From: "Ivan A. Melnikov" <iv@altlinux.org>
To: ALT Linux Team development discussions <devel@lists.altlinux.org>
Subject: Re: [devel] gyle host key has changed?
Date: Thu, 1 Oct 2020 08:26:03 +0400
Message-ID: <20201001042603.egobx2mhxc3qmp5j@titan.localdomain> (raw)
In-Reply-To: <7771131601507078@mail.yandex.ru>
On Thu, Oct 01, 2020 at 02:05:39AM +0300, Андрей Бергман wrote:
> Други, я получил жуткое от ssh:
> ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> ssh: @ WARNING: POSSIBLE DNS SPOOFING DETECTED! @
> ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> ssh: The ED25519 host key for [gyle.altlinux.org]:222 has changed,
> ssh: and the key for the corresponding IP address [194.107.17.31]:222
> ssh: is unknown. This could either mean that
> ssh: DNS SPOOFING is happening or the IP address for the host
> ssh: and its host key have changed at the same time.
> ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> ssh: @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
> ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> ssh: IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> ssh: Someone could be eavesdropping on you right now (man-in-the-middle
> attack)!
> ssh: It is also possible that a host key has just been changed.
> ssh: The fingerprint for the ED25519 key sent by the remote host is
> SHA256:tPhPXiXtakA0oojE57MJPEJi+CQSxC0K8ifaW3oEoRs.
> ssh: Please contact your system administrator.
> ssh: Add correct host key in /home/vkni/.ssh/known_hosts to get rid of
> this message.
> ssh: Offending ED25519 key in /home/vkni/.ssh/known_hosts:11
> ssh: ED25519 host key for [gyle.altlinux.org]:222 has changed and you have
> requested strict checking.
> ssh: Host key verification failed.
>
>
> Это ложная тревога или нет?
У gyle сменился ключ после переезда на новый хост. Почитайте это тред.
https://lists.altlinux.org/pipermail/devel/2020-September/211820.html
Fingerprint выглядит правдоподобно, но я бы рекомендовал попараноить:
найдите вот это письмо от Глеба, проверьте подпись и убедитесь
в совпадении самостоятельно:
https://lists.altlinux.org/pipermail/devel/2020-September/211845.html
--
wbr,
iv m.
parent reply other threads:[~2020-10-01 4:26 UTC|newest]
Thread overview: expand[flat|nested] mbox.gz Atom feed
[parent not found: <7771131601507078@mail.yandex.ru>]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20201001042603.egobx2mhxc3qmp5j@titan.localdomain \
--to=iv@altlinux.org \
--cc=devel@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Team development discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/devel/0 devel/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 devel devel/ http://lore.altlinux.org/devel \
devel@altlinux.org devel@altlinux.ru devel@lists.altlinux.org devel@lists.altlinux.ru devel@linux.iplabs.ru mandrake-russian@linuxteam.iplabs.ru sisyphus@linuxteam.iplabs.ru
public-inbox-index devel
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.devel
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git