[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Savannah-users] sftp authentication error
From: |
Sylvain Beucler |
Subject: |
Re: [Savannah-users] sftp authentication error |
Date: |
Mon, 21 Jan 2008 11:54:37 +0100 |
User-agent: |
Mutt/1.5.17 (2007-11-01) |
On Mon, Jan 21, 2008 at 11:01:53AM +0100, address@hidden wrote:
> Am Monday, dem 21. Jan 2008 schrieb Sylvain Beucler:
>
> > > I noticed a few days ago that Konqueror came up with a certificate error
> > > when
> > > I visited Savannah, I said to use it for now (I think). I will try this
> > > from
> > > another browser -- I'm sure the problem is with Konqueror.
> >
> > The certificate for the web interface changed, but this has nothing to
> > do with SFTP (check http://savannah.nongnu.org/tls/ for details)
>
> Well, my sftp command also moaned that the host-key is different.
> But when I accepted the new key, all went well again.
As I said the TLS certificate for savannah.[non]gnu.org has nothing to
do the SSH key for download.sv.gnu.org.
More importantly: it is absolutely not normal that sftp complained
about a host key change, because the key for the download system
didn't change since November 2005.
Here are the current fingerprints:
sv_dl:/etc/ssh# ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key
1024 80:5a:b0:0c:ec:93:66:29:49:7e:04:2b:fd:ba:2c:d5
/etc/ssh/ssh_host_rsa_key.pub
sv_dl:/etc/ssh# ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key
1024 4d:c8:dc:9a:99:96:ae:cc:ce:d3:2b:b0:a3:a4:95:a5
/etc/ssh/ssh_host_dsa_key.pub
You can check them with:
ssh-keygen -l -f ~/.ssh/known_hosts
or if your known_hosts file is hashed:
ssh-keygen -F dl.sv.gnu.org > tmpkey
ssh-keygen -l -f tmpkey
--
Sylvain
Re: [Savannah-users] sftp authentication error, Donn, 2008/01/21