[Cyberduck-trac] [Cyberduck] #8867: Changed fingerprint - still on 4.8

[Cyberduck]

#8867: Changed fingerprint - still on 4.8
---------------------------+------------------------------
 Reporter:  YesThatAllen   |         Owner:  dkocher
     Type:  defect         |        Status:  new
 Priority:  normal         |     Milestone:  4.8
Component:  sftp           |       Version:  Nightly Build
 Severity:  normal         |    Resolution:
 Keywords:  key            |  Architecture:  Intel
 Platform:  Mac OS X 10.9  |
---------------------------+------------------------------
Changes (by dkocher):

 * owner:   => dkocher
 * component:  core => sftp


Old description:

> I just upgraded to the latest snapshot, and still see this when
> connecting to hosts of mine
>
> > The fingerprint for the ECDSA key sent by the server is
> bc:d5:5d:36:a4:88:05:47:3d:8c:c0:a1:c2:79:5b:02.
>
> I see this with many Ubuntu 14 VPS hosts which I connect to (not sure if
> they happen on CentOS hosts)
>
> I do see new lines added to my known_hosts, often with the same signature
>
> {{{
> |1|9zJQi1kgtbav4hUbTpynNYrOMfk=|3iKfANR/mUwO+nnP30P80h9UPok= ecdsa-
> sha2-nistp256
> AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABABPP3MOu9kj6PR4UaRTZ/2tt2G79lZ6E9vz6ijp8bkcuKoLTkY4K14NO2TWB53IWd6Jw8G+d2MmbL0+DCqZCiNQ==
> |1|8VsGSG228W/EYlnCmbJTy8mhtuI=|I92YUz202+wnR29bC6pXyCQLRyM= ecdsa-
> sha2-nistp256
> AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABABPP3MOu9kj6PR4UaRTZ/2tt2G79lZ6E9vz6ijp8bkcuKoLTkY4K14NO2TWB53IWd6Jw8G+d2MmbL0+DCqZCiNQ==
> }}}
>

> I don't know that I have any fancy setup causing the IP
> addresses/hostname to be obscured, and wouldn't care if i didn't anymore
> but right now I'm getting stopped, having to say OK to the changed ECDSA
> key every time.
>
> I'm not sure if/how this is different from related issues:
>
> https://trac.cyberduck.io/ticket/8654
> https://trac.cyberduck.io/ticket/8175
> https://trac.cyberduck.io/ticket/8173

New description:

 I just upgraded to the latest snapshot, and still see this when connecting
 to hosts of mine

 > The fingerprint for the ECDSA key sent by the server is
 bc:d5:5d:36:a4:88:05:47:3d:8c:c0:a1:c2:79:5b:02.

 I see this with many Ubuntu 14 VPS hosts which I connect to (not sure if
 they happen on CentOS hosts)

 I do see new lines added to my known_hosts, often with the same signature

 {{{
 |1|9zJQi1kgtbav4hUbTpynNYrOMfk=|3iKfANR/mUwO+nnP30P80h9UPok= ecdsa-
 sha2-nistp256
 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABABPP3MOu9kj6PR4UaRTZ/2tt2G79lZ6E9vz6ijp8bkcuKoLTkY4K14NO2TWB53IWd6Jw8G+d2MmbL0+DCqZCiNQ==
 |1|8VsGSG228W/EYlnCmbJTy8mhtuI=|I92YUz202+wnR29bC6pXyCQLRyM= ecdsa-
 sha2-nistp256
 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABABPP3MOu9kj6PR4UaRTZ/2tt2G79lZ6E9vz6ijp8bkcuKoLTkY4K14NO2TWB53IWd6Jw8G+d2MmbL0+DCqZCiNQ==
 }}}


 I don't know that I have any fancy setup causing the IP addresses/hostname
 to be obscured, and wouldn't care if i didn't anymore but right now I'm
 getting stopped, having to say OK to the changed ECDSA key every time.

 I'm not sure if/how this is different from related issues:

  * #8654
  * #8175
  * #8173

--

-- 
Ticket URL: <https://trac.cyberduck.io/ticket/8867#comment:1>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows