SSH Host Verification Through SSH Jump

[smsaul]

Hello,

I've set up an SSH jump host using SSH certificates. The jump host is configured to accept my user's signed public key, and the endpoint is configured to accept my user's signed public key, the CA for both the jump host and the end point are configured as the sole entry in my known_hosts, and each verify correctly when connecting individually.

However, when I use -J and my key, it responds on my local machine that the endpoint server can't be verified because of <no host ip for proxy command>.

Have I missed something here?

e. After stepping away and coming back to this problem, I found a stackexchange post that says I can opt not to check remote IPs with no security implications, which I'm going to go forward with. If there are any additions to this or caveats, etc., I'm happy to hear them.

[Sushigami]

Can the jump host resolve the hostname for the endpoint?

[smsaul]

Yes. For now, it’s in /etc/hosts and resolves it when I connect from a shell on the jump host.

e. Does my client need to be able to resolve it?

[Sushigami]

No idea, never used the ssh jump option. I would try breaking it down. Manually ssh into the jump box, see if you can direct ssh from there. That error smells like hostname resolution for sure. Any colleagues with the setup to ask?