Re: [Savannah-users] sftp authentication error

[Sylvain Beucler]

On Mon, Jan 21, 2008 at 11:01:53AM +0100, address@hidden wrote:
> Am Monday, dem 21. Jan 2008 schrieb Sylvain Beucler:
> 
> > > I noticed a few days ago that Konqueror came up with a certificate error 
> > > when 
> > > I visited Savannah, I said to use it for now (I think). I will try this 
> > > from 
> > > another browser -- I'm sure the problem is with Konqueror.
> > 
> > The certificate for the web interface changed, but this has nothing to
> > do with SFTP (check http://savannah.nongnu.org/tls/ for details)
> 
> Well, my sftp command also moaned that the host-key is different.
> But when I accepted the new key, all went well again.

As I said the TLS certificate for savannah.[non]gnu.org has nothing to
do the SSH key for download.sv.gnu.org.

More importantly: it is absolutely not normal that sftp complained
about a host key change, because the key for the download system
didn't change since November 2005.

Here are the current fingerprints:
sv_dl:/etc/ssh# ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key
1024 80:5a:b0:0c:ec:93:66:29:49:7e:04:2b:fd:ba:2c:d5 
/etc/ssh/ssh_host_rsa_key.pub
sv_dl:/etc/ssh# ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key
1024 4d:c8:dc:9a:99:96:ae:cc:ce:d3:2b:b0:a3:a4:95:a5 
/etc/ssh/ssh_host_dsa_key.pub

You can check them with:
ssh-keygen -l -f ~/.ssh/known_hosts

or if your known_hosts file is hashed:
ssh-keygen -F dl.sv.gnu.org > tmpkey
ssh-keygen -l -f tmpkey

-- 
Sylvain