kkuzelka opened a new issue #9510:
URL: https://github.com/apache/airflow/issues/9510


   **Apache Airflow version**: 1.10.10
   
   **What happened**: 
   for any ssh connection with `allow_host_key_change` set to False or unset 
Airflow prints
   ```
    WARNING - Remote Identification Change is not verified. This wont protect 
against Man-In-The-Middle attacks
   ```
   **What you expected to happen**:
   
   https://airflow.apache.org/docs/stable/howto/connection/ssh.html says
   
    ```allow_host_key_change - Set to true if you want to allow connecting to 
hosts that has host key changed or when you get ‘REMOTE HOST IDENTIFICATION HAS 
CHANGED’ error. This wont protect against Man-In-The-Middle attacks. Other 
possible solution is to remove the host entry from ~/.ssh/known_hosts file. 
Default is false.```
   
   **How to reproduce it**:
   ```
       ssh_hook = SSHHook(ssh_conn_id=sftp_conn_id)
       sftp_client = ssh_hook.get_conn().open_sftp()
   ```
   Let me know if I misunderstood how this should work.
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to