ssh连接密钥重置

最新推荐文章于 2025-09-07 22:02:07 发布

原创最新推荐文章于 2025-09-07 22:02:07 发布 · 4.2k 阅读

2 ·

CC 4.0 BY-SA版权

文章标签：

#ssh #linux

Linux服务专栏收录该内容

25 篇文章

订阅专栏

当SSH连接远程服务器时遇到主机身份验证警告，可以通过检查和删除known_hosts文件中对应的旧密钥来解决。首先查看并确认问题在于文件/root/.ssh/known_hosts的第3行，然后使用ssh-keygen -R命令删除旧密钥。删除后，重新SSH连接，确认并添加新的主机密钥到known_hosts，从而消除警告。

SSH连接时，出现提示远程密码重置的报错

[root@docker tools]# ssh 172.17.0.2
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
  A256:egegjw6C/fb8Oy/Ipkt41NBTHhWNVwU1Hq1Jg/tp9q8.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this message.
Offending RSA key in /root/.ssh/known_hosts:3
RSA host key for 172.17.0.2 has changed and you have requested strict checking.
Host key verification failed.

先查看文件在哪里

[root@docker tools]# cat /root/.ssh/known_hosts
172.17.0.2 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzQu4f6rXtaWxPqU7MSTbRkn2NbNGNef5pwzIH+MrNWWCsXft2MjraMtXq5R5/EF7Bxpi2XSPcx4i6YMNjAz+muRwM/riaupCCQx3doAm0zLKk14LNFil8gRswIQsUS98rHAR6xtaC4I/tW0ISQB/7ssLbc9S6dRTDTNsiaan3g/KIXXUM1cmQDKQBA7ok3t0iYDwCGJjEcx6+MAvdKQjQbvYmGqc9QSDIaPwpoKFLsjltBgjZQDeB2t97UOYcduIF7eVg2wWdxLDJkLEfwT1OS5qYh9J1BwiulqhJdj7wiFf8A5R6wqKBpjnjSS9a6vcYHh3Mi8M2QoekF6dRZSz6Q==

删除本地的SSH-RSA即可

[root@docker tools]# ssh-keygen -R 172.17.0.2
# Host 172.17.0.2 found: line 3
/root/.ssh/known_hosts updated.
Original contents retained as /root/.ssh/known_hosts.old

最后重新SSH连接即可成功

[root@docker tools]# ssh 172.17.0.2
The authenticity of host '172.17.0.2 (172.17.0.2)' can't be established.
RSA key fingerprint is SHA256:egegjw6C/fb8Oy/Ipkt41NBTHhWNVwU1Hq1Jg/tp9q8.
RSA key fingerprint is MD5:73:9b:3e:c3:93:10:d9:17:74:af:ff:a9:67:59:47:80.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '172.17.0.2' (RSA) to the list of known hosts.
root@172.17.0.2's password: 
[root@f02cc1f8d0dd ~]#

除此之外，也可以直接删除rsa

rm -rf /root/.ssh/*