Oh, You may have more than one entry in your known_hosts file that will need to be deleted. You may be able to use 'ssh-keygen -F [gerrit.asterisk.org]:29418' to locate the keys and 'ssh-keygen -R [gerrit.asterisk.org]:29418' to remove them.
On Fri, May 28, 2021 at 6:54 AM George Joseph <[email protected]> wrote: > The Gerrit upgrade is now complete. You'll probably see the "REMOTE HOST > IDENTIFICATION HAS CHANGED!" from ssh when you perform your first git > operation. See below... > > On Fri, May 21, 2021 at 7:38 AM George Joseph <[email protected]> wrote: > >> If you are a contributor and have cloned any of the repositories from >> gerrit.asterisk.org using an ssh URI like ssh://<username>@ >> gerrit.asterisk.org:29418, read on. Otherwise you can skip this message. >> >> Normally we don't announce Gerrit upgrades because they usually don't >> impact community developers but this one's a bit different. Back in 2015 >> when we commissioned the Asterisk Gerrit instance, we generated the SSH >> host key with an algorithm and length that was appropriate at that time. >> That algorithm/key length combination is no longer considered secure >> however, and the latest version of Gerrit (3.4.0) doesn't support it. In >> fact, the upgrade process automatically regenerates the key to one with a >> stronger algorithm and length. >> >> So, how does this affect you? The first time you perform a git action >> that needs to contact gerrit.asterisk.org after it's been upgraded, >> you'll probably get an error or warning like so... >> >> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ >>> @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ >>> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ >>> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! >>> Someone could be eavesdropping on you right now (man-in-the-middle >>> attack)! >>> It is also possible that a host key has just been changed. >>> ... >>> Offending RSA key in /home/<username>/.ssh/known_hosts:nn >>> ... >> >> >> All you have to do to continue is remove the old host key from your >> known_hosts file and retry the git command. >> >> Just wanted to give you a heads up. >> >> -- >> George Joseph >> Asterisk Software Developer >> Check us out at www.sangoma.com and www.asterisk.org >> [image: image.png] >> >
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- asterisk-dev mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-dev
