#2046 https://admin.fedoraproject.org/ssh_known_hosts is missing aliases for fedorahosted like bzr.fedorahosted.org
Closed: Fixed None Opened 9 years ago by till.

= phenomenon =

I wanted to check the fingerprint of bzr.fedorahosted.org and therefore looked at

https://admin.fedoraproject.org/fingerprints which contains a link to https://admin.fedoraproject.org/ssh_known_hosts

But bzr.fedorahosted.org cannot be found in the list, only 66.135.52.17,192.168.1.17,hosted1.fedoraproject.org,hosted1 is.

= reason =

The procedure to create the ssh_know_hosts does not consider all hostnames for a host.

= recommendation =

Add all hostnames to the ssh_know_hosts file


Proposed patch:

diff --git a/modules/ssh/files/ssh_known_hosts b/modules/ssh/files/ssh_known_hosts
index 5c9cb65..4edaf45 100644
--- a/modules/ssh/files/ssh_known_hosts
+++ b/modules/ssh/files/ssh_known_hosts
@@ -174,7 +174,7 @@
 66.35.62.162,192.168.1.7,proxy3.fedoraproject.org,proxy3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwcwJucG6NlvBYGIMHJmM+YSLf1EicuQaU0RXBZuDDMk3p8hh4b3unm345Z5RA4ztiQF/94opmQhabuka9etvMZHv0am2G5FiJAyTt1pPuILhFLY5Rs67NMlKlX0a0PZInYwSgrG9t2qJRFg9d+wEvG6DXs/U9JiUqcSWolvGTJuwdBY8YeobfMV8U6sG9DYiasXbX6G+5pr4U2ghhU2TNIjVAtyAeK2HYT7SjkU82X6XEqiWdlbIFGKNdTVXk5OWzR7vZnGoYJehU7GKNspCMakCweDEgKgkzIn7JHspO/VgHvQcFMQhHhdHBIOuTKZVPErNT0NmlPlB6/lc5FnRbw==
 66.35.62.164,smtp-mm2.fedoraproject.org,smtp-mm2 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAp+1RIkE3VKgvXTVDxb6M4GPnbnyoc4FGTKtqDoh8t2Bn1l0jJPRRNepUHOB8SMpndfq2U+gQFEG71i0EVZNEjXEK3jgYFtH65mPQDYTQkXPKkbWbhYnTVs3z3pGaO4Bazio5Xm9N2XqXbC+fFwyUYhAN9x+OqCN39IEQT0o/DwvsR2Ct2RMC1ITT17UvhDC2mKQGnoxGnXHE+2rpq+1DYMpkSHdQ8h5B76xTAkmmO3iIQ2rrwLt9RJAsA1gIEEF3HXx/BCYk8NfHP38X9H75V1Ui4dldlX7RB3Q0CNkD2YPyArDUcZ1KCIB53hftUojmgTNhPq4ZppWTW/g14Zc9fw==
 66.35.62.166,wildcard.fedoraproject.org,wildcard ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwcwJucG6NlvBYGIMHJmM+YSLf1EicuQaU0RXBZuDDMk3p8hh4b3unm345Z5RA4ztiQF/94opmQhabuka9etvMZHv0am2G5FiJAyTt1pPuILhFLY5Rs67NMlKlX0a0PZInYwSgrG9t2qJRFg9d+wEvG6DXs/U9JiUqcSWolvGTJuwdBY8YeobfMV8U6sG9DYiasXbX6G+5pr4U2ghhU2TNIjVAtyAeK2HYT7SjkU82X6XEqiWdlbIFGKNdTVXk5OWzR7vZnGoYJehU7GKNspCMakCweDEgKgkzIn7JHspO/VgHvQcFMQhHhdHBIOuTKZVPErNT0NmlPlB6/lc5FnRbw==
