develooper Front page | perl.perl5.porters | Postings from March 2023

github changed ssh key?

Thread Next
From:
Dave Mitchell
Date:
March 24, 2023 12:21
Subject:
github changed ssh key?
Message ID:
ZB2VxmvKpNNtGIvf@iabyn.com
I just tried to do a 'git fetch' and am seeing:

```
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:uNiVztksCsDhcc0u9e8BujQXVUpKZIDTMczCvj3tD2s.
Please contact your system administrator.
Add correct host key in /home/davem/.ssh/known_hosts to get rid of this message.
Offending RSA key in /home/davem/.ssh/known_hosts:59
Host key for github.com has changed and you have requested strict checking.
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
```

I can obviously "fix" this by deleting the line from known_hosts, but
have github actually changed their key, or am I seeing a genuine
man-in-middle attack, or what?


.git/config:
    ...
    [remote "origin"]
            fetch = +refs/heads/*:refs/remotes/origin/*
            url = git@github.com:Perl/perl5.git

~/.ssh/known_hosts:59:
    github.com,140.82.118.4 ssh-rsa AAAAB3Nz ...



-- 
"Procrastination grows to fill the available time"
    -- Mitchell's corollary to Parkinson's Law

Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About