[CentOS] sshd hack

Josh Kelley joshkel at gmail.com
Tue Mar 14 20:17:32 UTC 2006


On 3/12/06, Ron Yorston <rmy at tigress.co.uk> wrote:
> Scot L. Harris wrote:
> >My question
> >was, if the known_hosts file is hashed how do you identify the entry for
> >the particular host so it can be removed when needed?
>
> The warning message tells you the line number of the entry in the
> known_hosts file:
>
>   Add correct host key in /home/rmy/.ssh/known_hosts to get rid of this message.
>   Offending key in /home/rmy/.ssh/known_hosts:22
>   RSA host key for localhost has changed and you have requested strict checking.
>   Host key verification failed.

They also add a "-F hostname" option to ssh-keygen that searches
known_hosts for lines matching a particular hostname (whether hashed
or not).

Josh Kelley



More information about the CentOS mailing list