On Thu, 19 Jan 2012 10:18:43 EST, "Jonathan E. Magen" writes:
>Removing the file and regenerating it did fix that issue. Should I
>worry about safety concerns when posting the known_hosts file?

see man sshd, section on known_hosts format:
you'd be telling us what the public keys of the hosts that you connect to
are (if your known_hosts file has hashed hostnames. if those target hosts 
are internet-visible, then anybody can retrieve their public keys anyway - 
if somebody was to exhaustively collect host keys on the net, they'd learn 
that you had connected, too. if your known_hosts contains unhashed hostnames,
then those would be disclosed immediately.)

if that's unacceptable then you'll have to do a bit of debugging 
yourself:

run a diff -ub between problematic and new known_hosts file, and
look for obvious oddities (trailing spaces, odd formatting and so on).
if there is something fishy, create a known_hosts file with just the fishy
stuff and check if paramiko fails.

if nothing shows up, then do a binary search
(= cut file in half, try both halves, ignore the half without trouble 
and repeat the cut-test exercise with the other half 
until done) with the problematic known_hosts file until you find the one key 
that makes paramiko fail and submit just that one entry.

regards
az


-- 
Alexander Zangerl + GnuPG Keys 0x42BD645D or 0x5B586291 + http://snafu.priv.at/
<malaclypse> The general rule on about people on IRC seems to be 
"Attractive, single, mentally stable: choose two"

Attachment: signature.asc
Description: Digital Signature

Reply via email to