Home / server / Questions / 670519
Accepted
Emanuil Rusev
Asked: 2015-02-23 01:27:51 +0800 CST

Is it normal for the identity of a host to change after enabling SSL?

  • 772
  1. I logged in to a known host - ssh [email protected].
  2. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server.
  3. From a separate terminal tab, I tried to do an scp to the same host.

At this point, the server responded with:

The authenticity of host 'example.com (123.123.123.12)' can't be established.

Given the context, is this normal?

ssh

1 Answers

  1. Best Answer

    It has nothing to do with SSL.

    Why you should get the warning from scp is a different matter. Assuming the hostname is exactly the same as when you SSHed, perhaps you are using scp as a different user or from a different host (or using sudo, which means you will be using root's known_hosts file).

    To verify the fingerprint, you can use ssh-keygen -l -f with the public keys on the known host.

    • 7