git - How to prevent CI automation failures due to missing ssh key fingerprints? -


it known adding -o stricthostkeychecking=no ssh opens big mitm security hole. still when doing automation want avoid breaking build because not running on interactive mode.

it seems stricthostkeychecking has 3 modes, none of them being able cover case want auto-accept unknown keys if no conflicts.

  • ask: doesn't work automation
  • no: enables mitm, serious security concerns
  • yes: not work if fingerprint not known

so, how can make work in automation, auto-learning new keys failing if not match existing ones?

so, how can make work in automation, auto-learning new keys failing if not match existing ones?

this effective no option, when first public key man-in-the-middle.

you should initial key on different secure channel , store in ~/.ssh/known_hosts. 1 possibility use ssh certificates , trust certificate authority, not single keys.

the other possibility, if don't mind initial key setup, use ssh-keyscan, fetch keys server , store them in known_hosts:

ssh-keyscan host >> ~/.ssh/known_hosts

then using stricthostkeychecking yes need.


Comments

Post a Comment

Popular posts from this blog

aws api gateway - SerializationException in posting new Records via Dynamodb Proxy Service in API -

i getting "__type": "com.amazon.coral.service#serializationexception" as reply in postman & in test console in api gateway trying post record directly dynamodb using api proxy services.. referring aws article - https://aws.amazon.com/blogs/compute/using-amazon-api-gateway-as-a-proxy-for-dynamodb/ here's mapping { "tablename": "tablenamegoeshere", "item": { "id" : "$context.requestid" "eventname" : "$input.path('$.eventname')", "timestamp" : $input.path('$.timestamp'), "answers": "$util.parsejson($input.path('$.answers'))" } } update: did asked ... , worked if try add array of json objects gives me above same error - here's trying now. please - couldnt find on google well #set($inputroot = $input.path('$')) { "tablename": "answer", "item": {
Read more

asp.net - Problems sending emails from forum -

i have been redesigning site has message board, has been written guy looked after site. it has few problems , written in .asp , uses .mdb files database. you can see whole thing here . feel free post if helps, test thing have set using original files , new database. the basic problem when posts message, supposed email sent them, have posted it. when replies, originator supposed message, replier has been posted. i’d have thought @ point in process there should script/file in postmessage.asp? the postmessage.asp page below. <% option explicit %> <!-- #include virtual="common/adovbs.inc" --> <html> <head> <meta http-equiv="content-type" content="text/html; charset=windows-1252"> <meta name="generator" content="microsoft frontpage 4.0"> <meta name="progid" content="frontpage.editor.document"> <title>new page 2</title> <base target="_self"
Read more