Connecting to ssh.myhostname.com [23.202.231.169] port 22.
  8. debug1: Connection established.
  9. debug1: identity file /home/aaronfranke/.ssh/id_rsa type 0
  10. debug1: key_load_public: No such file or directory
  11. debug1: identity file /home/aaronfranke/.ssh/id_rsa-cert type -1
  12. debug1: Local version string SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
  13. debug1: Remote protocol version 2.0, remote software version OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
  14. debug1: match: OpenSSH_7.6p1 Ubuntu-4ubuntu0.3 pat OpenSSH* compat 0x04000000
  15. debug1: Authenticating to ssh.myhostname.com:22 as 'myhostname'
  16. debug1: SSH2_MSG_KEXINIT sent
  17. debug1: SSH2_MSG_KEXINIT received
  18. debug1: kex: algorithm: curve25519-sha256
  19. debug1: kex: host key algorithm: ecdsa-sha2-nistp256
  20. debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
  21. debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
  22. debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
  23. debug1: Server host key: ecdsa-sha2-nistp256 SHA256:HnzBy7BAfkMCT4uIcdLrpoWiOrnhHhN8k7XMbbB2Epk
  24. The authenticity of host 'ssh.myhostname.com (23.202.231.169)' can't be established.
  25. ECDSA key fingerprint is SHA256:HnzBy7BAfkMCT4uIcdLrpoWiOrnhHhN8k7XMbbB2Epk.
  26. Are you sure you want to continue connecting (yes/no)? yes
  27. Warning: Permanently added 'ssh.myhostname.com,23.202.231.169' (ECDSA) to the list of known hosts.
  28. debug1: rekey after 134217728 blocks
  29. debug1: SSH2_MSG_NEWKEYS sent
  30. debug1: expecting SSH2_MSG_NEWKEYS
  31. debug1: SSH2_MSG_NEWKEYS received
  32. debug1: rekey after 134217728 blocks
  33. debug1: SSH2_MSG_EXT_INFO received
  34. debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521>
  35. debug1: SSH2_MSG_SERVICE_ACCEPT received
  36. debug1: Authentications that can continue: publickey
  37. debug1: Next authentication method: publickey
  38. debug1: Offering public key: RSA SHA256:6IXRCYKKRdkw+pV4Qzmn7i8nGYT05gC7yvtwsDBQbxM /home/aaronfranke/.ssh/id_rsa
  39. debug1: Authentications that can continue: publickey
  40. debug1: No more authentication methods to try.
  41. myhostname@ssh.myhostname.com: Permission denied (publickey).
  42.  
  43.  
  44. $ ssh -v myhostname
  45. OpenSSH_7.6p1 Ubuntu-4ubuntu0.3, OpenSSL 1.0.2n 7 Dec 2017
  46. debug1: Reading configuration data /home/aaronfranke/.ssh/config
  47. debug1: /home/aaronfranke/.ssh/config line 1: Applying options for myhostname
  48. debug1: Reading configuration data /etc/ssh/ssh_config
  49. debug1: /etc/ssh/ssh_config line 19: Applying options for *
  50. debug1: Connecting to ssh.myhostname.com [23.217.138.110] port 22.
  51. debug1: Connection established.
  52. debug1: identity file /home/aaronfranke/.ssh/id_rsa type 0
  53. debug1: key_load_public: No such file or directory
  54. debug1: identity file /home/aaronfranke/.ssh/id_rsa-cert type -1
  55. debug1: Local version string SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
  56. debug1: Remote protocol version 2.0, remote software version OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
  57. debug1: match: OpenSSH_7.6p1 Ubuntu-4ubuntu0.3 pat OpenSSH* compat 0x04000000
  58. debug1: Authenticating to ssh.myhostname.com:22 as 'myhostname'
  59. debug1: SSH2_MSG_KEXINIT sent
  60. debug1: SSH2_MSG_KEXINIT received
  61. debug1: kex: algorithm: curve25519-sha256
  62. debug1: kex: host key algorithm: ecdsa-sha2-nistp256
  63. debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
  64. debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
  65. debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
  66. debug1: Server host key: ecdsa-sha2-nistp256 SHA256:6MJJtqKhTdHXF2yzH/0UqGN2o4RZ2PDEp2ttdA/IJR8
  67. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
  68. @ WARNING: POSSIBLE DNS SPOOFING DETECTED! @
  69. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
  70. The ECDSA host key for ssh.myhostname.com has changed,
  71. and the key for the corresponding IP address 23.217.138.110
  72. is unknown. This could either mean that
  73. DNS SPOOFING is happening or the IP address for the host
  74. and its host key have changed at the same time.
  75. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
  76. @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
  77. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
  78. IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
  79. Someone could be eavesdropping on you right now (man-in-the-middle attack)!
  80. It is also possible that a host key has just been changed.
  81. The fingerprint for the ECDSA key sent by the remote host is
  82. SHA256:6MJJtqKhTdHXF2yzH/0UqGN2o4RZ2PDEp2ttdA/IJR8.
  83. Please contact your system administrator.
  84. Add correct host key in /home/aaronfranke/.ssh/known_hosts to get rid of this message.
  85. Offending ECDSA key in /home/aaronfranke/.ssh/known_hosts:1
  86. remove with:
  87. ssh-keygen -f "/home/aaronfranke/.ssh/known_hosts" -R "ssh.myhostname.com"
  88. ECDSA host key for ssh.myhostname.com has changed and you have requested strict checking.
  89. Host key verification failed.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!