查找我的有效 RSA 主机密钥
我最近将我的一个域迁移到新的托管服务,因此我切换了 DNS 名称服务器,将内容移动到新的托管服务等。
现在我尝试登录该网站(现在在新主机上),然后在那里关于这个问题,我自己的机器似乎有问题。
问题:在哪里以及如何找到以下错误消息表明我需要的新的正确 RSA 密钥?
错误消息(隐藏详细信息):
evan-stites-claytons-macbook-2171:~ estites$ ssh [电子邮件受保护]
检测到可能存在 DNS 欺骗!
EXAMPLE.com 的 RSA 主机密钥已更改,
以及对应IP地址XXX.XXX.xxx.xx的密钥
是不变的。这可能意味着
发生 DNS 欺骗或主机的 IP 地址
其主机密钥已同时更改。
/Users/estites/.ssh/known_hosts:2 中的 IP 违规密钥
警告:远程主机标识已更改!
可能有人正在做一些令人讨厌的事情!
有人可能正在窃听您(中间人攻击)!
也有可能 RSA 主机密钥刚刚被更改。
远程主机发送的 RSA 密钥的指纹是
xx:xx:xx:xx:xx:b5:21:f1:1f:39:xx:xx:xx:xx:xx:xx。
请联系您的系统管理员。
在 /Users/estites/.ssh/known_hosts 中添加正确的主机密钥以消除此消息。
/Users/estites/.ssh/known_hosts:1 中的违规密钥
example.com 的 RSA 主机密钥已更改,您已请求严格检查。
主机密钥验证失败。
I recently migrated one of my domains to a new hosting service, so I switched the DNS name servers, moved the content to the new hosting service, etc.
Now I am trying to log into the site (now on the new host) and there seems to be a problem on my own machine regarding this issue.
Question: Where and How do I find the new correct RSA key that the below error message is saying that I need?
Error Message (Details disguised):
evan-stites-claytons-macbook-2171:~ estites$ ssh [email protected]
POSSIBLE DNS SPOOFING DETECTED!
The RSA host key for EXAMPLE.com has changed,
and the key for the corresponding IP address XXX.XXX.xxx.xx
is unchanged. This could either mean that
DNS SPOOFING is happening or the IP address for the host
and its host key have changed at the same time.
Offending key for IP in /Users/estites/.ssh/known_hosts:2
WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
xx:xx:xx:xx:xx:b5:21:f1:1f:39:xx:xx:xx:xx:xx:xx.
Please contact your system administrator.
Add correct host key in /Users/estites/.ssh/known_hosts to get rid of this message.
Offending key in /Users/estites/.ssh/known_hosts:1
RSA host key for example.com has changed and you have requested strict checking.
Host key verification failed.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
您只需删除
/Users/estites/.ssh/known_hosts
中包含旧主机密钥的行即可。第一次再次尝试 SSH 时,系统会提示您接受现在未知的主机密钥。You can just delete the line with the old host key in
/Users/estites/.ssh/known_hosts
. You'll be prompted to accept the now-unknown host key the first time you try SSHing again.如果您知道这是误报,只需从您的
known_hosts
文件中删除有问题的密钥即可;根据错误消息,它们位于第 1 行和第 2 行If you know it's a false alarm, just remove the offending keys from your
known_hosts
file; according to the error message they're on lines 1 and 2