Linux Administration Cookbook

How to do it...

Now that we've confirmed our setup, we're going to change the host keys on centos2 and see what happens.

On centos2, run the following:

[vagrant@centos2 ~]$ sudo mv /etc/ssh/ssh_host_ecdsa_key* /home/vagrant/[vagrant@centos2 ~]$ lsssh_host_ecdsa_key  ssh_host_ecdsa_key.pub

We've just moved the keys we accepted as gospel on centos1.

Our session stays up because we're already authenticated and connected. If we were to disconnect at this point, we would have to accept a different set of keys (we moved the ECDSA keys, but there's still Ed25519 host keys available, which SSH would pick up instead).

Now, we're going to generate a new set of keys by using the catchall -A flag:

[vagrant@centos2 ~]$ sudo ssh-keygen -Assh-keygen: generating ...