Re: Odd messages after upgrade

From: Stein Arne Storslett (sastorsl_at_THOU.SHALT.NOT.SPAM.broadpark.no)
Date: 08/31/05 

Date: Wed, 31 Aug 2005 10:45:11 GMT

<google@gushi.org> wrote in <1125402132.240790.223710@g49g2000cwa.googlegroups.com>:
> Hey all, I just upgraded to the latest 4.1-portable openssh, and now
> when trying to log into my system I get the following:
>
> danm@box:/etc/ssh$ ssh danm@prime.gushi.org
> WARNING: DSA key found for host prime.gushi.org
> in /home/danm/.ssh/known_hosts:1

This is what you should be looking at. In /home/danm/.ssh/known_hosts,
line 1 you have an entry for your server. When you installed the new
openssh you installed a new set of keys on the server. They then do not
match the old "fingerprint" you had in the ~/.ssh/known_hosts file.

> DSA key fingerprint d9:07:d0:eb:89:3d:04:73:33:e8:05:1c:6d:06:af:6b.
> The authenticity of host 'prime.gushi.org (65.125.228.130)' can't be
> established
> but keys of different type are already known for this host.
> RSA key fingerprint is ed:53:bd:52:65:9d:9d:9f:e8:bf:71:2a:82:03:1b:38.
> Are you sure you want to continue connecting (yes/no)?
>
> I have *always* had DSA *and* RSA keys available. Does the upgrade
> cause the server to offer the keys in a different order of some sort?
>
> Is there any way I can force the thing to go back to its old behavior?
>
> Is one key type inherently better than another for some reason? 

-- 
Stein Arne

Relevant Pages

  • Re: Client connect without host service running?
    ... Incoming clients cannot connect via ssh unless openssh is running. ... openssh caches the keys in memory... ... I went to the ssh client and compared the host ...
    (comp.security.ssh)
  • Re: host-based ssh authentication (no password) not working ... help needed
    ... > host public keys for the server should be known to ... keys - no user home directories should be involved at ... I am simply sharing host keys so that all users ... on CLIENT can login to SERVER with no passwords ... ...
    (freebsd-questions)
  • ssh behavior changes after upgrade to 4.1-portable
    ... Hey all, I just upgraded to the latest 4.1-portable openssh, and now ... DSA key found for host prime.gushi.org ... The authenticity of host 'prime.gushi.org ' can't be ... but keys of different type are already known for this host. ...
    (freebsd-questions)
  • Re: Key based SSH transfer
    ... That's not true, because OpenSSH supports both, v1 and v2 RSA keys. ... There is an ssh newsgroup - you might try there. ... the server, it is more difficult to keep the original one running. ...
    (comp.sys.hp.hpux)
  • Re: How to configure dual SSH keys?
    ... client authentication keys normally used by the root account on the SSH ... client host. ... on the client, not the server, while the latter is on the server but ...
    (comp.security.ssh)