Front page | perl.perl5.porters |
Postings from March 2023
github changed ssh key?
Thread Next
From:
Dave Mitchell
Date:
March 24, 2023 12:21
Subject:
github changed ssh key?
Message ID:
ZB2VxmvKpNNtGIvf@iabyn.com
I just tried to do a 'git fetch' and am seeing:
```
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:uNiVztksCsDhcc0u9e8BujQXVUpKZIDTMczCvj3tD2s.
Please contact your system administrator.
Add correct host key in /home/davem/.ssh/known_hosts to get rid of this message.
Offending RSA key in /home/davem/.ssh/known_hosts:59
Host key for github.com has changed and you have requested strict checking.
Host key verification failed.
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
```
I can obviously "fix" this by deleting the line from known_hosts, but
have github actually changed their key, or am I seeing a genuine
man-in-middle attack, or what?
.git/config:
...
[remote "origin"]
fetch = +refs/heads/*:refs/remotes/origin/*
url = git@github.com:Perl/perl5.git
~/.ssh/known_hosts:59:
github.com,140.82.118.4 ssh-rsa AAAAB3Nz ...
--
"Procrastination grows to fill the available time"
-- Mitchell's corollary to Parkinson's Law
Thread Next
-
github changed ssh key?
by Dave Mitchell