GitHub’s RSA key in SSH [update]

Aung Baw
1 min readApr 2, 2023
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:uNiVztksCsDhcc0u9e8BujQXVUpKZIDTMczCvj3tD2s.
Please contact your system administrator.
Add correct host key in ~/.ssh/known_hosts to get rid of this message.
Host key for github.com has changed and you have requested strict checking.
Host key verification failed.

If you see above error message after Mar 2023, you could simply remove a host from the user’s known_hosts file in SSH (Secure Shell) protocol.

$ ssh-keygen -R github.com

GitHub’s SSH key fingerprints could be found here. And you can manually search then delete it from Known_Hosts file but it’s risky and nobody recommend it.

$ vim ~/.ssh/known_hosts

For further reading from their security blog post. If you see 3 lines starting with github.com in known_hosts file, we are good to git again.

github.com ssh-ed25519 ...
github.com ssh-rsa ...
github.com ecdsa-sha2-nistp256 ...

--

--

Aung Baw

Focusing on security, cloud, and DevOps, I am a lifelong learner and lazy 徒弟.