title: Where does Xcode 10.2 store ssh fingerprints of hosts?
body: <p>I just upgraded to Xcode 10.2 from 10.1. I did my first git push in the new version. Xcode displayed message in a dialog.</p>
  
  <blockquote>
    <p>The identity of a repository hosted on “git.example.com” has changed.</p>
    
    <p>The fingerprint ‘AAAAAAAABBBBBBBBCCCCCCCCDDDDDDDD’ for this repository
    has changed since it was trusted. You might be connecting to a
    repository that is pretending to be “git.example.com”, which
    could put your confidential information at risk. Would you like to
    connect to the repository anyway?</p>
  </blockquote>
  
  <p>I killed Xcode 10.2. I started up Xcode 10.1 again. I did a git push operation, and it succeeded. This proves that the git repos host did not change fingerprints. It strongly hints that Xcode 10.2 determines ssh host fingerprints differently than 10.1.</p>
  
  <p>My guess is that Xcode does <strong>not</strong> use <code>~/.ssh/known_hosts</code> otherwise 10.2 would behave the same as 10.1.</p>
  
  <p>I pressed "Trust" in the dialog and noted the time.</p>
  
  <p>I saw no new entries in Keychain. I immediately went to Terminal and ran <code>find . -mmin -3</code> in <code>~/Library/Developer/Xcode</code> and saw no relevant files changed. File <code>~/.ssh/known_hosts</code> was not updated.</p>
  
  <p>So, where does Xcode 10.2 store its ssh known hosts info? Could I have somehow pointed Xcode 10.2 to the ssh known hosts fingerprints that 10.1 was using?</p>