7.5 Host key’s change

In this section we change the host SSH keys pair.

# ssh-keygen -f /etc/ssh/ssh_host_rsa_key
The key fingerprint is:
NEWFINGERPRINT

This public host key is shared and matched by remote servers when they connect using ssh to the current host.

• On slave servers, upgrading is sufficient to propagate the new host’s public key.
• However, upgrade is not sufficient on the master host and every slaves will have to re-subscribe in order to validate its new fingerprint manually:

  slave$ mediatex adm add coll MDTX-COLL@MASTER
  The authenticity of host 'MASTER' can't be established.
  Are you sure you want to continue connecting (yes/no)? 
  

Notice: Master host’s fingerprint is written into its /etc/mediatex/mdtx.conf file or may be obtains using:

# ssh-keygen -lf /etc/ssh/ssh_host_rsa_key