-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/03/12 14:26, Liquori, Kevin wrote:
> On 03/11/2012 06:24 PM, Anne Wilson wrote:
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>> 
>> In the past I have regularly done updates on my server using ssh
>>  access from this laptop.  I can no longer do this.  It may be 
>> connected with the fact that I installed keychain on both the 
>> server and the laptop?
>> 
>> However - strict-checking is set to "ask" which seems to be the 
>> default.  I get
>> 
>> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ 
>> WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @ 
>> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT
>> IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could
>> be eavesdropping on you right now (man-in-the-middle attack)! It
>> is also possible that the RSA host key has just been changed.
>> The fingerprint for the RSA key sent by the remote host is 
>> e7:69:b4:4a:b3:31:39:c3:44:42:0a:b5:42:99:de:13. Please contact 
>> your system administrator. Add correct host key in 
>> /home/anne/.ssh/known_hosts to get rid of this message.
>> Offending key in /home/anne/.ssh/known_hosts:3 RSA host key for
>> 192.168.0.40 has changed and you have requested strict checking.
>> Host key verification failed.
>> 
>> On the server I used ssh-keygen to list the fingerprint, and it 
>> matches the above.
> 
> After you have verified that the target host is the host you think
> it is you should be able to remove the old fingerprint like this:
> 
> ssh-keygen -R target_hostname
> 
Hi Kevin.  I was so sure that I had removed the old key - but then
realised that I was unsure about the identity of one of the keys (my
/home tends to go on for distro release after distro release, so the
key could have been there for some time).  I deleted that and tried
again - and this time got contact :-)

Thanks for putting me on the right track.  And thanks, too, to others
who tried to help, on- and off-list.

Anne
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9eTWYACgkQj93fyh4cnBerYQCfdPwsrdAUgVqFE7qRjMBPIN3J
CsUAnjgtR0G0wrQXDf+2x0rdWlUMVAQb
=tzkS
-----END PGP SIGNATURE-----