New ssh host key on dk.migrid.org

16 views
Skip to first unread message

Jonas Bardino

unread,
Sep 1, 2014, 4:52:32 AM9/1/14
to mig...@googlegroups.com
Hi list

The following is only relevant for users accessing their MiG home through sftp or mounting it with sshfs. If you don't use it or know what it means you can probably just ignore this message.

We updated the expired SSL host certificate on dk.migrid.org and changed the ssh host key as well while at it. Please update your ~/.ssh/known_hosts if you run into problems accessing your MiG home with (sftp or) sshfs.
You can check the saved host key with the command
ssh-keygen -F \[dk.migrid.org\]:2222
and if it doesn't  say
BLA BLA ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCwxYFM1tzy7RyNpPFCSVHG0fTiq1SWnmsFHCJp4UskAuodbWAzuKNml9HBI0Bk0ynOVhMfneh5sv2sFuXfFTHiNVUM+vpqtSNCHEF/2jYHzPnp5aT4jvrTUmJ1PYmzfNQonjrWxPpXt9ROfLAhZib2qs5QzkiqpcY3NNh8EOEZOQ==
you can either manually update the known_hosts file or fetch the new host key by removing the old one with
ssh-keygen -R \[dk.migrid.org\]:2222
and connect again. You should then be prompted to accept the key with
RSA key fingerprint is 9b:59:be:44:a4:28:83:c0:0e:23:09:c2:66:69:b7:30.
Afterwards it should work as usual again.

Cheers, Jonas

Jonas Bardino

unread,
Sep 15, 2014, 4:18:10 AM9/15/14
to mig...@googlegroups.com

Some users have reported that it's necessary to also remove the old hostkey saved for the IP address. Otherwise the connection would initially succeed but then fail after a while.
You can remove the old saved IP hostkey with the command:
ssh-keygen -R \[130.225.213.59\]:2222

Cheers, Jonas

 
Reply all
Reply to author
Forward
0 new messages