Shell
·
發表于 4年以前
·
閱讀量:2598
如果某一個域名換了ip地址,比如hellotech.mobi,則ip地址切換之后,使用ssh登錄時,如ssh root@hellotech.mobi
,會提示異常。異常信息如下所示:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: POSSIBLE DNS SPOOFING DETECTED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The ECDSA host key for hellotech.mobi has changed,
and the key for the corresponding IP address 47.188.63.90
is unchanged. This could either mean that
DNS SPOOFING is happening or the IP address for the host
and its host key have changed at the same time.
Offending key for IP in /Users/aaron/.ssh/known_hosts:29
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:MLmyflsdkjfalskflsdfjals928392QqqYCd0zFYM3JAFTG0cKE.
Please contact your system administrator.
Add correct host key in /Users/aaron/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /Users/aaron/.ssh/known_hosts:24
ECDSA host key for hellotech.mobi has changed and you have requested strict checking.
Host key verification failed.
這個原因是由于公鑰不一樣了,所以無法登錄,提示信息是 KEY 驗證失敗。解決方法很簡單,就是將 /root/.ssh/known_hosts 文件里面的原來的公鑰信息刪除。切記不要刪除整個文件。
known_hosts就是一個文本文件,里面記錄了本地所有ssh登錄過的域名,ip。文件按行區分,每行一個域名或ip。