Re: editing 'new' known_hosts files


editing 'new' known_hosts files
\ LeVA (22 Jul 2006)
. \ Steve Kemp (22 Jul 2006)
. \ Thomas Seliger (25 Jul 2006)

2 msg	RE: [SECURITY] [DSA 1118-1] New Mozilla package...
1 msg	security.debian.org - local repository
1 msg	Re: [SECURITY] [DSA 1113-1] New zope2.7 package...
1 msg	Re: [SECURITY] [DSA 1112-1] New mysql-dfsg-4.1 ...
1 msg	great growth on pink sheets, the information is...
1 msg	huge take-off on pink sheets, look through the ...
8 msg	Re: [SECURITY] [DSA 1111-1] New Linux kernel 2....
2 msg	Which kernels are vulnerable?
1 msg	Subject: HealthUniverse is on a roll HLUN . pk
3 msg	autoresponse
1 msg	contpaq 2004
1 msg	Compliments
4 msg	Re: [SECURITY] [DSA 1108-1] New mutt packages f...
1 msg	Re: [SECURITY] [DSA 1107-1] New GnuPG packages ...
1 msg	Re: [SECURITY] [DSA 1106-1] New ppp packages fi...
1 msg	Sendmail security fix for stable?
1 msg	Re: [SECURITY] [DSA 1105-1] New xine-lib packag...
4 msg	Re: [SECURITY] [DSA 1104-2] New OpenOffice.org ...
1 msg	Re: Job

Subject:	Re: editing 'new' known_hosts files
Group:	Debian-security
From:	Thomas Seliger
Date:	25 Jul 2006

LeVA wrote:

> I have reinstalled a server of mine, and now I need to remove it's old
> pubkey from my $HOME/.ssh/known_hosts, but it is in the "new" format,
> so no hostnames which may indicate which pubkey belongs to which host.

In addition to what Steve wrote: OpenSSH specifies the conflicting line number in the "key changed" warning message. So you can delete the "offending" line. There should be one line for the hosts name (change will terminate connection attempt) and one for the IP (change will yield a warning).

Best regards,
Tom

--
To UNSUBSCRIBE, email to debian-security-REQUEST
with a subject of "unsubscribe". Trouble? Contact listmaster