Warning while trying to connect via SSH: POSSIBLE DNS SPOOFING DETECTED REMOTE HOST IDENTIFICATION HAS CHANGED

Couldn’t log in with IP or umbrel.local but could ssh in.

Re-flashed and still can’t get to dashboard so then I try to ssh in and now I get this message.

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@       WARNING: POSSIBLE DNS SPOOFING DETECTED!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The ECDSA host key for umbrel.local has changed,
and the key for the corresponding IP address fe80::27af:ff69:bf50:cc79%en0
is unknown. This could either mean that
DNS SPOOFING is happening or the IP address for the host
and its host key have changed at the same time.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:rLfg/RKllPkJHKZDlPvupeP5M3qm7HbNpTmwC4ABdfU.
Please contact your system administrator.
Add correct host key in /Users/ryanb/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /Users/ryanb/.ssh/known_hosts:2
ECDSA host key for umbrel.local has changed and you have requested strict checking.
Host key verification failed.
2 Likes

Open the file /Users/ryanb/.ssh/known_hosts and delete the line that begins with umbrel.local or your Pi IP (the second one).

4 Likes

@louneskmt you can rename this topic to something like @ WARNING: POSSIBLE DNS SPOOFING DETECTED! @, that can be useful to searches, as this issue is very common.

2 Likes

Is there another path? I am on a Mac.

1 Like

That is your path on Mac. @louneskmt took the path from your post that came from your Mac telling you where the file is located. If you’re trying to find the file in Finder, you must enable hidden files to see it because it begins with period. Open Finder, go to your home directory ryanb and press Shift-Command-. (period), you’ll find .ssh directory.

Another way of doing it is through Terminal, type ls -a will show you hidden and non-hidden files/directories. Quickest way to do it is nano ~/.ssh/known_hosts remove the line with Ctrl+K, save with Ctrl+X, Y, return

1 Like

I did and still no luck.

This is after I deleted umbrel.local

You need to delete the entire line.

If you don’t use SSH for anything else you can just delete the file:

rm ~/.ssh/known_hosts

Now try and SSH in to your Umbrel again and you won’t see the error.

5 Likes

Ok I have deleted it and can now ssh into without that message but I still can’t get to the dashboard.

I also tried with my wifes macbook and it still won’t bring up the dashboard.

Hey I’m having a similar problem

Antonios-MBP:~ antonio$ ssh -t umbrel@umbrel.local
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: POSSIBLE DNS SPOOFING DETECTED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The ECDSA host key for umbrel.local has changed,
and the key for the corresponding IP address 192.168.1.130
is unknown. This could either mean that
DNS SPOOFING is happening or the IP address for the host
and its host key have changed at the same time.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:lQvRtBS+pemdid84KhZxhnIEGFNIhk6h1tOCTDvgIK8.
Please contact your system administrator.
Add correct host key in /Users/antonio/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /Users/antonio/.ssh/known_hosts:1
ECDSA host key for umbrel.local has changed and you have requested strict checking.
Host key verification failed.

Could I get help please I’m trying to connect the the SSH so I can change my username on my node

The instructions are above: Warning while trying to connect via SSH: POSSIBLE DNS SPOOFING DETECTED REMOTE HOST IDENTIFICATION HAS CHANGED

Thanks now when I type in the password moneyprintergobrrr it just says access denied

Screenshot 2021-05-06 at 15.31.52

Can you try with your dashboard password?

Thanks Alot that worked i think. The next step would be how do i change my Username by mistake i made it the wrong thing

1 Like

Could you open a new topic for this question? It will be easier for other people to find an answer afterwards.

Hi there I get the following with this.

C:\Users\itadmin>ssh/known_hosts
ssh: Could not resolve hostname /known_hosts: No such host is known.

Is there before and after command prompt screen examples I could use. I see the known_hosts part in the Alert I get in response to me ssh into Umbrel, but how do I go about ‘deleting that file’.

Your path to the file looks wrong. I believe it should be C:\Users\itadmin\ssh\known_hosts

Based on the response from SSH, it’s attempting to resolve the hostname “known_hosts” as if you gave it the command ssh known_hosts if you’re trying to delete the file, you can use Windows Explorer to navigate to that directory and delete the file.