NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

misc/51642: anoncvs mirror list should mention the sha256 key fingerprints



>Number:         51642
>Category:       misc
>Synopsis:       anoncvs mirror list should mention the sha256 key fingerprints
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    misc-bug-people
>State:          open
>Class:          doc-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Nov 22 09:20:01 +0000 2016
>Originator:     Miod Vallat
>Release:        
>Organization:
>Environment:
>Description:
The anoncvs mirror list (http://www.netbsd.org/mirrors/#anoncvs) only mentions the md5 fingerprints of the ssh-capable servers. However, nowadays, ssh(1) will only display the sha256 key fingerprint when connecting to the server for the first time.

Mentioning the sha256 key fingerprints on the web page would allow the fingerprint to be more easily checked.
>How-To-Repeat:
Remove anoncvs ssh key from ~/.ssh/known_hosts, then checkout or update sources with anoncvs over ssh.
>Fix:



Home | Main Index | Thread Index | Old Index