Re: [Bug-gnubg] CVS access problem

[Jim Segrave]

On Mon 04 Aug 2003 (13:22 +0200), Olivier Baur wrote:
> Hi all!
> 
> I've tried to update my gnubg today, and here is the message I get:
> 
> [s192:~/gnubg/gnubg-curversion/gnubg] olivierb% cvs update
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle 
> attack)!
> It is also possible that the RSA1 host key has just been changed.
> The fingerprint for the RSA1 key sent by the remote host is
> bb:04:5c:4b:0f:c5:c0:7c:5d:cf:d7:c2:bf:59:1a:dc.
> Please contact your system administrator.
> Add correct host key in /Users/olivierb/.ssh/known_hosts to get rid of 
> this message.
> Offending key in /Users/olivierb/.ssh/known_hosts:1
> RSA1 host key for subversions.gnu.org has changed and you have 
> requested strict checking.
> Host key verification failed.
> cvs [update aborted]: end of file from server (consult above messages 
> if any)
> 
> 
> What has happened?
> Has the fingerprint for Savanah really changed?
> How do I check this out?

The sysadmins for subversions.gnu.org replied to me when I asked about
this that they were working on the problem. I see on the news page
that now we have:

Updated hostkey for SSHv2 users posted by jbailey, Mon 09/30/2002 at
04:49 - 0 reply 

As part of some ongoing work, the SSHv2 hostkey was replaced. The new
fingerprint is:

e9:bf:6d:09:8d:10:e4:75:13:18:eb:98:d8:88:c8:54

So it looks like they reinstalled ssh.

-- 
Jim Segrave           address@hidden