Someone could be eavesdropping on you right

快来打我* 2022-09-11 04:21 11阅读 0赞

### Someone could be eavesdropping on you right ###

*  问题
 *  原因
 *  解决办法

# 问题 #

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
    @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
    Someone could be eavesdropping on you right now (man-in-the-middle attack)!
    It is also possible that a host key has just been changed.
    The fingerprint for the ECDSA key sent by the remote host is
    SHA256:kg7JJz456hXQapTfFvkim5QjMtgyT1lmKXBqobnf3wc.
    Please contact your system administrator.
    Add correct host key in /Users/honglei/.ssh/known_hosts to get rid of this message.
    Offending ECDSA key in /Users/honglei/.ssh/known_hosts:77
    ECDSA host key for 139.198.165.43 has changed and you have requested strict checking.
    Host key verification failed.

# 原因 #

第一次 ssh 连接时会把你访问过计算机的公钥(public key)都记录在客户端（你的电脑）~/.ssh/known\_hosts。当下次访问相同计算机时，OpenSSH会核对公钥。如果公钥不同，OpenSSH会发出警告， 避免你受到DNS Hijack之类的攻击。

Are you sure you want to continue connecting (yes/no/[fingerprint])? yes

# 解决办法 #

指定文件删除

*  \-R hostname 从known\_hosts文件中删除属于hostname的所有密钥。此选项对于删除散列主机很有用（请参阅上面的-H选项）。
 *  \-f filename 指定密钥文件的文件名。

#删除known_hosts中，主机139.198.165.43的所有密钥
    ➜  .ssh ssh-keygen -f "/Users/honglei/.ssh/known_hosts" -R 139.198.165.43
    # Host 139.198.165.43 found: line 77
    /Users/honglei/.ssh/known_hosts updated.
    Original contents retained as /Users/honglei/.ssh/known_hosts.old

不推荐删除所有

#不推荐删除所有文件
    rm -f /Users/honglei/.ssh/known_hosts
    #不推荐删除所有文件
    rm -rf ~/.ssh/known_hosts