On Thu, Jul 03, 2025 at 07:51:47AM +0000, Zbigniew Jędrzejewski-Szmek wrote:
> On Wed, Jul 02, 2025 at 06:14:15PM -0700, Kevin Fenzi via devel-announce 
> wrote:
> > If you are trying to use the new src.fedoraproject.org server, you may have
> > noticed it's ssh host keys changed. In the past we kept the old keys
> > but this time we made a clean break. You can verify the keys by getting:
> > https://admin.fedoraproject.org/ssh_known_hosts and adding it to
> > your local .ssh/known_hosts. This will allow ssh to see the new host
> > keys are signed with our CA. You can also use our sshfp records
> > if you are using a dnssec enabled resolver.
> 
> I don't see any sshfp records for src.fedoraproject.org.
> pkgs.fedoraproject.org and fedorapeople.org have some though.

With https://github.com/systemd/systemd/pull/38046:

$ resolvectl -t sshfp query pkgs.fedoraproject.org
pkgs.fedoraproject.org IN SSHFP RSA     SHA-1   
18270c9131ef9664861f5aa675a981146573cce0
pkgs.fedoraproject.org IN SSHFP RSA     SHA-256 
b067e6eb4c3e2d0e8bb37d6799493b762131816fe979940bbe660470abe6efbb
pkgs.fedoraproject.org IN SSHFP ECDSA   SHA-1   
a1ad871a5eabe3027728d498a89895fb5bf5b290
pkgs.fedoraproject.org IN SSHFP ECDSA   SHA-256 
c3dc523f99bb5155ec87f40fd1aa198c68f349d75beeccf60e87b44c9b461907
pkgs.fedoraproject.org IN SSHFP Ed25519 SHA-1   
e1265f46012ee40967127e06cf5533b270568428
pkgs.fedoraproject.org IN SSHFP Ed25519 SHA-256 
acaa1ee6292d01f1ae7881fdf03aaf7d7b0814e34e94c3558a25e4d1aaab8f94
-- 
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to