Re: [Bug-gnubg] CVS access problem

[Joern Thyssen]

On Mon, Aug 04, 2003 at 01:22:55PM +0200, Olivier Baur wrote
> Hi all!
> 
> I've tried to update my gnubg today, and here is the message I get:
> 
> [s192:~/gnubg/gnubg-curversion/gnubg] olivierb% cvs update
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle 
> attack)!
> It is also possible that the RSA1 host key has just been changed.
> The fingerprint for the RSA1 key sent by the remote host is
> bb:04:5c:4b:0f:c5:c0:7c:5d:cf:d7:c2:bf:59:1a:dc.
> Please contact your system administrator.
> Add correct host key in /Users/olivierb/.ssh/known_hosts to get rid of 
> this message.
> Offending key in /Users/olivierb/.ssh/known_hosts:1
> RSA1 host key for subversions.gnu.org has changed and you have 
> requested strict checking.
> Host key verification failed.
> cvs [update aborted]: end of file from server (consult above messages 
> if any)
> 
> 
> What has happened?

It looks like savannah got a new key.

> Has the fingerprint for Savanah really changed?
> How do I check this out?

Perhaps they've written something on savannah.gnu.org?

You can fix this by removing the savannah.gnu.org line from
/Users/olivierb/.ssh/known_hosts.

Jørn