[guardian-dev] odd problem with github giving me the wrong ssh fingerprint

Lee Azzarello lee at guardianproject.info
Wed Dec 4 00:54:07 EST 2013


Key management is hard. Web applications change their backend servers
sometimes. This is usually followed by a host key change and the
operator must copy the old key to the new server. You may have
encountered this. Or someone is totally owning your shit! I'm voting
for operator error.

-lee

On Wed, Dec 4, 2013 at 12:42 AM, Hans-Christoph Steiner
<hans at guardianproject.info> wrote:
>
> This evening I was trying to push some commits to github, and for about 10
> minutes, I was getting the wrong SSH fingerprint from github.  I didn't seen
> anything using traceroute and tcptraceroute, it was back to normal before I
> could try other stuff.  This is what I was getting:
>
> $ git push origin master
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle attack)!
> It is also possible that a host key has just been changed.
> The fingerprint for the RSA key sent by the remote host is
> 2e:93:0a:8a:de:d3:a8:e5:50:72:f2:3a:35:4f:ae:2d.
> Please contact your system administrator.
> Add correct host key in /home/hans/.ssh/known_hosts to get rid of this message.
> Offending RSA key in /home/hans/.ssh/known_hosts:213
>   remove with: ssh-keygen -f "/home/hans/.ssh/known_hosts" -R github.com
> RSA host key for github.com has changed and you have requested strict checking.
> Host key verification failed.
> fatal: The remote end hung up unexpectedly
>
>
> --
> PGP fingerprint: 5E61 C878 0F86 295C E17D  8677 9F0F E587 374B BE81
>
>
> _______________________________________________
> Guardian-dev mailing list
>
> Post: Guardian-dev at lists.mayfirst.org
> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>
> To Unsubscribe
>         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>         Or visit: https://lists.mayfirst.org/mailman/options/guardian-dev/lee%40guardianproject.info
>
> You are subscribed as: lee at guardianproject.info
>


More information about the Guardian-dev mailing list