SSH issues with 4.9 stable (key_verify failed for server_host_key)

Daren Desjardins desjardins at canada.com
Wed Mar 31 14:03:48 PST 2004


Ive tried removing the known_hosts file already unfortunately. I did not
include the ssh command I was running, but I am not trying to log in as
root. I was using 'ssh -v user at host.com'

Just to ensure there is no misunderstanding, the output when I the
known_host entry is removed is included below.

[root at lithium .ssh]#/usr/obj/usr/src/secure/usr.bin/ssh/ssh 
daren at daren.ca
The authenticity of host 'daren.ca (65.49.123.132)' can't be
established.
DSA key fingerprint is 31:b1:cf:32:4f:86:9f:fe:e2:39:4a:63:e6:4f:ee:fb.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'daren.ca,65.49.123.132' (DSA) to the list of
known hosts.
key_verify failed for server_host_key
[root at lithium .ssh]



On Wed, 2004-03-31 at 16:49, Dave Tweten wrote:
> desjardins at canada.com said:
> >debug1: ssh_dss_verify: signature incorrect
> >key_verify failed for server_host_key 
> 
> You may be suffering from the confusion I mentioned in my prevoious 
> message -- if daren.ca's public key has changed since you began trying to 
> make SSH work.
> 
> Get rid of /root/.ssh/known_hosts.  If it's valuable, rename it.  
> Otherwise just delete it.  Now when you use the option I suggested in my 
> previous message, SSH will ask you the question.  After you answer yes, it 
> will store daren.ca's current public machine key in /root/.ssh/known_hosts.
> 
> Incidently, if you use my sshd_config file, you won't be able to log in 
> interactively as root.



More information about the freebsd-stable mailing list