As of openssh 1:5.6p1-2ubuntu3 (natty) at least the the ssh-keygen -R
trick has been added.

andreas@stilgar:~$ ssh lucy
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
d1:1b:19:4c:2d:51:b0:18:e2:e4:c3:19:ad:9c:24:9d.
Please contact your system administrator.
Add correct host key in /home/andreas/.ssh/known_hosts to get rid of this 
message.
Offending RSA key in /home/andreas/.ssh/known_hosts:175
  remove with: ssh-keygen -f "/home/andreas/.ssh/known_hosts" -R lucy
RSA host key for lucy has changed and you have requested strict checking.
Host key verification failed.
andreas@stilgar:~$

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.
https://bugs.launchpad.net/bugs/662068

Title:
  Removing the offending host key when a server updates should be easier

-- 
Ubuntu-server-bugs mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to