Re: [Savannah-hackers] SSH keys

[Sylvain Beucler]

Hello,

I do not have any warning at savannah.gnu.org, savannah.nongnu.org and  
subversions.gnu.org. All of these machines have the SSH key reported in  
the CVS page you mentioned. So you should not get this message.

What machine are you trying to connect to?

Thanks,

--
Sylvain


On 2004.05.19 20:29, Thomas Degris wrote:
> Hello,
>
> I have the following message when updating my project with cvs :
>
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle  
> attack)!
> It is also possible that the RSA host key has just been changed.
> The fingerprint for the RSA key sent by the remote host is
> ea:56:e8:4a:7f:cf:c8:43:54:9c:83:4c:db:e7:54:bd.
> Please contact your system administrator.
> Add correct host key in /home/thomas/.ssh/known_hosts to get rid of  
> this message.
> Offending key in /home/thomas/.ssh/known_hosts:11
> Password authentication is disabled to avoid man-in-the-middle  
> attacks.
> Agent forwarding is disabled to avoid man-in-the-middle attacks.
> X11 forwarding is disabled to avoid man-in-the-middle attacks.
>
>
> On the cvs page of my project (called Satom) the RSA key is declared  
> to be :
> RSA: 1024 80:5a:b0:0c:ec:93:66:29:49:7e:04:2b:fd:ba:2c:d5
>
> So, I would like to know if this message is normal (it does not seem  
> so) or if my ssh configuration is wrong.
>
> Thanks,
>
> All the best,