When connecting to a host whose host keys have changed (e.g. when connecting to a new instance in a cloud), something like the below message is displayed. The ssh-keygen invocation is harder to copy-paste than it could be if it were on a separate line.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
<REDACTED>.
Please contact your system administrator.
Add correct host key in /home/<user>/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /home/<user>/.ssh/known_hosts:408
remove with: ssh-keygen -f "/home/<user>/.ssh/known_hosts" -R <REDACTED>
ECDSA host key for <REDACTED> has changed and you have requested strict checking.
Host key verification failed.
This bug was fixed in the package openssh - 1:6.9p1-2
---------------
openssh (1:6.9p1-2) unstable; urgency=medium
[ Colin Watson ] ssh-keygen- on-keychange. patch: Move example ssh-keygen
* mention-
invocation onto a separate line to make it easier to copy and paste
(LP: #1491532).
[ Tyler Hicks ]
* Build with audit support on Linux (closes: #797727, LP: #1478087).
-- Colin Watson <email address hidden> Thu, 10 Sep 2015 12:26:11 +0100