[Labs-l] [Tools] Tool Labs bastion ssh fingerprint changed

Andrew Bogott abogott at wikimedia.org
Mon Mar 23 22:07:28 UTC 2015


On 3/22/15 11:26 PM, Ricordisamoa wrote:
> Il 22/03/2015 22:39, Yuvi Panda ha scritto:
>> Hello!
>>
>> If you try to ssh to tools-login now, you might get a scary looking
>> SSH warning. Do not fear! Things are all good. The new fingerprint is:
>>
>> f9:c1:53:72:f0:57:85:dd:6f:4d:cb:f6:d0:ce:84:aa
>>
>> And you can remove the entry line for tools-login from your
>> ~/.ssh/known_hosts and proceed to log in.
>>
>> Why was this happening? tools-login the old instance is a bit messed
>> up, and the fastest way to restore service is to just create a new
>> instance and point the old IP at it. This also allowed me to upgrade
>> them to trusty, which would give you new versions of a lot of software
>> :D We have preserved the old instance for forensics, and will figure
>> out what had happened over the next few days.
>>
>> Thank you for your understanding, and sorry about the scare :)
>>
>
> I keep getting "80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57"...

That's the ECDSA key, and the key on wikitech is the RSA key.  This is 
something we need to sort out, but in the meantime if you add 
-oHostKeyAlgorithms='ssh-rsa' to your ssh commandline it should prompt 
you with the key on wikitech.

-A





More information about the Labs-l mailing list