fedora-infrastructure

#9458 fedorapeople.org SSHFP does not include ssh-ed25519 key
Closed: Fixed by kevin. Opened by pemensik.

Closed: Fixed
Reopen Issue

Describe what you would like us to do:

Add remaining SSHFP records for fedorapeople.org machine. If I use ssh -o 'VerifyHostKeyDNS yes' fedorapeople.org, it requires fingerprint confirmation. But I have options edns0 trust-ad and dnssec validation working, it should accept automatically.
Then I noticed new key is not added to SSHFP records.

$ ssh-keyscan -D fedorapeople.org
; fedorapeople.org:22 SSH-2.0-OpenSSH_7.4
fedorapeople.org IN SSHFP 1 1 5829b0460c2e9296bdbd835416c2615dcf80d22a
fedorapeople.org IN SSHFP 1 2 b0369e7d313c9f8e7c90efb53844cb43d98f11a1ab84396767c57bf699ff30c3
; fedorapeople.org:22 SSH-2.0-OpenSSH_7.4
; fedorapeople.org:22 SSH-2.0-OpenSSH_7.4
fedorapeople.org IN SSHFP 4 1 b421ba20371eef0a5392b9a3c40fb1b09d6349e8
fedorapeople.org IN SSHFP 4 2 0d352b037c3d4dc2ae9d448b10fa052b8b80aab74729d22fed0a223d08c5d5be
; fedorapeople.org:22 SSH-2.0-OpenSSH_7.4
; fedorapeople.org:22 SSH-2.0-OpenSSH_7.4

$ dig +short fedorapeople.org sshfp
1 2 B0369E7D313C9F8E7C90EFB53844CB43D98F11A1AB84396767C57BF6 99FF30C3
1 1 5829B0460C2E9296BDBD835416C2615DCF80D22A

Please check other servers with the same algorithm supported as well.

When do you need this to be done by? (2020/11/25)

Fixed. Sorry about that. I updated other places, but forgot this one. ;(

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Lowest
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.