Re: Odd messages after upgrade

From: Stein Arne Storslett (sastorsl_at_THOU.SHALT.NOT.SPAM.broadpark.no)
Date: 08/31/05 

Date: Wed, 31 Aug 2005 10:45:11 GMT

<google@gushi.org> wrote in <1125402132.240790.223710@g49g2000cwa.googlegroups.com>:
> Hey all, I just upgraded to the latest 4.1-portable openssh, and now
> when trying to log into my system I get the following:
>
> danm@box:/etc/ssh$ ssh danm@prime.gushi.org
> WARNING: DSA key found for host prime.gushi.org
> in /home/danm/.ssh/known_hosts:1

This is what you should be looking at. In /home/danm/.ssh/known_hosts,
line 1 you have an entry for your server. When you installed the new
openssh you installed a new set of keys on the server. They then do not
match the old "fingerprint" you had in the ~/.ssh/known_hosts file.

> DSA key fingerprint d9:07:d0:eb:89:3d:04:73:33:e8:05:1c:6d:06:af:6b.
> The authenticity of host 'prime.gushi.org (65.125.228.130)' can't be
> established
> but keys of different type are already known for this host.
> RSA key fingerprint is ed:53:bd:52:65:9d:9d:9f:e8:bf:71:2a:82:03:1b:38.
> Are you sure you want to continue connecting (yes/no)?
>
> I have *always* had DSA *and* RSA keys available. Does the upgrade
> cause the server to offer the keys in a different order of some sort?
>
> Is there any way I can force the thing to go back to its old behavior?
>
> Is one key type inherently better than another for some reason? 

-- 
Stein Arne

Relevant Pages

  • Re: Client connect without host service running?
    ... Incoming clients cannot connect via ssh unless openssh is running. ... openssh caches the keys in memory... ... I went to the ssh client and compared the host ...
    (comp.security.ssh)
  • Re: host-based ssh authentication (no password) not working ... help needed
    ... > host public keys for the server should be known to ... keys - no user home directories should be involved at ... I am simply sharing host keys so that all users ... on CLIENT can login to SERVER with no passwords ... ...
    (freebsd-questions)
  • Re: SSH oddness with 8.0-STABLE
    ... WARNING: DSA key found for host xx.yy.zz ... but keys of different type are already known for this host. ... server changed from DSA to RSA, ...
    (freebsd-stable)
  • Re: Key based SSH transfer
    ... That's not true, because OpenSSH supports both, v1 and v2 RSA keys. ... There is an ssh newsgroup - you might try there. ... the server, it is more difficult to keep the original one running. ...
    (comp.sys.hp.hpux)
  • ssh behavior changes after upgrade to 4.1-portable
    ... Hey all, I just upgraded to the latest 4.1-portable openssh, and now ... DSA key found for host prime.gushi.org ... The authenticity of host 'prime.gushi.org ' can't be ... but keys of different type are already known for this host. ...
    (freebsd-questions)