Hello,
maybe you can try to generate new keys on the board. Normally the ssh keys will be generated at first startup.
The script in /etc/init.d/S50ssh checks for keys in /etc:
-rw------- 1 root root 672 Mar 27 2015 ssh_host_dsa_key
-rw-r--r-- 1 root root 590 Mar 27 2015 ssh_host_dsa_key.pub
-rw------- 1 root root 227 Mar 27 2015 ssh_host_ecdsa_key
-rw-r--r-- 1 root root 162 Mar 27 2015 ssh_host_ecdsa_key.pub
-rw------- 1 root root 387 Mar 27 2015 ssh_host_ed25519_key
-rw-r--r-- 1 root root 82 Mar 27 2015 ssh_host_ed25519_key.pub
-rw------- 1 root root 965 Mar 27 2015 ssh_host_key
-rw-r--r-- 1 root root 630 Mar 27 2015 ssh_host_key.pub
-rw------- 1 root root 1675 Mar 27 2015 ssh_host_rsa_key
-rw-r--r-- 1 root root 382 Mar 27 2015 ssh_host_rsa_key.pub
Maybe they are expired or something else. Then you remove these files:" rm /etc/ssh_host_* "
After the files are deleted you can create new ones with "sh /etc/init.d/S50ssh start".
You should get something like this:
- # sh init.d/S50sshd start
- Generating RSA Key...
- Generating public/private rsa1 key pair.
- Your identification has been saved in /etc/ssh_host_key.
- Your public key has been saved in /etc/ssh_host_key.pub.
- The key fingerprint is:
- 5e:37:8f:fc:0e:5f:f8:3b:a1:a5:ff:ea:07:66:aa:03
- The key's randomart image is:
- +--[RSA1 2048]----+
- | |
- | |
- | |
- | |
- | S . o |
- | .E. o +++ |
- | . . ++*.o|
- | ..* +.|
- | . o oB=*|
- +-----------------+
- Generating RSA Key...
- Generating public/private rsa key pair...
- ...
- ...
Also it could be useful to remove your board from the known_hosts file on your host-PC.
ssh-keygen -f "/home/<username>/.ssh/known_hosts" -R <board-ip>
This is on Linux Mint. So maybe it is different on other distributions.
Now you can try to connect again with ssh root@<board-ip>
Then there could be this output:
The authenticity of host '10.0.0.253 (10.0.0.253)' can't be established.
ECDSA key fingerprint is 53:3a:b7:c8:5a:5c:9b:e3:81:8a:53:c2:ff:6e:8c:1e.
Are you sure you want to continue connecting (yes/no)?
Press 'yes' and you should get a connection to the board.
Kind regards
A. Zeiler
F&S