-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Hi all,
As of right now, the ssh known_hosts file has been basically rewritten to use SSH CA certificates. The actual SSH keys for our servers should not have changed, but the known_hosts file has been shortened signifcantly.
Do note that for some servers (specifically cloud), might have now switched from their ECDSA to RSA keys, which means that if you only had the host-specific known_hosts line, you might need to add the CA.
You should be able to replace your entire ~/.ssh/known_hosts for Fedora with https://admin.fedoraproject.org/ssh_known_hosts .
Please let me know if you find any hosts that don't work yet, as they should just need the hostname or domain in the list.
Patrick
infrastructure@lists.fedoraproject.org