Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: "Carlos E. R." Newsgroups: comp.os.linux.misc Subject: Re: Another ssh quirk... Date: Mon, 5 Oct 2026 15:40:07 +0200 Lines: 29 Message-ID: References: <11a05ig$2pnll$1@news.xmission.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Trace: individual.net XRBZlUPr0y9+TzDuxEeALABujeDQaGJdq5KVHhQ4FJ2UZRtP0N Cancel-Lock: sha1:gkG2uIpOWUP6LXZgY4miX4vQY/Q= sha256:Hhh7CjR5+xzqVmU9jMgeZtgQN9XIwBQ+mKpVKM4vWSA= User-Agent: Mozilla Thunderbird Content-Language: en-GB In-Reply-To: <11a05ig$2pnll$1@news.xmission.com> Xref: csiph.com comp.os.linux.misc:92940 On 2026-10-05 14:35, Kenny McCormack wrote: > Yes, I enjoy writing about these weird quirks that I find in the ssh tools > (including rsync). I find it amusing that ssh (and friends) - a tool we > all use daily and rely on heavily - is still stuck, design-wise, in the > 1980s. > > So, I recently started running a new/different version of RaspiOS on one of > my Pis. Same hostname, same hardware, same Mac Address, thus same IP from > the router, but new OS build. But different certificate. You should have copied the certificate. > > So, I find that when I ssh into this machine (call it "zebra" for the sake > of discussion) from each of the other machines on the LAN, the first time, > it generates a screenful of errors/warnings about "man in the middle" > attacks and so on. Yes, I know why it does this and, no, I don't want to > disable "strict host checking"; I just think there should be a simpler way > to handle this than the method described below. > There is. It is a single line to paste and execute. I don't remember it, the error message prints it. -- Cheers, Carlos E.R. ES🇪🇸, EU🇪🇺.