Re: [Savannah-help-public] Host key verification failure

[Sylvain Beucler]

On Fri, Aug 07, 2009 at 11:35:20PM -0700, Mark Polesky wrote:
> 
> I'm a GNU LilyPond developer on Windows XP. Last week my SSH
> keys apparently stopped working. My lilypond/.git/config file
> contains this:
> 
> [remote "origin"]
>     fetch = +refs/heads/*:refs/remotes/origin/*
>     url = ssh://address@hidden/srv/git/lilypond.git
> [branch "master"]
>     remote = origin
>     merge = refs/heads/master
> 
> 
> My .ssh/config file is:
> 
> Host sv
> Hostname 199.232.41.69
> User mpolesky
> 
> 
> and my .ssh/known_hosts file has:
> 
> 199.232.41.69 ssh-rsa AAAA....
> 
> 
> When I do "git pull" I get:
> 
> $ git pull
> The authenticity of host 'git.sv.gnu.org (199.232.41.69)' can't be 
> established.
> RSA key fingerprint is 80:5a:b0:0c:ec:93:66:29:49:7e:04:2b:fd:ba:2c:d5.
> Are you sure you want to continue connecting (yes/no)? no
> Host key verification failed.
> fatal: The remote end hung up unexpectedly

The first time you connect to git.sv.gnu.org, you need to verify the
host signature (which is correct here) and accept it. If you type no,
SSH assumes you do not trust this host and closes the connection.
Cf. http://savannah.gnu.org/maintenance/SshAccess
 
> And this is the output of "ssh -v":
> 
> $ ssh -v address@hidden
> OpenSSH_4.6p1, OpenSSL 0.9.8e 23 Feb 2007
> debug1: Reading configuration data /c/Documents and Settings/Marta/.ssh/config
> debug1: Connecting to 199.232.41.69 [199.232.41.69] port 22.
> debug1: Connection established.
> debug1: identity file /c/Documents and Settings/Marta/.ssh/identity type -1
> debug1: identity file /c/Documents and Settings/Marta/.ssh/id_rsa type -1
> debug1: identity file /c/Documents and Settings/Marta/.ssh/id_dsa type 2
> debug1: Remote protocol version 2.0, remote software version OpenSSH_5.1p1 
> Debia
> n-5
> debug1: match: OpenSSH_5.1p1 Debian-5 pat OpenSSH*
> debug1: Enabling compatibility mode for protocol 2.0
> debug1: Local version string SSH-2.0-OpenSSH_4.6
> debug1: SSH2_MSG_KEXINIT sent
> debug1: SSH2_MSG_KEXINIT received
> debug1: kex: server->client aes128-cbc hmac-md5 none
> debug1: kex: client->server aes128-cbc hmac-md5 none
> debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
> debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
> debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
> debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
> debug1: Host '199.232.41.69' is known and matches the RSA host key.
> debug1: Found key in /c/Documents and Settings/Marta/.ssh/known_hosts:1
> debug1: ssh_rsa_verify: signature correct
> debug1: SSH2_MSG_NEWKEYS sent
> debug1: expecting SSH2_MSG_NEWKEYS
> debug1: SSH2_MSG_NEWKEYS received
> debug1: SSH2_MSG_SERVICE_REQUEST sent
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug1: Authentications that can continue: publickey
> debug1: Next authentication method: publickey
> debug1: Trying private key: /c/Documents and Settings/Marta/.ssh/identity
> debug1: Trying private key: /c/Documents and Settings/Marta/.ssh/id_rsa
> debug1: Offering public key: /c/Documents and Settings/Marta/.ssh/id_dsa
> debug1: Authentications that can continue: publickey
> debug1: No more authentication methods to try.
> Permission denied (publickey).
> 
> 
> I've already re-installed git and OpenSSH, the above results are
> after re-installation. Everything was going fine and then suddenly
> stopped, and I haven't been able to push for a week, and nobody can
> figure this out.
> 
> Is there any hope?

Well apparently your SSH key isn't accepted. Check your SSH keys in
your user account configuration (i.e. does your id_dsa.pub matches
what's in the Savannah web interface?)

-- 
Sylvain