Error in ssh:// protocol handler.

Bug #51169 reported by Evan Carroll
2
Affects Status Importance Assigned to Milestone
nautilus (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

In the event you get files by using an ssh://username@computer URI, you will find that if the servers rsa key changes on the remote machine, rather than giving the user the typical console caveat about the man-in-the-middle attack, it fails, claiming:

The rsa key easily change, as in the event of a live cd lab, in which they are constantly in flux.

--START DIALOG BOX
Nautilus cannot display
"ssh://[uri location]"

Please select another viewer and try again.
--END DIALOG BOX

A remedy is of coarse to delete the coresponding ~/.ssh/known_hosts file, but the dialog box should be more informative of the error at hand.

The typical console caveat is include for reference:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
ff:bd:00:27:27:db:f8:4a:6d:2f:cf:25:ef:15:07:df.
Please contact your system administrator.
Add correct host key in /home/ecarroll/.ssh/known_hosts to get rid of this message.
Offending key in /home/ecarroll/.ssh/known_hosts:1
RSA host key for 192.168.0.105 has changed and you have requested strict checking.
Host key verification failed.

description: updated
Revision history for this message
William Grant (wgrant) wrote :

Thanks for the bug report, but this is the same as bug #41738.

Changed in nautilus:
status: Unconfirmed → Rejected
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.