From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-1.7 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS autolearn=no autolearn_force=no version=3.4.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:date:from:to:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to; bh=wGVKr+yVQ5a125NhGp8OGE7WOX2On+y3yaC5DfFg1yY=; b=q4wjwHTMynlNJUnkpvbenDXKAC0JLs848qOd3tD6SCQ8HkYE6X5Tifyx0xh+XQB4V+ oaO6ZENdYcZlwnkLYNbz2hlacuLyZ2mxOZbByBlrJZESRxqNCYN1ym6icUIcvwtRhbZB qRORjIAb6p0Y4orYsWkP3ErOqEMb5mRIgucpPNk9nXuVN0p75AxMzn4HUZR0FPXI3mSL bB1e6ChI8fU2CMVJHnwHqzf8C3gszbX00hQ3zOzL5l2XWVTsw7GkL4KKVMuM+M6pcIwK gOpzBF4KmAcUYYLybp/39HNpHeRIr9T7N4/hslDd4RqoizZj1spuNfPUTJK15IWSW8ws kjDg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:date:from:to:subject:message-id :references:mime-version:content-disposition :content-transfer-encoding:in-reply-to; bh=wGVKr+yVQ5a125NhGp8OGE7WOX2On+y3yaC5DfFg1yY=; b=EF/ys4V1PCa1rM1jczOGHodIDsz/QTZ30Jh2WYw10c/8Mll1Uzf14lb+GA4AnlgU5a 1lxAJEdAhRXBNcCh2Cc4JxUwNeWgXG27ShV4b/LORLQTW09G6TGF8LB4VcVLh9F/JWeh cceEvitA779kSs0epnrLlICsY5qoRHUmqZRMNkTy/7jE84r0FYvvOpFI+ads/ppLiFes /spmlPwrKdKk3NZ+ccnx6cf3VngI8zhYetwHJssHtT7ufWstN2uKn+wpsWDg5FMiccHF kE8i8+iQgsI5TMXq7Fnu+WEt8wnAL86gFiLgNS6W0D7KEtDsxIgyj1Wn2XYUaBoQP73V QNqw== X-Gm-Message-State: AOAM532Fppn9u2eXSmbF46/luNdFWofK7bX2LHIBXS0tj6xrEXW4NwZP 1QqDHLrST/KmBUWQ4TxHtyVgxZKd74r5iw== X-Google-Smtp-Source: ABdhPJx6DEyex1LUq2IelMN9UAEluZLPriWI/3l8wBY4ZQL+aOxxGfxiplkBm5PtG6QERW7bOfjnJg== X-Received: by 2002:a19:6419:: with SMTP id y25mr1794665lfb.333.1601526365296; Wed, 30 Sep 2020 21:26:05 -0700 (PDT) Sender: "Ivan A. Melnikov" Date: Thu, 1 Oct 2020 08:26:03 +0400 From: "Ivan A. Melnikov" To: ALT Linux Team development discussions Message-ID: <20201001042603.egobx2mhxc3qmp5j@titan.localdomain> References: <7771131601507078@mail.yandex.ru> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <7771131601507078@mail.yandex.ru> Subject: Re: [devel] gyle host key has changed? X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux Team development discussions List-Id: ALT Linux Team development discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2020 04:26:07 -0000 Archived-At: List-Archive: List-Post: On Thu, Oct 01, 2020 at 02:05:39AM +0300, Андрей Бергман wrote: > Други, я получил жуткое от ssh: > ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ > ssh: @ WARNING: POSSIBLE DNS SPOOFING DETECTED! @ > ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ > ssh: The ED25519 host key for [gyle.altlinux.org]:222 has changed, > ssh: and the key for the corresponding IP address [194.107.17.31]:222 > ssh: is unknown. This could either mean that > ssh: DNS SPOOFING is happening or the IP address for the host > ssh: and its host key have changed at the same time. > ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ > ssh: @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ > ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ > ssh: IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! > ssh: Someone could be eavesdropping on you right now (man-in-the-middle > attack)! > ssh: It is also possible that a host key has just been changed. > ssh: The fingerprint for the ED25519 key sent by the remote host is > SHA256:tPhPXiXtakA0oojE57MJPEJi+CQSxC0K8ifaW3oEoRs. > ssh: Please contact your system administrator. > ssh: Add correct host key in /home/vkni/.ssh/known_hosts to get rid of > this message. > ssh: Offending ED25519 key in /home/vkni/.ssh/known_hosts:11 > ssh: ED25519 host key for [gyle.altlinux.org]:222 has changed and you have > requested strict checking. > ssh: Host key verification failed. >   >   > Это ложная тревога или нет? У gyle сменился ключ после переезда на новый хост. Почитайте это тред. https://lists.altlinux.org/pipermail/devel/2020-September/211820.html Fingerprint выглядит правдоподобно, но я бы рекомендовал попараноить: найдите вот это письмо от Глеба, проверьте подпись и убедитесь в совпадении самостоятельно: https://lists.altlinux.org/pipermail/devel/2020-September/211845.html -- wbr, iv m.