Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 28076 - openssh-3.6.1_p2-r3: duplicate entries in known_hosts, no verification of hosts
Summary: openssh-3.6.1_p2-r3: duplicate entries in known_hosts, no verification of hosts
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: All Linux
: High minor
Assignee: Daniel Ahlberg (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-09-06 14:13 UTC by Boyd Waters
Modified: 2003-09-16 17:23 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Boyd Waters 2003-09-06 14:13:17 UTC
Every time I use ssh these days, it refuses to verify the authenticity of the
host, and adds a new (duplicate) entry for that host in ~/.ssh/known_hosts:

bwaters@godot bwaters $ rm .ssh/known_hosts 
bwaters@godot bwaters $ ssh funes.aoc.nrao.edu
The authenticity of host 'funes.aoc.nrao.edu (146.88.1.55)' can't be established.
RSA key fingerprint is 5d:5c:28:cf:8e:e8:af:7f:cc:ed:8b:d9:49:8b:66:42.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'funes.aoc.nrao.edu,146.88.1.55' (RSA) to the list of
known hosts.
Last login: Sat Sep  6 13:22:54 2003 from wn156-3.sdc.org
bwaters@funes bwaters $ logout
Connection to funes.aoc.nrao.edu closed.

bwaters@godot bwaters $ ssh funes.aoc.nrao.edu
The authenticity of host 'funes.aoc.nrao.edu (146.88.1.55)' can't be established.
RSA key fingerprint is 5d:5c:28:cf:8e:e8:af:7f:cc:ed:8b:d9:49:8b:66:42.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'funes.aoc.nrao.edu,146.88.1.55' (RSA) to the list of
known hosts.
Last login: Sat Sep  6 15:01:35 2003 from wn156-3.sdc.org
bwaters@funes bwaters $ logout
Connection to funes.aoc.nrao.edu closed.

bwaters@godot bwaters $ cat .ssh/known_hosts 
funes.aoc.nrao.edu,146.88.1.55 ssh-rsa AAAAB3NzaC1yc2EAAAA...<snip>
funes.aoc.nrao.edu,146.88.1.55 ssh-rsa AAAAB3NzaC1yc2EAAAA...<snip>


The point is that it NEVER verifies against known_hosts; it will add the same
exact line to ~/.ssh/known_hosts each time I log in.

openssl-0.9.7b-r1
mm-sources-test4-mm5
glibc-2.3.2 with NPTL
gcc-3.3.1-r1
Comment 1 Boyd Waters 2003-09-16 17:23:34 UTC
Problem resolved with newest openssh-3.7_p1. WORKSFORME