From 1209b162a9aefc0050c2970e4a9c08c8fa19945b Mon Sep 17 00:00:00 2001 From: Andreas Dangel Date: Thu, 24 Oct 2019 20:27:19 +0200 Subject: [PATCH] [ci] Explicitly configure known_hosts for web.sourceforge.net --- .travis.yml | 4 ---- .travis/setup-secrets.sh | 23 +++++++++++++++++++++++ 2 files changed, 23 insertions(+), 4 deletions(-) diff --git a/.travis.yml b/.travis.yml index d9d873b479..dcccc528ae 100644 --- a/.travis.yml +++ b/.travis.yml @@ -1,7 +1,3 @@ -addons: - ssh_known_hosts: - - web.sourceforge.net - language: java env: diff --git a/.travis/setup-secrets.sh b/.travis/setup-secrets.sh index 51b769c311..19344e7d8e 100755 --- a/.travis/setup-secrets.sh +++ b/.travis/setup-secrets.sh @@ -22,3 +22,26 @@ mkdir -p "$HOME/.gpg" gpg --batch --import .travis/release-signing-key-82DE7BE82166E84E.gpg rm .travis/secrets.tar rm .travis/release-signing-key-82DE7BE82166E84E.gpg + +echo "Setting up .ssh/known_hosts..." +# +# https://sourceforge.net/p/forge/documentation/SSH%20Key%20Fingerprints/ +# +# run locally: +# ssh-keyscan web.sourceforge.net | tee -a known_hosts +# +# verify fingerprints: +# ssh-keygen -F web.sourceforge.net -l -f known_hosts +# # Host web.sourceforge.net found: line 1 +# web.sourceforge.net RSA SHA256:xB2rnn0NUjZ/E0IXQp4gyPqc7U7gjcw7G26RhkDyk90 +# # Host web.sourceforge.net found: line 2 +# web.sourceforge.net ECDSA SHA256:QAAxYkf0iI/tc9oGa0xSsVOAzJBZstcO8HqGKfjpxcY +# # Host web.sourceforge.net found: line 3 +# web.sourceforge.net ED25519 SHA256:209BDmH3jsRyO9UeGPPgLWPSegKmYCBIya0nR/AWWCY +# +# then add output of `ssh-keygen -F web.sourceforge.net -f known_hosts` +# +echo 'web.sourceforge.net ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2uifHZbNexw6cXbyg1JnzDitL5VhYs0E65Hk/tLAPmcmm5GuiGeUoI/B0eUSNFsbqzwgwrttjnzKMKiGLN5CWVmlN1IXGGAfLYsQwK6wAu7kYFzkqP4jcwc5Jr9UPRpJdYIK733tSEmzab4qc5Oq8izKQKIaxXNe7FgmL15HjSpatFt9w/ot/CHS78FUAr3j3RwekHCm/jhPeqhlMAgC+jUgNJbFt3DlhDaRMa0NYamVzmX8D47rtmBbEDU3ld6AezWBPUR5Lh7ODOwlfVI58NAf/aYNlmvl2TZiauBCTa7OPYSyXJnIPbQXg6YQlDknNCr0K769EjeIlAfY87Z4tw==' >> "$HOME/.ssh/known_hosts" +echo 'web.sourceforge.net ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCwsY6sZT4MTTkHfpRzYjxG7mnXrGL74RCT2cO/NFvRrZVNB5XNwKNn7G5fHbYLdJ6UzpURDRae1eMg92JG0+yo=' >> "$HOME/.ssh/known_hosts" +echo 'web.sourceforge.net ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQD35Ujalhh+JJkPvMckDlhu4dS7WH6NsOJ15iGCJLC' >> "$HOME/.ssh/known_hosts" +