0

Last night I started getting the following warning on all of my servers when accessing github.com.

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @
WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that a host key has just been changed. The fingerprint for the RSA key sent by the remote host is ..... Please contact your system administrator. Add correct host key in /home/user/.ssh/known_hosts to get rid of this message.

There is an easy fix of course, https://stackoverflow.com/questions/20840012/ssh-remote-host-identification-has-changed, but I don't know why I get this message all of sudden.

I did not change .ssh/known_hosts.

Should I be worried? What steps should I take?

Thanks in advance,

1

See https://help.github.com/en/github/authenticating-to-github/testing-your-ssh-connection for the expected host fingerprint.

I used ssh -v -T git@github.com to see the host key my ssh client verified, and it was nThbg6kXUpJWGl7E1IGOCspRomTxdCARLviKw6E5SY8 which is listed on their page, so the connection is not MiTM'd.

I don't know why it happened. I guess a change in your ssh client (or their ssh server) switched from using one host key to another, for example because the host key algorithm was deprecated.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.