Re: Can we have better ssh fingerprint collision messages?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Once upon a time, Reindl Harald <h.reindl@xxxxxxxxxxxxx> said:
> no - i simply took the host-key of another machine in my "known_hosts" file
> pressed save and tried to connect to the host, maybe this happens because
> there are more than one lines for each host (IP, only local part, FQ) but
> that is in fact what you get

If you didn't change it to match exactly what you attempted to connect
to (e.g. if you made an entry for "foo.mydomain.com" and then just did
"ssh foo"), the line is not matched.  If you manually make multiple
lines with the same host, I'm not sure what OpenSSH does (because it
doesn't create such entries); it may only care about the first match.

If there is no match to the host, you get the output you described; if
there is a match but the key is different, you get the original poster's
desired output.  This is standard (and I believe non-configurable)
OpenSSH behavior going back to the beginning (and IIRC to the original
SSH code before OpenSSH started).

-- 
Chris Adams <linux@xxxxxxxxxxx>
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux