Do ssh keys get changed by upgrades

[fl1ger]

Moin!

Subject says it all. I rarely (aka never after my first installation which was at the start of the pandemic) use ssh to log in to OPNSense, however I currently have a bit of a flaky pppoe connection so thought it would be a good idea to debug some more on the shell prompt. However when trying to log in ssh warns me that the ssh key has changed and I am very sure that I didn't change anything there. So is the SSH key changed between minor/major OPNSense versions or is there something bad going on?

So long
-Ralf

[fabian]

It will be regenerated in a reinstall.

[franco]

Hi Ralf,

Only factory resets and clean installs will do this. Even the config import from the installer will retain the old keys.

However, OpenSSH has been deprecating old key formats a number of times now and maybe what you are seeing is a switch to a higher encryption key that was already there.


Cheers,
Franco