[devel] Key changed on altair?

[devel] Key changed on altair?

[Mikhail Zabaluev]

[-- Attachment #1: Type: text/plain, Size: 451 bytes --]

Доброго времени суток.

Как это понимать?

[mhz@localhost mhz]$ ssh altair
The authenticity of host 'altair.altlinux.ru (194.67.87.171)' can't be
established.
RSA key fingerprint is
d7:9b:f1:f5:e3:cb:63:a1:3b:d8:fa:57:2f:38:1c:9a.
Are you sure you want to continue connecting (yes/no)?

-- 
Stay tuned,
  MhZ                                     JID: mookid@jabber.org
___________
Don't tell me what you dreamed last night for I've been reading Freud.

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]

Re: [devel] Key changed on altair?

[Aleksey Novodvorsky]

Mikhail Zabaluev wrote:

>Доброго времени суток.
>
>Как это понимать?
>
>[mhz@localhost mhz]$ ssh altair
>The authenticity of host 'altair.altlinux.ru (194.67.87.171)' can't be
>established.
>RSA key fingerprint is
>d7:9b:f1:f5:e3:cb:63:a1:3b:d8:fa:57:2f:38:1c:9a.
>Are you sure you want to continue connecting (yes/no)?
>
Хм. У меня то же самое. Боюсь только, что до конца праздников Дима не 
появится....
Днем ничего подобного не было, уходил я с ним вместе.

Rgrds, Алексей.

Re: [devel] Key changed on altair?

[Anton Farygin]

Mikhail Zabaluev wrote:

>Доброго времени суток.
>
>Как это понимать?
>
>[mhz@localhost mhz]$ ssh altair
>The authenticity of host 'altair.altlinux.ru (194.67.87.171)' can't be
>established.
>RSA key fingerprint is
>d7:9b:f1:f5:e3:cb:63:a1:3b:d8:fa:57:2f:38:1c:9a.
>Are you sure you want to continue connecting (yes/no)?
>
Вчера Дима поставил новый OpenSSH.

Но ключи не менялись.

Rgds,
Rider

P.S. А почему RSA а не DSA?

[devel] Re: Key changed on altair?

[Mikhail Zabaluev]

[-- Attachment #1: Type: text/plain, Size: 3089 bytes --]

Hello Anton,

On Sat, Jan 05, 2002 at 02:29:22PM +0300, Anton Farygin wrote:
>
> Mikhail Zabaluev wrote:
> 
> >Доброго времени суток.
> >
> >Как это понимать?
> >
> >[mhz@localhost mhz]$ ssh altair
> >The authenticity of host 'altair.altlinux.ru (194.67.87.171)' can't be
> >established.
> >RSA key fingerprint is
> >d7:9b:f1:f5:e3:cb:63:a1:3b:d8:fa:57:2f:38:1c:9a.
> >Are you sure you want to continue connecting (yes/no)?
> >
> Вчера Дима поставил новый OpenSSH.
> 
> Но ключи не менялись.
> 
> Rgds,
> Rider
> 
> P.S. А почему RSA а не DSA?

Не имею понятия. Вот выдержка из .ssh/config:

Host altair
    HostName altair.altlinux.ru
    Protocol 2
    Compression yes
    CompressionLevel 9
    IdentityFile ~/.ssh/id_altair

Лог соединения с -v (я до этого принял новый ключ сервера):

OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL 0x0090602f
debug1: Reading configuration data /home/mhz/.ssh/config
debug1: Applying options for altair
debug1: Reading configuration data /etc/openssh/ssh_config
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating port will not be
trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 501 geteuid 501 anon 1
debug1: Connecting to altair.altlinux.ru [194.67.87.171] port 22.
debug1: temporarily_use_uid: 501/501 (e=501)
debug1: restore_uid
debug1: temporarily_use_uid: 501/501 (e=501)
debug1: restore_uid
debug1: Connection established.
debug1: identity file /home/mhz/.ssh/id_altair type 2
debug1: Remote protocol version 2.0, remote software version
OpenSSH_3.0.2p1
debug1: match: OpenSSH_3.0.2p1 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_2.9p2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client blowfish-cbc hmac-md5 zlib
debug1: kex: client->server blowfish-cbc hmac-md5 zlib
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 131/256
debug1: bits set: 1608/3191
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'altair.altlinux.ru' is known and matches the RSA host
key.
debug1: Found key in /home/mhz/.ssh/known_hosts2:8
debug1: bits set: 1616/3191
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: Enabling compression at level 6.
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: publickey,password
debug1: next auth method to try is publickey
debug1: userauth_pubkey_agent: testing agent key dsa w/o comment
debug1: input_userauth_pk_ok: pkalg ssh-dss blen 817 lastkey 0x8093bd8
hint -1
debug1: ssh-userauth2 successful: method publickey