-66.135.52.17,192.168.1.17,hosted1.fedoraproject.org,hosted1 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvrDCEFQAEtTskK4sOxlAX/0PG1+Ykw4yTujyiRd+SOnhcuircuQubdD0PEO11bq0jD9P9cFg67TQ7Y57xBLGHBXlJ7j7lbVsVwmWcN2h9i+U28FjE63QzxvVNFNWs/BIXk+2/20NZj4XxjvldfLTOKEh0srwGiMahzH1URksIq9OfaP9NggbteTd2S3FLd8L8D7sWrsDyD5zzfceoJAs8Tqz4X+5Eqs+56Z3qrnrZkPNkVisJ1AY5FKulGYSAaRLlYvL5kuLs+g0e9NGmm2ivrP+8fE/0k4FAtQjRc3MzB4wcDR0HAu09euwdW+ySWLA99FEmWBEDbkglZ4kmjeTYw==
+66.135.52.17,192.168.1.17,hosted1.fedoraproject.org,hosted1,fedorahosted.org,git.fedorahosted.org,svn.fedorahosted.org,bzr.fedorahosted.org,hg.fedorahosted.org ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvrDCEFQAEtTskK4sOxlAX/0PG1+Ykw4yTujyiRd+SOnhcuircuQubdD0PEO11bq0jD9P9cFg67TQ7Y57xBLGHBXlJ7j7lbVsVwmWcN2h9i+U28FjE63QzxvVNFNWs/BIXk+2/20NZj4XxjvldfLTOKEh0srwGiMahzH1URksIq9OfaP9NggbteTd2S3FLd8L8D7sWrsDyD5zzfceoJAs8Tqz4X+5Eqs+56Z3qrnrZkPNkVisJ1AY5FKulGYSAaRLlYvL5kuLs+g0e9NGmm2ivrP+8fE/0k4FAtQjRc3MzB4wcDR0HAu09euwdW+ySWLA99FEmWBEDbkglZ4kmjeTYw==
 66.135.52.84,192.168.1.15,hosted2.fedoraproject.org,hosted2 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnwvY9LaSl+ScqHLoy5TLvRv7+wm+5UNUSuxSWdEcmIITBC8yfuEQS2OhYoeLvq3jCppYkzMmaVVx/C14yt6yWhu42/63Ckh8BEDWkHTZyZhgUKIgHTDLnZeA1IfXORL0XdNoPgq/ZO5QH+LikX2He3rGgycTQHvEUo9nCc1VCPPxFi39FumbrR3jpM7vYntAU2MV53/DdPvVyysTtqCMd2c5IS6iJnhUzrNolNAiCwTbnOezH18Toh2majKTSkN0M8q721YUE1MBavsP6RT/59vp0+hhlPBcQUK84AB8sHNBxayKHhQzU6TIxdiyL4+193BLuVqODGfmMEjj45cjKQ==
 66.135.55.241,192.168.1.30,serverbeach4.fedoraproject.org,serverbeach4 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv8siawFDUtyLnNGsOZTnNsq5DMr6jiDClSL++dMdm+r3FofHDQ2PASb3Wa/iuxNyT+Os1cPtBrsPJlIb251nQpTn30N7wD4iWocFsRMDwhZ3kTaz2PUVg1MvTGqNMhwrxVrSarP+Q7sVrwaguxDo1CUijiS+QtGsy2Xf2kD0+w8lHAUYxYihZG0wB1aJu4tJwvlGQkSrrUoyF1m83IVmvIUqgkv4jnGLeaG45gWU9bDMzZztSbKRe6bBZJHK2VqrL+jPqxL/nDTecZJ7eq3jX0pDw/cR1/Jd+wKhD29+vmfD2tKH7oOWDLWWbb7iVfGXUCVguWwpDl2Pp60Z2jptFQ==
 66.135.55.242,192.168.1.31,serverbeach5.fedoraproject.org,serverbeach5 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt8/5QF2P6S4ttkEzAC2U2+vvG3Jzv0P4cdLVIjhT4cSAZy2LR9LvzjGujQNzQaymcAm56hzel2segibOcJgzHCV0pbIr2vNqEGSYiU1L/qeKSXKi7Lh0bGtOy6YRqQqhI03Kg4bRNUrDqVW0GZbvQZ6aO8ZSALWE5a/MBp39ZzPbm82qNSixbKfHetVlQKqgYg98SK+sGjHMh1MWbDk623VdYtiikmiPxKG4yd0sqAqmZgJDB7aiNIXayf6iqZLHXQbHNo+/2dj6p7XFKInXJfJIVe0cBLqA4dPQokZikottni8Zw7oVSrHn0JGQt7U8r6jQl9kVDXlzEaWrJp0d1w==
-- 
1.6.6.1

If this gets approved I'll push it immediately. if not we'll have to wait until after the change freeze is lifted.

Pushed, puppet should pick it up in a half hour.

Login to comment on this ticket.

Metadata