appveyor / ci

AppVeyor community support repository
https://www.appveyor.com
344 stars 64 forks source link

GitHub's RSA SSH host key was rotated #3871

Closed egraff closed 1 year ago

egraff commented 1 year ago

See https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/

The known_hosts file needs updating on Windows workers to avoid git commands towards GitHub failing with the following error:

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@       WARNING: POSSIBLE DNS SPOOFING DETECTED!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The RSA host key for github.com has changed,
and the key for the corresponding IP address 140.82.113.3
is unknown. This could either mean that
DNS SPOOFING is happening or the IP address for the host
and its host key have changed at the same time.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA2[56]:uNiVztksCsDhcc0u9e8BujQXVUpKZIDTMczCvj3tD2s.
Please contact your system administrator.
Add correct host key in /c/Users/appveyor/.ssh/known_hosts to get rid of this message.
Offending RSA key in /c/Users/appveyor/.ssh/known_hosts:1024
Password authentication is disabled to avoid man-in-the-middle attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.
FeodorFitsner commented 1 year ago

What build image do you use?

egraff commented 1 year ago

This was with the Visual Studio 2015 image.

FeodorFitsner commented 1 year ago

Thanks, we are looking into that.

FeodorFitsner commented 1 year ago

It's been fixed.