On Sep 20, 2009, at 3:18 AM, Cyril Plisko wrote:

And ssh to hg.opensolaris.org alerts on eavasdropping attack.

$ hg pull -vu
running ssh [email protected] "hg -R hg/osarm/onarm-dev serve --stdio"
remote: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
remote: @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
remote: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
remote: IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
remote: Someone could be eavesdropping on you right now
(man-in-the-middle attack)!
remote: It is also possible that the RSA host key has just been changed.
remote: The fingerprint for the RSA key sent by the remote host is
remote: 53:54:25:4b:3c:27:40:2d:4b:d5:2b:92:12:15:87:49.
remote: Please contact your system administrator.

You likely saw the key warning since, normally, all the SCM transactions occur on one host, but the service can sometimes failover to the backup host ~00.20 PT when the webapps get restarted. Both systems should have the same keys, but it appears that they've gotten out of sync so I'll fix those today. If you see that again, let us know.

e.
_______________________________________________
website-discuss mailing list
[email protected]

Reply via email to