Page MenuHomePhabricator

Provide Gerrit's SHA256 fingerprint (instead/in addition to MD5)
Closed, ResolvedPublic

Event Timeline

He7d3r raised the priority of this task from to Needs Triage.
He7d3r updated the task description. (Show Details)
He7d3r added a project: Gerrit.
He7d3r subscribed.
hashar claimed this task.
hashar subscribed.

You can grab the key using:

$ ssh-keyscan -p 29418 gerrit.wikimedia.org > /tmp/gerrit.key
$ ssh-keygen -lf /tmp/gerrit.key 
1024 dc:e9:68:7b:99:1b:27:d0:f9:fd:ce:6a:2e:bf:92:e1 gerrit.wikimedia.org (RSA)

If you have a recent ssh you can:

ssh-keygen -E sha256 /tmp/gerrit.key

Note OpenSsh 6.8 introduced the FingerprintHash option, so you can do: