Can we have better ssh fingerprint collision messages?

valent.turkovic at gmail.com valent.turkovic at gmail.com
Mon Nov 11 22:03:04 UTC 2013


I really enjoy working with ssh on Ubuntu just for this simple reason,
they have user friendly ssh fingerprint collision messages:

$ ssh root at 192.168.1.1
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
c0:3b:b2:60:a6:e2:5e:97:aa:ae:ec:d2:ca:ba:27:1b.
Please contact your system administrator.
Add correct host key in /home/valent/.ssh/known_hosts to get rid of
this message.
Offending RSA key in /home/valent/.ssh/known_hosts:8


I really miss this feature when I return back to Fedora.
How hard would be to make this behavior default for Fedora also?


More information about the devel mailing list