-- 
Stay tuned,
  MhZ                                     JID: mookid@jabber.org
___________
There is no such thing as fortune.  Try again.

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]

Re: [devel] Key changed on altair?

[Dmitry V. Levin]

[-- Attachment #1: Type: text/plain, Size: 907 bytes --]

On Sat, Jan 05, 2002 at 02:29:22PM +0300, Anton Farygin wrote:
> >Как это понимать?
> >
> >[mhz@localhost mhz]$ ssh altair
> >The authenticity of host 'altair.altlinux.ru (194.67.87.171)' can't be
> >established.
> >RSA key fingerprint is
> >d7:9b:f1:f5:e3:cb:63:a1:3b:d8:fa:57:2f:38:1c:9a.
> >Are you sure you want to continue connecting (yes/no)?
> >
> Вчера Дима поставил новый OpenSSH.
> 
> Но ключи не менялись.
> 
> P.S. А почему RSA а не DSA?

Теперь есть _и_ RSA _и_ DSA.
Ваш клиент по умолчанию первым проверяет RSA.


Regards,
	Dmitry

+-------------------------------------------------------------------------+
Dmitry V. Levin     mailto://ldv@alt-linux.org
ALT Linux Team      http://www.altlinux.ru/
Fandra Project      http://www.fandra.org/
+-------------------------------------------------------------------------+
UNIX is user friendly. It's just very selective about who its friends are.

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]

[devel] Re: Key changed on altair?

[Mikhail Zabaluev]

[-- Attachment #1: Type: text/plain, Size: 835 bytes --]

Hello Dmitry,

On Tue, Jan 08, 2002 at 06:27:13PM +0300, Dmitry V. Levin wrote:
>
> On Sat, Jan 05, 2002 at 02:29:22PM +0300, Anton Farygin wrote:
> > >Как это понимать?
> > >
> > >[mhz@localhost mhz]$ ssh altair
> > >The authenticity of host 'altair.altlinux.ru (194.67.87.171)' can't be
> > >established.
> > >RSA key fingerprint is
> > >d7:9b:f1:f5:e3:cb:63:a1:3b:d8:fa:57:2f:38:1c:9a.
> > >Are you sure you want to continue connecting (yes/no)?
> > >
> > Вчера Дима поставил новый OpenSSH.
> > 
> > Но ключи не менялись.
> > 
> > P.S. А почему RSA а не DSA?
> 
> Теперь есть _и_ RSA _и_ DSA.
> Ваш клиент по умолчанию первым проверяет RSA.

хорошо/плохо, как лучше настроить?

-- 
Stay tuned,
  MhZ                                     JID: mookid@jabber.org
___________
There's no such thing as a free lunch.
		-- Milton Friendman

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]

Re: [devel] Key changed on altair?

[Dmitry V. Levin]

[-- Attachment #1: Type: text/plain, Size: 632 bytes --]

On Wed, Jan 09, 2002 at 09:29:30AM +0200, Michael Shigorin wrote:
> > Теперь есть _и_ RSA _и_ DSA.
> > Ваш клиент по умолчанию первым проверяет RSA.
> Я тормоз или RSA == SSH1 == big_sec_hole?

SSH1 на altair'е нет.
RSA != SSH1, это разные категории.


Regards,
	Dmitry

+-------------------------------------------------------------------------+
Dmitry V. Levin     mailto://ldv@alt-linux.org
ALT Linux Team      http://www.altlinux.ru/
Fandra Project      http://www.fandra.org/
+-------------------------------------------------------------------------+
UNIX is user friendly. It's just very selective about who its friends are.

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]