Skip to main content
Information Security

Return to Question

edited title
Link
schroeder ♦
schroeder ♦
  • 132.2k
  • 55
  • 307
  • 348

REMOTE HOST IDENTIFICATION HAS CHANGED: sftp -v -o HostKeyAlgorithms=... : Cannot use "ecdsa" and "rsa" in parallel when using SFTP

Bumped by Community user
Bumped by Community user
added 23 characters in body
Source Link
schroeder ♦
schroeder ♦
  • 132.2k
  • 55
  • 307
  • 348

When I connect to my "OpenSSH_8.2p1 Ubuntu-4ubuntu0.4" server alternating using " 

sftp -v -o HostKeyAlgorithms=ecdsa-sha2-nistp256 test-user@localhost" 

and " 

sftp -v -o HostKeyAlgorithms=rsa-sha2-256 test-user@localhost" 

I always get when switching from one algorithm to the other the following warning: "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!".

"WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!"

Is this the correct behavior that it is not possible to use ECDSA and RSA Host-Key-Algorithms in parallel, or is this a bug?

When I connect to my "OpenSSH_8.2p1 Ubuntu-4ubuntu0.4" server alternating using "sftp -v -o HostKeyAlgorithms=ecdsa-sha2-nistp256 test-user@localhost" and "sftp -v -o HostKeyAlgorithms=rsa-sha2-256 test-user@localhost" I always get when switching from one algorithm to the other the following warning: "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!". Is this the correct behavior that it is not possible to use ECDSA and RSA Host-Key-Algorithms in parallel or is this a bug?

When I connect to my "OpenSSH_8.2p1 Ubuntu-4ubuntu0.4" server alternating using 

sftp -v -o HostKeyAlgorithms=ecdsa-sha2-nistp256 test-user@localhost 

and 

sftp -v -o HostKeyAlgorithms=rsa-sha2-256 test-user@localhost 

I always get when switching from one algorithm to the other the following warning:

"WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!"

Is this the correct behavior that it is not possible to use ECDSA and RSA Host-Key-Algorithms in parallel, or is this a bug?

Source Link
becke-ch
becke-ch
  • 111
  • 1

REMOTE HOST IDENTIFICATION HAS CHANGED: sftp -v -o HostKeyAlgorithms=... : Cannot use "ecdsa" and "rsa" in parallel

When I connect to my "OpenSSH_8.2p1 Ubuntu-4ubuntu0.4" server alternating using "sftp -v -o HostKeyAlgorithms=ecdsa-sha2-nistp256 test-user@localhost" and "sftp -v -o HostKeyAlgorithms=rsa-sha2-256 test-user@localhost" I always get when switching from one algorithm to the other the following warning: "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!". Is this the correct behavior that it is not possible to use ECDSA and RSA Host-Key-Algorithms in parallel or is this a bug?