certi-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[certi-dev] [Off-Topic] ssh fingerprint


From: Eric Noulard
Subject: [certi-dev] [Off-Topic] ssh fingerprint
Date: Fri, 17 Apr 2009 13:04:45 +0200

2009/4/17 Eric Noulard <address@hidden>:
> 2009/4/17 Gotthard, Petr <address@hidden>:
>>> I guess that your MAC address has changed during the process such that
>>> ssh public key auth is complaining about address spoofing.
>>
>> Yes, the MAC has changed, but ~/.ssh/known_hosts contains only IP and
>> fingerprints. I think that MAC change does not affect SSH.
>
> Ok I should be wrogn then I thought changing MAC may somehow change
> fingerprint.

I answer to myself.
Fingerprints in this case should only depends on the "host" fingerprints
located in
/etc/ssh/ssh_host_XXX_key.pub

they are usually generated when the SSH server is installed (or on
first sshd startup).

Thus you are right fingerprint should nopt depend on MAC.

-- 
Erk




reply via email to

[Prev in Thread] Current Thread [Next in Thread]