Re: [devel] gyle host key has changed?

Re: [devel] gyle host key has changed?

[Ivan A. Melnikov]

On Thu, Oct 01, 2020 at 02:05:39AM +0300, Андрей Бергман wrote:
>    Други, я получил жуткое от ssh:
>    ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>    ssh: @ WARNING: POSSIBLE DNS SPOOFING DETECTED! @
>    ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>    ssh: The ED25519 host key for [gyle.altlinux.org]:222 has changed,
>    ssh: and the key for the corresponding IP address [194.107.17.31]:222
>    ssh: is unknown. This could either mean that
>    ssh: DNS SPOOFING is happening or the IP address for the host
>    ssh: and its host key have changed at the same time.
>    ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>    ssh: @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
>    ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>    ssh: IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
>    ssh: Someone could be eavesdropping on you right now (man-in-the-middle
>    attack)!
>    ssh: It is also possible that a host key has just been changed.
>    ssh: The fingerprint for the ED25519 key sent by the remote host is
>    SHA256:tPhPXiXtakA0oojE57MJPEJi+CQSxC0K8ifaW3oEoRs.
>    ssh: Please contact your system administrator.
>    ssh: Add correct host key in /home/vkni/.ssh/known_hosts to get rid of
>    this message.
>    ssh: Offending ED25519 key in /home/vkni/.ssh/known_hosts:11
>    ssh: ED25519 host key for [gyle.altlinux.org]:222 has changed and you have
>    requested strict checking.
>    ssh: Host key verification failed.
>     
>     
>    Это ложная тревога или нет?

У gyle сменился ключ после переезда на новый хост. Почитайте это тред.

https://lists.altlinux.org/pipermail/devel/2020-September/211820.html

Fingerprint выглядит правдоподобно, но я бы рекомендовал попараноить:
найдите вот это письмо от Глеба, проверьте подпись и убедитесь
в совпадении самостоятельно:

https://lists.altlinux.org/pipermail/devel/2020-September/211845.html

-- 
  wbr,
    iv m.