[openstack-dev] [infra] Gerrit host key changed

Jeremy Stanley fungi at yuggoth.org
Mon Apr 28 19:33:10 UTC 2014


On 2014-04-25 10:40:02 -0700 (-0700), James E. Blair wrote:
[...]
> Of course, for some of us, that's not a lot. So on Monday, we'll
> send a GPG signed email with the fingerprints as well. And this is
> just another reminder that as a community, we should endeavor to
> build our GPG web of trust. See you at the Summit!

As noted, the Gerrit Git+SSH/API host keys for review.openstack.org
have been regenerated during the course of today's upgrade. The
corresponding new key fingerprints are as follows:

    28:c6:42:b7:44:d2:48:64:c1:3f:31:d8:1b:6e:3b:63 (RSA)
    6c:95:14:fd:8b:0f:de:d3:e3:10:77:5a:de:22:8a:5f (DSA)

They are also published at the following URL within its WebUI for
convenience:

    https://review.openstack.org/#/settings/ssh-keys

When you're presented with an error message about a host key
mismatch, you'll probably need to strip the hashed entry for the old
host key from your known hosts file before being able to accept the
new one. For modern versions of OpenSSH, this can be done as
outlined here:

    https://wiki.openstack.org/wiki/GerritUpgrade#DNS_Spoofing_Warning

-- 
Jeremy Stanley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: Digital signature
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140428/cae15d4e/attachment.pgp>


More information about the OpenStack-dev mailing list