Arch Linux

berbae

Member

From: France

Registered: 2007-02-12

Posts: 1,304

What to do with the new AUR SSH HostKeys?

What config file have I to change to use the new keys and how ?
In $HOME/.ssh/known_hosts it seems to be written the keys not the fingerprints.
Should I edit this file manually?

This is not very clear for me, so I need help with the ssh connexion configuration.
Thanks in advance.

seth

Member

Registered: 2012-09-03

Posts: 60,970

Re: What to do with the new AUR SSH HostKeys?

https://wiki.archlinux.org/index.php/Ar … _if_needed
=> https://wiki.archlinux.org/index.php/Ma … e_checking
==> https://wiki.archlinux.org/index.php/Gn … public_key
==> https://wiki.archlinux.org/index.php/Gn … _keyserver

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

progandy

Member

Registered: 2012-05-17

Posts: 5,279

Re: What to do with the new AUR SSH HostKeys?

seth, I don't think that was the question. Berbae wants to know how to get ssh to allow connections with the new host key when the old one is stored in known_hosts.

@berbae: You can edit the known_hosts file manually or remove the old key with a command and then verify the fingerprint during the next connection attempt.

ssh-keygen -R aur.archlinux.org

Last edited by progandy (2020-08-13 14:15:41)

---

| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |

Phydoux

Member

Registered: 2020-03-02

Posts: 36

Re: What to do with the new AUR SSH HostKeys?

seth, I don't think that was the question. Berbae wants to know how to get ssh to allow connections with the new host key when the old one is stored in known_hosts.

@berbae: You can edit the known_hosts file manually or remove the old key with a command and then verify the fingerprint during the next connection attempt.

ssh-keygen -R aur.archlinux.org

I just looked in my /.ssh/known_hosts file and aur.archlinux.org is not in there. I am also having trouble downloading things that need a GPG key from the AUR. Specifically, ttf-unifont.

The keys listed at arch.org... Do those need to go into this file? If so, how? Do they go with aur.archlinux.org? If so, How?

All I have in that file are the gitlab.com and github.com key (probably for my accounts there), all of my SSH keys.

Last edited by Phydoux (2020-08-16 23:27:59)

progandy

Member

Registered: 2012-05-17

Posts: 5,279

Re: What to do with the new AUR SSH HostKeys?

I am also having trouble downloading things that need a GPG key from the AUR. Specifically, ttf-unifont.

Those are GPG keys, not SSH host keys. seth has linked the relevant documentation. The default hkps keyserver pool does not answer most of the time, so you'll have to change to a different keyserver or pool in ~/.gnupg/dirmngr.conf

An SSH host key for the AUR is only necessary if you maintain a package.

---

| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |