當(dāng)自己在ssh 登陸另一臺(tái)服務(wù)器的時(shí)候,出現(xiàn)以下錯(cuò)誤:
[root@lgc ~]# ssh root@172.16.0.118
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:TBdOjhzVPapIMjsMWKZq5RYYwb3TSjzJ2PeGgFLaUws.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /root/.ssh/known_hosts:1
ECDSA host key for 172.16.0.118 has changed and you have requested strict checking.
Host key verification failed.
說(shuō)明:
此錯(cuò)誤說(shuō)明是此服務(wù)器中的公鑰鑰匙,連接不了對(duì)方的服務(wù)器,可能是對(duì)方服務(wù)器的公鑰發(fā)生改變,所以,需要在本地更新公鑰;
有如下解決方案:
1、可以直接ssh-keygen -R ip
直接更新對(duì)接公鑰;
例如,我需要連接的ip是172.16.0.118,則:
[root@lgc ~]# ssh-keygen -R 172.16.0.118 ssh-keygen -R 172.16.0.118
2、進(jìn)入known_hosts 此文件中,刪除關(guān)于對(duì)方IP的公鑰;
例如,我需要連接的服務(wù)器為172.16.0.118,那么只需要?jiǎng)h除關(guān)于這臺(tái)服務(wù)器的公鑰即可,如下:
[root@lgc .ssh]# vi known_hosts
[root@lgc .ssh]# vi known_hosts
192.168.6.55 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAylzdHAyNTYAAABBBF00Sc6O50yEnc+DNL2W3/kkt+1sgagdB6ORvTHOn/dB0rHumibGct0VniCwR7sxmTh+rWvJVmUio=
172.16.0.118 ecdsa-sha2-nistp256 AAAAE2VjItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAu2VujlpwoQRsCy5BjXQd47pm1s2qdBMtxolLYluXYH42GO+6YnUIc7vkFIEygJhEbIoOi3U/k+s=
刪除以上172.16.0.118的一行信息即可;