Gerrit: new SSH host key / fingerprint

--===============3719665869945344947==
Content-Type: multipart/alternative; boundary="0000000000007437b6065724cc58"

--0000000000007437b6065724cc58
Content-Type: text/plain; charset="UTF-8"

Hello Gerrit users,

tomorrow, around 1800 UTC [1]; Gerrit will be getting a new SSH host key.

So when you interact with Gerrit via SSH you will see a new fingerprint and
might be asked if you trust it.

We have already added it to the known_hosts file provided by wmf-laptop.

You can also directly import the auto-generated known_hosts file if you
like. [2] or verify it on Wikitech [3] and adding it right here:

*SHA256:njCmWMsshq3MqQxyIFO36UNwCwzTamXERqylF1XJhd8 ssh server at
gerrit.wikimedia.org <http://gerrit.wikimedia.org> (ED25519)*

The old existing RSA key will stay valid in parallel until August 4th when
it will be removed.

The related ticket is T240266 [4].

[1]
https://wikitech.wikimedia.org/wiki/Deployments#deploycal-item-20260722T1500
[2] https://config-master.wikimedia.org/known_hosts
[3]
https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints/gerrit.wikimedia.org:29418
[4] https://phabricator.wikimedia.org/T240266

-- 
Daniel Zahn <[email protected]>
Site Reliability Engineer

--0000000000007437b6065724cc58
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hello Gerrit users,</div><div><br></div><div>tomorrow=
, around 1800 UTC [1]; Gerrit will be getting a new SSH host key.</div><div=
><br></div><div>So when you interact with Gerrit via SSH you will see a new=
 fingerprint and might be asked if you trust it.</div><div><br></div><div>W=
e have already added it to the known_hosts file provided by wmf-laptop.</di=
v><div><br></div><div>You can also directly import the auto-generated known=
_hosts file if you like. [2] or verify it on Wikitech [3] and adding it rig=
ht here:</div><div><br></div><div><code><b>SHA256:njCmWMsshq3MqQxyIFO36UNwC=
wzTamXERqylF1XJhd8 ssh server at <a href=3D"http://gerrit.wikimedia.org">ge=
rrit.wikimedia.org</a> (ED25519)</b></code></div><div><br></div><div>The ol=
d existing RSA key will stay valid in parallel until August 4th when it wil=
l be removed.</div><div><br></div><div>The related ticket is T240266 [4].</=
div><div><br></div><div>[1]=C2=A0<a href=3D"https://wikitech.wikimedia.org/=
wiki/Deployments#deploycal-item-20260722T1500">https://wikitech.wikimedia.o=
rg/wiki/Deployments#deploycal-item-20260722T1500</a></div><div>[2] <a href=
=3D"https://config-master.wikimedia.org/known_hosts">https://config-master.=
wikimedia.org/known_hosts</a></div><div><div>[3] <a href=3D"https://wikitec=
h.wikimedia.org/wiki/Help:SSH_Fingerprints/gerrit.wikimedia.org:29418">http=
s://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints/gerrit.wikimedia.org:=
29418</a></div>[4] <a href=3D"https://phabricator.wikimedia.org/T240266">ht=
tps://phabricator.wikimedia.org/T240266</a></div><div><br></div><span class=
=3D"gmail_signature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_s=
ignature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><div>Daniel Z=
ahn &lt;<a href=3D"mailto:[email protected]" target=3D"_blank">dzahn@wiki=
media.org</a>&gt;<br></div><div>Site Reliability Engineer</div></div></div>=
</div>

--0000000000007437b6065724cc58--

--===============3719665869945344947==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Wikitech-l mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/
--===============3719665869945344947==--